Privacy Policy
Last updated: April 12, 2026
1. Introduction
I Has Stuff ("ihasstuff.com", "the Service", "the Platform", "we", "us", or "our") is committed to transparency about how we collect, use, share, and protect your information. This Privacy Policy applies to all users of the Service and describes our data practices in detail. By using the Service, you consent to the data practices described in this policy. This Privacy Policy is incorporated into and subject to our Terms of Service.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, username, password, profile photo, and biography
- Collection data: Checklists, items, ownership statuses, conditions, quantities, ratings, personal notes, images, custom field values, and all metadata you enter about your collectibles
- Financial information: Prices (retail, bought, sale), valuation data, and transaction information. Payment processing is handled by Stripe; we do not store full credit card numbers
- Communications: Messages sent through the messaging system, comments, change requests, and reports
- Marketplace data: Listings, trade offers, and transaction details
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, searches performed, items viewed, time spent, click patterns, and interaction sequences
- Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences
- Cookies and tracking technologies: Session cookies, persistent cookies, local storage, and similar technologies to maintain your session, remember preferences, and analyze usage patterns
- Log data: Server logs including access times, referring URLs, error logs, and API request data
- Location data: Approximate location derived from IP address
2.3 Information from Third Parties
- Authentication providers: If you sign in via Google, Facebook, or Apple, we receive your name, email, and profile photo as authorized by you
- Payment processors: Stripe provides us with transaction confirmation, subscription status, and billing information (not full card numbers)
- Market data providers: Pricing data from third-party sources including eBay sold comparables and market intelligence services
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate the Service: Including collection tracking, marketplace features, social features, notifications, and analytics dashboards
- Personalize your experience: Recommendations, relevant content, and customized features based on your collection and activity
- Communications: Transactional emails, notifications, account alerts, marketing communications (with opt-out), and customer support
- Analytics and improvement: Understanding usage patterns, identifying bugs, measuring feature adoption, and improving the Service
- Safety and security: Fraud detection, spam prevention, content moderation, and enforcing our Terms of Service
- Data products and market intelligence: Creating aggregated, anonymized, and de-identified datasets, analytics reports, pricing indices, market trend analyses, and other data-derived products
- Advertising: Displaying relevant advertisements and measuring advertising effectiveness, including interest-based advertising based on your collection interests and activity
- Machine learning and AI: Training, developing, and improving machine learning models and artificial intelligence systems, including for content categorization, pricing prediction, recommendation systems, and other product features
- Research: Conducting internal and third-party research on collecting trends, market dynamics, consumer behavior, and related topics
- Legal compliance: Complying with legal obligations, responding to legal process, and protecting our rights
4. How We Share Your Information
4.1 Public Information
Certain information is publicly visible by design: your public profile (username, name, bio, profile photo), public checklists, public collections, marketplace listings, comments, and achievement badges. You control the visibility of your collections through privacy settings.
4.2 Service Providers
We share information with third-party service providers who perform services on our behalf, including hosting (Cloudflare), payment processing (Stripe), email delivery (SendGrid), analytics, and customer support tools. These providers are contractually obligated to use your information only as necessary to provide their services to us.
4.3 Data Partners and Advertisers
We may share, sell, or license aggregated, anonymized, or de-identified data to third-party partners, including but not limited to: data brokers, market research firms, advertising networks, analytics companies, academic institutions, financial services companies, insurance companies, retailers, manufacturers, and other businesses. This data may include collection trends, pricing data, market intelligence, demographic insights, and behavioral analytics. While we take steps to aggregate and de-identify this data, we cannot guarantee that such data cannot be re-identified by recipients.
4.4 Advertising Partners
We may share information with advertising partners to deliver targeted advertisements based on your interests, collection activity, and usage patterns. This may include sharing device identifiers, cookie data, browsing activity, and interest categories with advertising networks and demand-side platforms.
4.5 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on the Service of any change in ownership or uses of your information.
4.6 Legal Requirements
We may disclose your information if required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to an emergency.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. After account deletion, we may retain certain information as required by law, for legitimate business purposes (including fraud prevention, analytics, and dispute resolution), or as necessary to enforce our agreements. Aggregated, anonymized, and de-identified data derived from your information may be retained indefinitely and is not subject to deletion requests, as it is no longer personally identifiable. Backup copies may persist in our systems for up to 90 days after deletion.
6. Data Security
We implement commercially reasonable administrative, technical, and physical security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication protocols, regular security assessments, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.
7. Your Rights and Choices
7.1 Account Settings
You can access and update your account information through the Settings page. You can control the visibility of your collections through per-checklist privacy settings. You can manage push notification preferences in your account settings.
7.2 Data Export
You can export your collection data at any time using the CSV, PDF, or Excel export features within the Service.
7.3 Account Deletion
You may request deletion of your account by contacting us at [email protected]. Upon deletion, we will remove your personal profile information and account credentials. Please note that: (a) content you posted publicly (comments, public checklists) may persist after deletion; (b) data that has been aggregated, anonymized, or de-identified is not subject to deletion; (c) we may retain certain data as required by law or for legitimate business purposes; and (d) data shared with third parties prior to deletion cannot be recalled.
7.4 Marketing Communications
You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your notification preferences. Opting out of marketing communications does not affect transactional or account-related emails.
7.5 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. To exercise these rights, contact us at [email protected]. We will not discriminate against you for exercising your CCPA rights. Please note that aggregated and de-identified data is not considered personal information under the CCPA.
7.6 European Residents (GDPR)
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Our legal bases for processing include: consent (which you may withdraw at any time), performance of our contract with you (the Terms of Service), legitimate interests (analytics, security, service improvement), and legal obligations. To exercise your rights, contact us at [email protected].
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Service, remember your preferences, analyze usage, and deliver targeted advertising. Types of cookies we use include:
- Essential cookies: Required for the Service to function (authentication, session management)
- Analytics cookies: Help us understand how the Service is used and identify areas for improvement
- Advertising cookies: Used to deliver relevant advertisements and track advertising effectiveness
- Preference cookies: Remember your settings and preferences (view modes, theme)
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.
9. Children's Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at [email protected].
10. International Data Transfers
Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions. We take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy and applicable law.
11. Do Not Track Signals
Some browsers transmit "Do Not Track" (DNT) signals. We currently do not respond to DNT signals. We will update this policy if we adopt a DNT standard in the future.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 30 days before taking effect. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
I Has Stuff
Privacy inquiries: [email protected]
General support: [email protected]
Website: https://ihasstuff.com
