Privacy Policy

The comic collector's marketplace — built by collectors, for collectors.

1. Who we are

LongStash is developed and operated by Soul Comics. If you have any questions about this policy, please contact us at the address below.

2. Information we collect

We collect the following information when you use LongStash:

• Account information — your email address and password (stored securely via Supabase Auth with hashed passwords). You choose a collector name (username), which other collectors see; it is never taken from your email address, and new accounts start with a neutral name such as collector-1234 until you pick one. You may also choose an avatar colour.
• Comic data — titles, issue numbers, grades, prices, publisher information, and condition notes that you enter into your collection or marketplace listings.
• Photos — cover images you photograph or upload from your gallery. These are stored in our secure cloud storage (Supabase Storage).
• Private notes — personal notes and purchase prices you add to your collection. These are stored privately and are never shared with other users or shown on marketplace listings.
• Trade and transaction data — details of trade proposals you send or receive, including comic offers and cash adjustments.
• Want list data — comics you add to your want list, including maximum prices and grade preferences.
• Your city (optional) — the town you live in, if you choose to set it. Never your address or GPS position. See section 7.
• Comic shops you add (optional) — a shop's name, town, street address and details such as opening hours and website.

3. How we use your information

We use the information we collect to:

• Create and manage your account
• Display your collection and listings to other users on the marketplace
• Match your want list against available marketplace listings
• Facilitate trade proposals between users
• Show your username and rating on listings and trade proposals
• Improve and maintain the LongStash service

We do not use your information for advertising, and we do not sell your data to any third party.

4. What is shared with other users

When you list a comic on the marketplace, other users can see:

• Your username and seller rating
• The comic's title, issue, grade, publisher, year, asking price, and condition notes you choose to include
• Your cover photo (if uploaded)
• Whether you accept trades or cash only

The following is never shared with other users:

• Your email address
• Your password
• Your purchase price / what you paid for a comic
• Your private notes
• Your want list contents

5. Data storage and security

Your data is stored securely using Supabase, a managed cloud database platform built on PostgreSQL. All data is encrypted in transit using HTTPS. We use Row Level Security (RLS) policies to ensure users can only access their own private data.

Supabase is hosted on AWS infrastructure in the EU region. For more information on Supabase's security practices, visit supabase.com/security.

6. Photos and camera access

LongStash requests access to your camera and photo library solely to allow you to photograph or select comic cover images. We do not access your camera or photos for any other purpose. Photos are uploaded to secure cloud storage and associated only with the comic record you create.

7. Your city, the collector map and comic shops

You can set the city you live in (Edit profile → Your city). It is off unless you choose it, and you can remove it at any time.

• Only the city is stored — never your street address or GPS position. If you use "Use my phone's location", your phone's position is used once to look up the nearest town and is not stored.
• Hidden or shown — if you choose Hidden, nobody else sees your city. If you choose Show my city, you are counted on the collector map in your town and your listings can appear in other collectors' "Near me" searches.
• Small places are protected — while fewer than three collectors in a town show their city, they are shown only by region or country, so no one can be picked out.
• No one can look your city up directly — other collectors only see counts per place, the names of collectors who chose to be shown there, and distances rounded to 5 km measured between town centres.
• Comic shops are businesses: the shop details collectors add (including the street address) are visible to all logged-in users. "Open in maps" hands the address to your phone's maps app; LongStash itself uses no map service.

The world map and city list come from open data (Natural Earth and GeoNames) that is stored in the app and in our own database; no location data is sent to those projects.

8. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data, collection, listings, and photos will be permanently deleted within 30 days. Trade records may be retained in anonymised form for service integrity purposes.

9. Your rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update or correct your personal information via the app's Edit Profile screen
• Deletion — request deletion of your account and all associated data
• Portability — request an export of your collection data

To exercise any of these rights, contact us using the details below.

10. Children's privacy

LongStash is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

11. Third-party services

LongStash uses the following third-party services:

• Supabase — database, authentication, and file storage (supabase.com/privacy)
• Expo / EAS — app build and distribution platform (expo.dev/privacy)
• Google Play — app distribution on Android (policies.google.com/privacy)

We do not use advertising networks, analytics platforms, or tracking SDKs.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify users of significant changes via the app or by email. The date at the top of this page reflects the most recent update. Continued use of LongStash after changes are posted constitutes acceptance of the updated policy.

13. Contact us