Privacy Policy
Effective November 1, 2026
Slabby (slabby.org) is operated by Wints ("Slabby", "we", "us"). This policy explains what we collect when you use Slabby, why, who we share it with, and the choices you have. Questions go to privacy@slabby.org.
What we collect
When you request a quote. The form asks for your name, your email address, your ZIP code, your project type, its approximate size and your timeline, and optionally your phone number. Along with it we record the request itself: the lots you saved (stone, yard and city), the page you were on, and an analytics identifier (explained below) so we can tell which pages lead to requests.
When you sign in with Google. Google shares your name, email address and a Google account ID with us; we never see your Google password. We keep these with your account, along with the lots you save and the lots whose yard details a quote has unlocked for you, so they follow you across devices. We also add your name and email to our customer database as a contact.
When you search by ZIP code. The search runs in your browser against inventory data the page has already loaded, so your ZIP code is not sent to us when you search. We record only the stone you searched and the first three digits of the ZIP code, as an analytics event.
When you browse. We use Google Analytics and Ahrefs Web Analytics to understand how the site is used: pages viewed, searches run, requests sent, where visitors come from, and general device, browser and approximate location information. Google Analytics sets cookies to do this; Ahrefs Web Analytics does not. Signing in sets one cookie of our own that keeps you signed in. Our hosting providers also keep standard server logs (IP address, browser, pages requested) for security and reliability.
When you use Slabby through an AI assistant. Slabby offers a connector that lets AI assistants (such as Meta's Muse, Claude or ChatGPT) search Slabby's inventory and send quote requests for you. When you ask an assistant to search, it sends us the search itself: the stone, material or look you asked about, a ZIP code or city, and any filters such as thickness or size. Unlike a search on our site, that ZIP code or city does reach us. We receive no name, email address or other identity information with a search. We record each search (what was searched, the time, and which assistant sent it), and our hosting provider's logs record the IP address of the assistant's servers. When you ask an assistant to request a quote, it sends us the same details our quote form asks for (your name, email address, ZIP code, project details, and optionally your phone number) together with the lots you're interested in. We handle that exactly like a form request, and we also note which assistant sent it. We never receive your conversation with the assistant, your account with the assistant's provider, or anything you told the assistant beyond what it passes to Slabby for that search or request.
We don't ask for your street address or payment details, and we don't collect sensitive information.
How we use it
- To answer your request: confirm the stone is available at the yard and introduce you to a fabricator who works with that yard.
- To send you one email in reply to each request. We don't add you to a newsletter or marketing list unless you sign up for one separately.
- To understand which stones, pages and areas people are interested in, and to improve the site.
- To answer searches and quote requests that AI assistants send for you, and to limit how much any one assistant or user can request.
- To keep the site secure and working.
Who we share it with
Fabricators and distributors, for your request. When you ask us to check availability or introduce you to a fabricator, we share the details of your request (your first name, email, the stone, the yard, your timeline and general location) with the fabricator we introduce you to, and the stone and timeline with the distributor so they can confirm availability. Fabricators may pay us for these introductions. We share your details only with businesses connected to the request you made.
Service providers who run parts of Slabby for us and may process your information on our behalf: Netlify (website hosting and form handling), HighLevel (our customer database and email), Turso (the database behind sign-in and saved lots), Google (sign-in and Analytics), Ahrefs (Web Analytics), and Cloudflare (image delivery and DNS).
AI assistants. When an assistant uses Slabby for you, our reply (inventory results, or confirmation that your request was sent) goes back to that assistant. The assistant's provider (for example Meta, Anthropic or OpenAI) is not our service provider: how it handles your conversation, including our reply, is governed by that provider's own privacy policy, not this one. We don't send the assistant's provider anything else about you. Our replies contain the same inventory information the site shows publicly; yard names, addresses and lot numbers are released only in response to a quote request, as on the site.
Aggregate figures. We may tell distributors how many requests their inventory received, without names or contact details.
Legal reasons. If the law requires it, or to protect our rights, users or the public.
We don't sell your personal information to data brokers or share it for cross-site advertising, and we don't use it, or anything you send through an AI assistant, to train AI models.
Cookies and analytics
Google Analytics uses first-party cookies (named _ga and _ga_*) to recognise returning
visitors and measure activity. We don't use advertising cookies. You can block cookies in your browser settings or
install Google's Analytics opt-out browser add-on. The
site works without them, except that signing in needs our sign-in cookie (sb_s), which only keeps you
signed in. Ahrefs Web Analytics doesn't use cookies.
How long we keep it
We keep request records for as long as we need them to handle your request and follow up, and for up to 24 months after your last request, unless you ask us to delete them sooner. This includes requests sent through an AI assistant. Records of searches sent by AI assistants are kept for up to 14 months. Google Analytics data is kept for 14 months.
Your choices and rights
You can ask us to show you the personal information we hold about you, correct it, or delete it, by emailing privacy@slabby.org. Residents of states with their own privacy laws (including California, Colorado, Connecticut, Texas and Virginia) have these rights and may also opt out of any sale or sharing of personal information; email us and we'll act on the request within the time the law allows. We won't treat you differently for using any of these rights. We may need to confirm your identity first, usually by replying from the email address you used.
Security
We use reputable providers, encrypted connections (HTTPS) and limited access to protect your information. No system is perfectly secure, so we can't guarantee absolute security.
Children
Slabby is not directed to children under 16, and we don't knowingly collect information from them. If you think a child has sent us information, email us and we'll delete it.
Where your information is processed
Slabby is operated from the United States, and our service providers process information in the United States.
Changes
If we change this policy we'll update it here and change the effective date above. If a change is significant, we'll say so on the site.
Contact
Wints, operating Slabby: privacy@slabby.org