Skip to content

The fine print

Privacy Policy

How your information is collected, used, and protected when you shop with me.

Last updated: October 20, 2026

In plain English

  • I collect your info to run your account, ship your orders, keep things secure, and make the shop better.
  • I never sell your personal information.
  • Stripe handles your card details — I never store your full card number.
  • Analytics cookies are only set if you say yes.
  • You can download your data or delete your account yourself under Account → Privacy & data — or email [email protected].

This summary is just to help — the full policy below is what actually applies.

On this page

Overview

Comic Repo LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at comicrepo.com. Please read this policy carefully. By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide directly

  • Account information: Name, email address, phone number, and password when you register.
  • Transaction data: Shipping addresses, payment details (processed by Stripe — we do not store full card numbers), and order history.
  • Communications: Messages you send to our support team through the contact form or email.
  • Account preferences: Watchlist items, collection entries, saved searches, and notification settings.

Information from Google sign-in

If you choose to sign in with Google, we receive your name, email address, and profile identifier from Google. We use this information solely to create and authenticate your Comic Repo account. We do not post to your social media accounts or access your contacts, friends lists, or other social data.

Information collected automatically

  • Usage data: Pages visited, search queries, items viewed, and time spent on the Service.
  • Device data: IP address, browser type, operating system, and device identifiers.
  • Cookies: Session cookies for authentication, preference cookies for your browsing experience, and — only if you accept them in the cookie banner — analytics cookies to help us understand usage. See our Cookie section below.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your identity
  • Process and fulfill your orders, and send related notifications
  • Personalize your browsing experience and provide relevant recommendations
  • Send you transactional emails (order confirmations, shipping updates, return confirmations)
  • Send you marketing emails if you have opted in (you may opt out at any time)
  • Detect, investigate, and prevent fraudulent or prohibited activity
  • Comply with legal and tax obligations
  • Improve the Service through aggregated analytics and user research
  • Respond to your support inquiries and contact form submissions

3. How We Share Your Information

We do not sell your personal information. We share it only in these circumstances:

  • Order fulfillment: We pack and ship every order ourselves. Your shipping address and order details are shared with our shipping carrier solely to deliver your order.
  • Payment processing: Payment information is processed directly by Stripe. We receive only a transaction confirmation and last-four-digits reference — never your full card number.
  • Service providers: Email service providers, cloud hosting, and analytics partners who assist us in operating the Service. All such providers are contractually bound to protect your data and may not use it for their own purposes.
  • Legal requirements: When required by law, court order, or subpoena, or to protect the rights, property, or safety of Comic Repo LLC, our users, or the public.
  • Business transfers: In connection with a merger, acquisition, or sale of substantially all assets, with 30 days' prior notice to registered users.

4. Authentication & Security

We use AWS Cognito to manage authentication. Your password is never stored in plain text — it is hashed using industry-standard algorithms. We support two-factor authentication with an authenticator app (TOTP) and strongly recommend enabling it for your account.

We use TLS/HTTPS encryption for all data in transit. Despite these measures, no system is completely secure. If you discover a security vulnerability, please report it responsibly to [email protected].

5. Cookies

We use the following types of cookies:

  • Strictly necessary: Session cookies required for authentication, cart functionality, and security. These cannot be disabled.
  • Functional: Cookies that remember your preferences (cookie consent choice, sort order, etc.).
  • Analytics: Aggregated, anonymized data to understand how the Service is used and to help us improve it. Analytics cookies and scripts only load after you choose "Accept all" in the cookie banner.

You can manage cookie preferences using the consent banner that appears on your first visit, by resetting your choice under Account → Privacy & data, or by adjusting your browser settings. Disabling strictly necessary cookies will prevent you from signing in or using the cart.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Transaction and order records are retained for 7 years as required for tax and legal compliance. If you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate personal data (you can update most data directly in your account settings).
  • Erasure: Request deletion of your personal data, subject to legal retention obligations.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing of your data for direct marketing at any time.
  • Restriction: Request that we restrict processing of your data while a dispute is resolved.

How to request data deletion

You can delete your account yourself when signed in, under Account → Privacy & data. You can also contact us at [email protected] with the subject line "Account Deletion Request," including the email address associated with your account. We will complete deletion within 90 days, subject to any legal retention requirements. Transaction records may be retained for up to 7 years as required by tax law.

If you signed in with Google, deleting your Comic Repo account removes all data we received from Google. To also revoke Comic Repo's access on Google's side, visit your Google account's third-party access settings.

How to request a data export

You can download a copy of your data yourself when signed in, under Account → Privacy & data. You can also contact us at [email protected] with the subject line "Data Export Request." We will respond within 30 days with your data in a machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

8. U.S. State Privacy Rights

Depending on the state in which you reside, you may have additional privacy rights under applicable state law. This section addresses rights under the California Consumer Privacy Act (CCPA/CPRA) and similar laws in Virginia (VCDPA), Colorado (CPA), Texas (TDPSA), and other states with comprehensive privacy legislation.

California residents (CCPA/CPRA)

California residents have the right to: (1) know what personal information we collect, use, disclose, and sell; (2) delete personal information we hold about them; (3) opt out of the sale or sharing of personal information; (4) correct inaccurate personal information; and (5) limit the use of sensitive personal information.

We do not sell or share your personal information as defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA/CPRA without your consent.

California residents may submit requests to know, delete, or correct their personal information by contacting us at [email protected]. We will not discriminate against you for exercising your rights. We will verify your identity before fulfilling your request.

Other U.S. states

Residents of Virginia, Colorado, Texas, Connecticut, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising. To exercise these rights, contact us at [email protected].

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal information, please contact us at [email protected] and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy-related questions or to exercise your rights, contact our Privacy Team at [email protected] or write to us at:

Comic Repo LLC
Privacy Team
Phoenix, AZ 85001
United States