Privacy.

Last Updated: October 15, 2026

This Privacy Policy describes how the company that operates SLAB (together with its affiliates, "SLAB," "we," "us" or "our") collects, uses, discloses and otherwise processes personal information in connection with the website located at slabhats.com, the SLABoratory, the Proofs board and our other online services (the "Services"), and with your purchases of our Products. It forms part of, and is incorporated into, our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given in the Terms of Service.

"Personal information" means information that identifies, relates to, describes or could reasonably be linked, directly or indirectly, with an identified or identifiable individual. It does not include de-identified or aggregated information.

SLAB uses personal information, and permits advertising partners to collect it through the Services, to show you SLAB advertising on other websites, apps and services and to measure that advertising. Under some state laws this may be a "sale" of personal information, "sharing" for cross-context behavioral advertising or "targeted advertising." You may opt out at any time (Section 9). SLAB does not use personal information to train artificial intelligence models, including large language models.

1. Scope.

This Privacy Policy applies to personal information SLAB processes as a controller through the Services and in fulfilling Orders. It does not apply to third-party websites or services, including the checkout pages of our e-commerce platform, which are governed by their own privacy policies. The Services are intended only for persons located in the United States.

2. Personal Information We Collect.

In the preceding twelve (12) months, SLAB has collected, and may continue to collect, the following categories of personal information:

SLAB does not intentionally collect sensitive personal information. SLAB and its advertising partners may use personal information to create audiences for advertising (Section 5.4), but SLAB does not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

3. How We Use Personal Information.

SLAB uses personal information for the following business purposes:

(a) to provide the Services, including generating Designs in the SLABoratory, operating Accounts and the one-time code sign-in, and creating shared Design links;

(b) to review, display and operate Proofs; count Pre-Orders; process, fulfill, ship and support Orders and Private Runs; sew Credited Names into Products; and process returns;

(c) to send transactional communications, including sign-in codes, order and Proof updates and receipts, and, where you have subscribed, First Look and back-in-stock emails;

(d) to display and promote Proofs, the Vault and Re-Releases, including Credited Names and any signatures, portraits and biographies provided;

(e) to pay any Royalty a Designer accepts, and to keep financial and tax records as required by law;

(f) to analyze use of the Services and to debug, maintain and improve them, including through session replay and heatmaps;

(g) to protect the Services and their users, including by detecting and preventing fraud, abuse, automated access and security incidents, verifying that requests are made by humans, and enforcing usage limits;

(h) to advertise SLAB's Products to you and to others on other websites, apps and services, and to measure that advertising, including through cookies, pixels and similar technologies and by providing hashed email addresses or other identifiers to advertising partners to match audiences (Sections 5.4 and 6.2); and

(i) to comply with law, respond to lawful requests and legal process, and establish, exercise or defend legal claims.

SLAB does not use personal information to make decisions that produce legal or similarly significant effects concerning you.

4. The SLABoratory and Artificial Intelligence.

4.1 Processing by AI Providers. When you use the SLABoratory, your prompts, any images you upload and the current state of your Design are transmitted to third-party AI Providers that generate AI Output. AI Providers process this information to provide their services to SLAB, subject to their own terms, and may retain it for a limited period, including to monitor for abuse. SLAB does not use this information to train artificial intelligence models.

4.2 Reference Searches. To generate AI Output, the text of a request, or search terms drawn from it, may be used to search publicly available sources through third-party search services, including search features built into AI Providers' services, for example to find a reference image of a real logo, object or person named in the request. Images you upload are not submitted to search services.

4.3 Your Submissions. Please do not submit personal information, such as postal addresses or payment card numbers, in prompts, and do not upload images of other people without their consent.

5. Cookies, Session Replay and Similar Technologies.

5.1 Session Replay. SLAB uses a third-party analytics provider's session replay technology on every page of the Services. That technology records your interactions with the Services, including the pages you view, where you click, tap and scroll, mouse movements and the content displayed on your screen, which may include your SLABoratory conversation and images you upload. It also collects device, browser and screen information and approximate location derived from your IP address. Session replay may capture information you enter on, or that is displayed by, the Services. SLAB uses these recordings and the related heatmaps to understand how the Services are used and to identify errors and usability problems. The provider processes this information on SLAB's behalf as a service provider and retains recordings for a limited period. By using the Services, you acknowledge that your interactions with the Services are recorded as described in this Section 5.1.

5.2 Cookies and Local Storage. SLAB and its service providers use the following technologies:

5.3 Your Choices. You may block or delete cookies and clear local storage through your browser settings, and you may block analytics and session replay technologies using browser privacy settings or a tracker-blocking extension; the Services will continue to function, although blocking SLAB's own cookies will require you to sign in again and may limit your use of the SLABoratory. To request deletion of session recordings of your visits, contact SLAB as described in Section 8. To opt out of targeted advertising, see Section 9.

5.4 Third-Party Tracking and Advertising. SLAB permits advertising partners, including social media platforms and advertising networks, to use cookies, pixels and similar technologies on the Services to collect information about your online activities over time and across different websites and services, to deliver interest-based advertising for SLAB and to measure it. SLAB's analytics provider collects information through the Services solely on SLAB's behalf. SLAB does not provide the content of your SLABoratory prompts or uploaded images to advertising partners, and will not use personal information collected before October 15, 2026 for targeted advertising without your consent.

6. How We Disclose Personal Information.

6.1 Service Providers. SLAB discloses personal information to service providers that process it on SLAB's behalf and under contractual obligations, for the business purposes described in Section 3:

(a) e-commerce platform and payment processors: product catalog, checkout, payment processing and order management;

(b) hosting, content delivery, security and database providers: operation and security of the Services, bot detection, storage of shared Designs, and records of Accounts, usage and form entries;

(c) AI Providers: generation of AI Output (Section 4);

(d) search services: reference searches using the text of requests (Section 4.2);

(e) analytics providers: session replay and analytics (Section 5.1);

(f) email service providers: delivery of sign-in codes, receipts and the marketing emails to which you subscribe;

(g) manufacturers and shipping carriers: production of Products, including Credited Names, and delivery of Orders; and

(h) professional advisers, including lawyers, accountants and auditors.

6.2 Advertising Partners. SLAB may disclose identifiers (such as cookie and device identifiers and hashed email addresses), information about your online activity on the Services and commercial information to advertising partners, which use it to deliver, target and measure SLAB's advertising and may also use it for their own purposes under their own terms and privacy policies. You may opt out as described in Section 9.

6.3 Public Information. Information you post to the Proofs board, including a Proof's Design, name, Credited Name, handle and description, is publicly available, as are a Brim Master's signature, portrait and biography. A shared Design may be viewed by anyone with its link, and so may a Design saved in the SLABoratory by anyone with that Design's own link.

6.4 Legal Requirements and Protection. SLAB may disclose personal information where it believes in good faith that disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of SLAB, its users or others, or to investigate fraud or violations of the Terms of Service.

6.5 Business Transfers. SLAB may disclose personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of its business or assets, subject to this Privacy Policy.

6.6 With Your Consent. SLAB may disclose personal information for other purposes with your consent or at your direction.

7. Retention.

SLAB retains personal information for as long as reasonably necessary for the purposes for which it was collected, including as follows, and then deletes or de-identifies it:

8. Your Privacy Rights and Choices.

8.1 Your Rights. Depending on your state of residence, you may have the right to (a) confirm whether SLAB processes your personal information and access it; (b) correct inaccuracies; (c) delete personal information you provided or that SLAB obtained about you; (d) obtain a copy of your personal information in a portable format; and (e) opt out of targeted advertising, the sale or sharing of personal information, and profiling. SLAB extends rights (a) through (e) to all U.S. residents; Section 9 explains how to opt out of targeted advertising and any sale or sharing.

8.2 Submitting a Request. To exercise your rights, email hello@slabhats.com with the subject "Privacy," stating the right you wish to exercise. SLAB will verify your request by confirming control of the email address associated with your personal information and may request additional information where necessary. You may designate an authorized agent to submit a request on your behalf, subject to verification of the agent's authority and of your identity.

8.3 Response. SLAB will respond within forty-five (45) days after receiving a verifiable request, which may be extended by an additional forty-five (45) days where reasonably necessary, with notice to you. Certain information may be exempt from deletion, including records SLAB must retain by law and Credited Names already sewn into Products.

8.4 Appeals. If SLAB declines to take action on your request, you may appeal by replying to SLAB's decision within a reasonable time. SLAB will respond to an appeal within sixty (60) days, and, if the appeal is denied, you may contact the attorney general of your state.

8.5 Non-Discrimination. SLAB will not discriminate against you for exercising your privacy rights.

8.6 Marketing Emails. You may unsubscribe from marketing emails at any time using the link in any such email. You will continue to receive transactional communications.

9. Your Advertising Choices.

9.1 Opting Out. You may opt out of targeted advertising, and of any sale or sharing of your personal information, at any time: (a) by enabling Global Privacy Control in your browser or a browser extension, which SLAB treats as a valid request to opt out for that browser; or (b) by emailing hello@slabhats.com with the subject "Do Not Sell or Share," which SLAB applies to your email address and Account, including by no longer providing your email address to advertising partners for audience matching. SLAB will act on an opt-out as soon as practicable and in any event within the time required by law.

9.2 Other Choices. You can also limit interest-based advertising through the settings of your browser, device and the advertising platforms you use, and through industry opt-out programs such as those of the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). These choices apply to the browser or device on which you make them. After you opt out, you may still see SLAB advertising that is not personalized.

9.3 Do Not Track. Because there is no common standard for Do Not Track signals, the Services do not respond to them. SLAB treats Global Privacy Control as described in Section 9.1.

10. Children.

The Services are not directed to children under thirteen (13), and SLAB does not knowingly collect personal information from children under thirteen (13). The SLABoratory, Proofs and Private Runs are available only to persons eighteen (18) years of age or older. SLAB does not sell the personal information of, or process it for targeted advertising to, any person it knows, or willfully disregards, is under eighteen (18). If you believe that a child under thirteen (13) has provided personal information to SLAB, contact SLAB and it will delete the information.

11. Security.

SLAB maintains reasonable administrative, technical and physical safeguards designed to protect personal information. Payment information is processed by our e-commerce platform and payment processors. No method of transmission or storage is completely secure, and SLAB cannot guarantee absolute security. SLAB will notify affected individuals of a security breach as required by applicable law.

12. Location of Processing.

SLAB is located in the United States, and the Services are intended for persons located in the United States. SLAB's service providers may process personal information in the United States and in other countries in which they operate.

13. State-Specific Disclosures.

13.1 California. This Privacy Policy is intended to comply with the California Online Privacy Protection Act. The categories of personal information SLAB collects, their sources and the purposes for which they are used are described in Sections 2 and 3, and the categories of recipients in Section 6. SLAB's use of advertising partners described in Sections 5.4 and 6.2 may constitute a "sale" or "sharing" of personal information under the California Consumer Privacy Act, to the extent that law applies to SLAB, and California residents may opt out as described in Section 9. SLAB does not use or disclose sensitive personal information for purposes other than those permitted by law. Under California Civil Code § 1798.83 ("Shine the Light"), SLAB does not knowingly disclose personal information to third parties for their own direct marketing purposes.

13.2 Connecticut. Connecticut residents may exercise the rights described in Section 8 under the Connecticut Data Privacy Act, including the right to appeal. SLAB processes personal information for targeted advertising and may engage in activities that constitute a sale of personal data, as described in Sections 5.4 and 6.2, and you may opt out as described in Section 9. SLAB does not process personal information for profiling in furtherance of decisions that produce legal or similarly significant effects, and does not use it to train large language models. If SLAB denies an appeal, you may contact the Connecticut Attorney General at portal.ct.gov/ag.

13.3 Nevada. Nevada residents may opt out of the sale of covered information, as defined in Nevada Revised Statutes Chapter 603A, as described in Section 9.

13.4 Other States. Residents of other states with comprehensive consumer privacy laws may exercise the rights available under those laws as described in Section 8.

14. Changes to This Privacy Policy.

SLAB may update this Privacy Policy from time to time. The updated Privacy Policy will be posted on the Services with a new Last Updated date. For material changes, SLAB will provide notice by email or by a conspicuous notice on the Services before the changes take effect, and will obtain your consent where required by law.

15. Contact Information.

Questions about this Privacy Policy or SLAB's privacy practices may be sent to hello@slabhats.com (subject: "Privacy") or to SLAB, Attn: Privacy, at the mailing address shown at the foot of this page.