Privacy Policy
Last updated: May 1, 2026
We’re a small shop and we take your privacy seriously. Here’s exactly what we collect, where it goes, and how to get rid of it if you ever want to.
Who We Are
QuickPulls is a free comic book pre-order tool operated by His & Hers Comics, a retail comic book store located at 40 Bank Row, Greenfield, MA 01301. This policy explains how we handle information collected through the QuickPulls web app at quickpulls.com.
What We Collect
When you submit a pull list, we collect:
- Your name — so we know who the order belongs to
- Your email address — so we can contact you about your order if needed
- Your comic selections — the titles, publishers, prices, and quantities you picked
- A wishlist link (token) — we generate a long random string that becomes your private bookmarkable link to your pull list. This token is saved in your browser and travels in the URL when you revisit your list. See “Your Wishlist Link” below.
- Timestamps — the date and time you submitted each pull list, so the shop can sort orders by cycle and confirm what was placed when
That’s the full list. We do not collect passwords, payment information, physical addresses, phone numbers, or any other personal data through this app.
How We Use Your Information
Your information is used for one purpose: to process your comic book pre-orders. Specifically:
- Your name and email are attached to your pull list so the store can identify and fulfill your order
- Your comic selections are stored so the store can review orders and place them with distributors
- His & Hers Comics staff can view all submitted pull lists through an admin tool in order to fulfill orders — this is the only way your list is “shared” with anyone
- The store may contact you by email if there’s a question about your order. We do not send automated emails — any email you receive from us is typed by a human at the shop.
Your Wishlist Link
When you submit a pull list, QuickPulls gives you a private bookmarkable link — for example, /my-list.html?token=... — with a long random string at the end. That token is your key to your list.
- Anyone with the link can view your list, so treat it like a password and don’t share it publicly
- The token is also saved in your browser’s local storage so you can come back to your list without re-entering your name or email
- Shop staff can also see your list through the admin tool for order fulfillment
- If you lose your link, contact the shop and we can look it up by email
What We Don’t Do
- We do not sell, rent, or trade your information with anyone outside of His & Hers Comics and the service providers listed below
- We do not send marketing emails, newsletters, or promotional messages
- We do not use cookies for tracking or advertising
- We do not use any third-party analytics, advertising, or tracking services
- We do not profile or score you, or share your activity with social networks
Service Providers
QuickPulls runs on a few infrastructure services. None of them receive your name, email, or comic selections for any purpose other than running the app:
- Railway (railway.com) — our US-based hosting provider. Railway runs our web server and PostgreSQL database, and may keep short-lived operational logs and encrypted backup snapshots of the database. Backups age out per Railway’s standard retention (typically 7–30 days).
- Cloudinary (cloudinary.com) — serves the comic cover images you see in the catalog. When your browser loads a cover, Cloudinary sees your IP address and User-Agent. We do not send Cloudinary your name, email, or order data.
- Penguin Random House & Lunar Distribution — some cover images load directly from these distributors’ image servers. Same as Cloudinary — they see your IP for image loads only, nothing else.
Local Storage
QuickPulls uses your browser’s local storage for two things:
- Filter and tip preferences (the publishers you’re viewing, whether you’ve seen the welcome tip) — this stays on your device and is never sent to our servers
- Your wishlist token — this was generated by our server when you submitted, and your browser will include it when you revisit your list. So it does travel between your device and our server, but only for you to access your own list.
You can clear all of this any time through your browser’s settings.
Data Retention & Deletion
We keep your name, email, and order history so the shop can reference past pulls. There’s no automatic expiry — we keep it as long as you’re a customer.
To delete your data: click this link to email the store or call (413) 325-8133. We’ll remove your name, email, wishlist token, and order history from our live database within 7 business days. Encrypted backup snapshots that Railway keeps may briefly retain a copy until they age out (typically within 30 days), after which the data is gone everywhere.
Security
Your data is stored on secure, hosted servers (Railway managed PostgreSQL, encrypted at rest and in transit). The app forces HTTPS for all traffic. While no system is 100% secure, we take reasonable precautions and we don’t store anything we don’t need.
We may briefly log technical errors that contain your email address for debugging purposes. These error logs are not used for marketing or analytics, and Railway purges them on its own schedule.
Children’s Privacy
QuickPulls is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through the app, please contact us and we will remove it.
Changes to This Policy
If we make changes to this policy, we’ll update the date at the top of this page. This is a small, simple app for a local comic shop — we don’t anticipate major changes.
Contact Us
Questions about this policy or your data? Reach out: