Draft: this text is a starting point and must be reviewed by a lawyer before launch.
Privacy Policy
Last updated [date]
[Company name] is responsible for the personal data described here.
What we collect
- Account: email address and a hashed password.
- Activity: packs and boxes opened, items won, sold or shipped, and your full transaction history.
- Payments: deposit and withdrawal records, including wallet addresses and transaction hashes.
- Shipping: the name, address and phone number you give for each shipment.
- Identity checks: carried out by Sumsub. They process your ID document and selfie and tell us the result; we do not store the documents ourselves.
- Security: IP addresses of sign-in attempts, kept for up to 24 hours to stop password guessing.
Why we use it
- To run your account, process payments and ship your items.
- To meet legal duties such as age checks and anti-money-laundering rules.
- To prevent fraud and keep the service secure.
Who we share it with
Our payment provider (NOWPayments), our identity provider (Sumsub), our hosting and database providers, and shipping carriers, only as needed for these purposes. [List and countries to be confirmed.]
How long we keep it
[Retention periods to be set, including the period required by anti-money-laundering law.]
Your rights
[Access, correction, deletion and complaint rights for the regions you serve, and how to use them.]
Contact
[privacy email]