Privacy Policy
Cardboard Magic, Inc. (Cardboard Magic, we, us, or our) operates Cardboard Magic. This Privacy Policy explains the personal information we collect, why we use it, when we disclose it, and the choices available to you.
1. Information we collect
Depending on how you use the service, we may collect:
- account information, including display name, email address, verification status, and authentication identifiers;
- eligibility information, including date of birth, age attestation, jurisdiction, and how that jurisdiction was determined;
- transaction and inventory information, including deposits, account-balance entries, pack purchases, draw results, vaulted cards, buybacks, refunds, and related audit records;
- shipping information, including recipient name, address, contact details, and tracking information, when shipping becomes available and you request it;
- payment and deposit information received from providers, such as provider transaction identifiers, amount, status, wallet or chain details, fraud signals, and chargeback status;
- communications, support requests, marketing preferences, and records that a required notice was sent; and
- technical information, including IP address, session and security identifiers, request logs, browser or device information, and coarse location used for security, availability, rate limiting, and legal eligibility.
We do not ask you to give us a crypto-wallet private key or seed phrase. Payment-card information is entered with the payment provider and is not intended to be stored by Cardboard Magic.
2. Sources of information
We receive information directly from you, automatically from your browser or device, from our own transaction and inventory systems, and from service providers such as authentication, email, payment, deposit, fraud-prevention, identity-verification, hosting, and shipping providers.
3. How we use information
We use personal information to:
- create, secure, and support accounts;
- verify eligibility, age, identity, location, payments, and deposits;
- operate pack purchases, draws, odds records, vault custody, buybacks, refunds, and shipping;
- maintain accurate ledgers, inventory records, proofs, and legal or compliance audit trails;
- prevent fraud, abuse, chargebacks, security incidents, and prohibited activity;
- send transactional, security, policy, and service communications;
- send marketing only after separate consent, where required, and honor opt-outs;
- improve, diagnose, and measure the service; and
- comply with law, enforce our agreements, and protect people, property, and rights.
4. How we disclose information
We may disclose information to vendors that perform services for us, including hosting, authentication, email delivery, payment and crypto-deposit processing, fraud prevention, identity verification, analytics, and shipping. They may use information only for the contracted service and their own legal obligations.
We may also disclose information to professional advisers, insurers, auditors, regulators, law enforcement, courts, transaction counterparties, or a successor in a merger, financing, acquisition, reorganization, or sale, when reasonably necessary and legally permitted.
Public product surfaces may show a display name, draw result, verification record, leaderboard position, or collection only as described by the relevant feature and privacy control. Account balance, private contact information, payment details, and buyback activity are not intended to be public.
We do not sell personal information for money and do not share it for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide legally required choices before doing so.
5. Cookies and similar technology
We use cookies and similar local storage needed for sign-in, session security, preferences, and core service operation. We may use limited measurement technology to understand reliability and usage. We do not currently use third-party advertising cookies.
6. Retention
We retain information for as long as reasonably necessary for the purposes above. Active account, ownership, transaction, ledger, draw, legal-acceptance, fraud, dispute, tax, and compliance records may be retained for the life of the account and afterward for applicable limitation, tax, chargeback, anti-fraud, or regulatory periods. Some financial and audit records are append-only so that completed transactions cannot be silently changed.
Expired or consumed email-verification records are scheduled for deletion after 7 days. Expired or revoked session records are scheduled for deletion after an additional 14 days. A live session may last up to 30 days. Support, shipping, provider, security, and backup records follow operational and legal retention needs. When information is no longer needed, we delete, aggregate, or de-identify it where reasonably feasible.
7. Your choices and rights
You may update available account settings, withdraw marketing consent, make a privacy request, or ask a question by contacting support. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to appeal our response. We may need to verify your identity. We may retain information that law permits or requires us to retain, including transaction, security, legal-acceptance, and dispute records.
8. Security
We use administrative, technical, and physical safeguards designed for the nature of the information we hold, including access controls, encrypted connections, hashed authentication tokens, and restricted secrets. No system is completely secure. Please use only official Cardboard Magic pages and report suspected account compromise promptly.
9. Children
Cardboard Magic is not intended for anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us so we can investigate and take appropriate action.
10. United States operation
Cardboard Magic is operated from the United States. If you access it from elsewhere, your information may be processed in the United States, subject to applicable law and service availability.
11. Changes to this Policy
We may update this Policy prospectively. Each published version has an effective date and remains in the version history. We will provide additional notice or request renewed agreement when required by law.
12. Contact
- Cardboard Magic, Inc.
- Registered office: c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA
- Email: cardboardmagic@cloudreply.net