Our privacy commitment: Crack Packs does not sell or rent personal information and does not provide it to third parties for their own independent marketing. We collect and retain only the information reasonably needed to run accounts, verification, payments, orders, shipping, seller tools, support, fraud prevention, and legal compliance.
Information we collect
Depending on how you use the service, we may collect:
- Account information such as email, name, birth date, phone, address, Crack Packs User ID, role, and account status.
- Authentication and security information such as passkey public-credential data, session records, protected IP hashes, rate-limit events, and security logs.
- Seller and employee eligibility information such as legal-profile fields, Stripe Identity session references, verification status, and internal approval history.
- Marketplace information such as listings, inventory, bids, purchases, streams, thumbnails, show schedules, shipping profiles, messages, and support requests.
- Commerce information such as order history, Stripe customer and payment references, payment-method brand and last four digits where provided by Stripe, refunds, subscription status, credit balances, shipment details, carrier service, and tracking events.
Information we do not store
Crack Packs does not store full payment-card numbers, card security codes, or full identity-document images. Stripe handles payment credentials and Stripe Identity document capture. Crack Packs generally receives only provider references, limited payment-method details, and the status needed to determine account eligibility or complete a transaction.
How we use information
We use information to create and authenticate accounts; verify account eligibility; prevent duplicate, fraudulent, or abusive activity; process payments and subscriptions; calculate credits and rebates; reserve inventory; operate listings, auctions, and streams; calculate shipping; fulfill and track orders; issue approved refunds; operate referrals and rewards; provide support; send transactional messages; maintain records; improve reliability; enforce policies; and comply with law.
Service providers and permitted disclosures
We disclose limited information only as needed to operate the service, complete a user-requested transaction, protect the platform, or comply with law. Providers may include Cloudflare for hosting, security, databases, streaming, and email routing; Stripe for payments, billing, fraud controls, tax features when enabled, refunds, and identity verification; EasyPost and carriers for rates, labels, delivery, and tracking; and transactional email providers for account and order messages. We may also disclose information to professional advisers, payment or fraud investigators, courts, regulators, or law enforcement when reasonably necessary or legally required.
Seller, buyer, and public information
Information intentionally published in a seller store, listing, live-show page, profile, review, or public message can be viewed by other users and may be indexed or reshared. Do not publish private contact, payment, identity-document, or sensitive personal information in public fields. Order addresses and private account details are not intended to be public.
Retention
We keep information only for as long as reasonably needed for the purpose collected, including account operation, order fulfillment, accounting, tax, payout, chargeback, fraud prevention, safety, support, legal, and dispute requirements. Identity-verification status and provider references may be retained to prevent duplicate seller identities and document prior access decisions. When records are no longer reasonably needed, we delete, de-identify, or securely dispose of them where practical and permitted.
Security
Measures may include encrypted transport, secret storage, signed provider webhooks, passkeys, verified accounts, restricted owner tools, role checks, rate limits, access logging, and provider security controls. No internet or storage system can guarantee absolute security. Report a suspected account or data-security issue promptly to support@crackpacks.com.
Cookies and browser storage
The site uses browser storage and may use cookies for signed-in sessions, security state, account mode, referral or offer attribution, and preferences. Cloudflare and Stripe may use cookies or similar technology for security, fraud prevention, checkout, identity verification, and service operation. Blocking required storage may prevent login, verification, or payment.
Your choices and privacy rights
You may request access, correction, deletion, or an export of appropriate account information by emailing support. Depending on where you live, additional rights may apply. We may need to verify the requester and may retain records required for completed transactions, taxes, payouts, security, fraud prevention, disputes, or law. Marketing opt-outs do not stop necessary account, security, billing, order, or verification messages.
Children and international users
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Information may be processed in the United States and other locations used by our providers. Mandatory privacy rights that apply in a user's location remain applicable.
Changes and contact
We may update this Policy prospectively and will change the effective date when material revisions are posted. Questions and privacy requests may be sent to support@crackpacks.com.