Privacy Policy

Product Sage Collectibles, DBA Mystery Pull ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit mystery.productsagecollectibles.com (the "Website").

1. Information We Collect

We collect only the information necessary to provide our services:

• Personal information: Your email address, name, and shipping address when you make a purchase or create an account.
• Payment information: We do not collect or store your credit card numbers. All payment data is handled directly and securely by our payment processor, Stripe.
• Technical data: We automatically collect basic technical information such as your IP address, browser type, and device information to keep the Website secure and functioning properly.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your mystery pull purchases
• Verify your identity using email One-Time Passwords (OTPs)
• Ship physical collectibles to you
• Process trade-ins and manage your site credit balance
• Communicate with you about orders, support requests, and account updates
• Detect and prevent fraud or abuse of our systems
• Improve our Website and services

3. Third-Party Services

We rely on trusted third-party service providers to operate our Website. We share only the minimum data required for each provider to perform its specific function:

• Stripe: Processes all payments (credit/debit cards, Apple Pay, Google Pay). Stripe handles your financial data securely under their own privacy policy.
• Resend: Sends email communications including OTP verification codes and order receipts.
• Vercel: Hosts our Website infrastructure.
• Shopify: Powers our main storefront (productsagecollectibles.com) and processes gift card redemptions.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Cookies and Tracking

We use minimal cookies strictly for essential functionality:

• Session cookies: Keep you logged in during your visit and maintain your authentication state.
• Stripe cookies: Required by our payment processor for fraud prevention and payment processing.

We do not use third-party marketing trackers, advertising pixels, or analytics services that track your browsing behavior across other websites.

5. Data Retention

We retain your personal information only as long as necessary to provide our services, maintain your site credit balance, and fulfill our legal, tax, and accounting obligations. Purchase records are retained for at least 7 years for tax compliance purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of your personal data (subject to legal retention requirements and any existing site credit balance)
• Opt out of non-essential communications

To exercise any of these rights, please contact us using the information in Section 9.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete the personal information we have collected, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• No sale of personal information: We do not sell your personal information to third parties.

To submit a CCPA request, email us at the address in Section 9. We will verify your identity before processing your request.

8. Children's Privacy

Our Website is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has provided us with personal information, we will delete that information and terminate the associated account promptly.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), hashed authentication tokens, and secure payment processing via Stripe. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: mpsales@productsagecollectibles.com
Website: mystery.productsagecollectibles.com