Privacy Policy

1. Information we collect

Sensitive information. Government ID images and the face match from your selfie are sensitive information, and some states treat the face match as biometric data. We collect them only for identity verification, with your consent at the time you verify.We never use them for any other purpose.

Launch waitlist. If you join the launch waitlist, we collect your email address, your state of residence, your confirmation that you are 18 or older and when you gave it, and when you confirmed your email. We use double opt-in: we email you a link, and we add you to the list only after you confirm. Until then, the only copy of your address is our email delivery provider's record of the confirmation email it sent. We use the list for one purpose: to send you a single launch announcement. Apart from that, you'll only get the confirmation email, and a note if you sign up again with an address that's already on the list. The waitlist uses your IP address only to limit how often sign-ups can be sent, in memory, and doesn't store it. Our hosting provider's request logs do record it (see "Device, security and fraud logs" in Section 3.2). Our email delivery provider (Section 2.2) sends these emails and holds the list on our behalf. We keep waitlist information until 12 months after we send the launch announcement, and then delete it. If you unsubscribe, we keep your address marked as unsubscribed, with the date, so we don't email you again, and we delete that record along with the rest of the list. To have your waitlist information deleted sooner, email support@yoinks.co. We'll delete it within 30 days and keep no copy of your address, so if you join again later you'll need to confirm again.

2. How we use and share information

2.1 How we use it

• Run the Service: create your account, open packs, record results, keep your inventory and wallet, and process sell-backs and shipments.
• Prove fairness: keep seeds and results so you and we can verify any opening.
• Check eligibility: confirm your age, state and identity, and block Restricted States.
• Prevent fraud and abuse: spot duplicate accounts, stolen cards, chargeback abuse, bots and money laundering.
• Support responsible play: apply your purchase limits and self-exclusion, and keep self-excluded users from re-registering.
• Communicate: send receipts, shipping updates, security alerts and policy changes. We send marketing emails only if you opt in, and you can unsubscribe at any time.
• Announce our launch: if you join the waitlist, send you one launch announcement.
• Improve the Service: fix bugs and understand how features are used, mostly through aggregated data.
• Meet legal duties: keep tax and transaction records, respond to lawful requests, and enforce our Terms.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We don't use automated decisions that have legal effects on you, other than eligibility and fraud checks. You can ask a person to review those (Section 4).

2.2 Who we share it with

We share personal information only with the service providers who help us run the Service. Each one is bound by contract to use it only for that purpose. Our payment processor also collects device information directly to detect fraud, under its own privacy policy.

We may also share information:

• with law enforcement or regulators when the law requires it, or to protect people, the Service or our rights;
• with professional advisers such as lawyers, auditors and tax preparers;
• with a buyer or successor in a merger, acquisition or sale of assets, under this policy;
• with your consent.

Public activity. Your openings, wins and wallet aren't shown to other users.

3. Cookies, retention, security and children

3.1 Cookies and similar technology

• Essential: these keep you signed in, secure your session, prevent fraud and apply geo checks. The Service can't work without them.
• Analytics: these help us see which features are used and where errors happen. They are off unless you opt in. We honor Global Privacy Control signals: when your browser sends one, we don't set them.
• We don't use advertising cookies, third-party ad pixels, cross-device tracking or session recording.

3.2 How long we keep information

When the retention period ends, we delete the data or de-identify it.

3.3 Security

We protect information with encryption in transit, access controls, least-privilege staff access, and audit logs on money and account actions. Card data is handled only by our PCI-compliant payment processor. No system is perfectly secure. If a breach affects you, we'll notify you as the law requires.

3.4 Children

The Service is only for adults 18 and older. We don't knowingly collect information from anyone under that age. If we learn we have, we close the account and delete the information, except what we must keep by law. Parents can contact us at support@yoinks.co.

4. Your rights and choices

4.1 Choices anyone can make

• Access and update: view and edit your profile and addresses in account settings.
• Marketing emails: unsubscribe through the link in any marketing email. You'll still get receipts and account notices.
• Analytics: we don't run analytics on the Service right now. If we add them, they'll stay off until you opt in, you'll be able to change your choice at any time from a "Cookie settings" link in the site footer, and a Global Privacy Control signal will always be honored.
• Delete your account: go to account settings or email support@yoinks.co. We delete or de-identify your data, except what we must keep for the reasons in Section 3.2, such as tax records, verifiable results and self-exclusion.

4.2 US state privacy rights

Depending on your state (including California, Colorado, Connecticut, Virginia, Texas, Oregon and others with similar laws), you may have the right to:

1. know what personal information we collect, use and disclose, and get a copy of it;
2. correct inaccurate information;
3. delete your information, subject to legal exceptions;
4. opt out of the sale or sharing of personal information, or targeted advertising (we don't do either);
5. limit the use of sensitive information (we use it only to verify identity);
6. appeal if we deny your request.

To make a request, email support@yoinks.co. We verify your request by matching it to your account, and we answer within 45 days. An authorized agent can make a request for you with your signed permission. We won't treat you differently for using your rights. If we deny a request, reply to our decision to appeal. If we deny the appeal, you can contact your state attorney general.

California notice at collection. We collect the categories in Section 1 for the purposes in Section 2.1, and disclose them to the recipients in Section 2.2 for business purposes. Until we launch, we collect only launch waitlist information and the device information our hosting provider logs when you visit. We haven't sold or shared personal information, including that of consumers under 16. Retention periods are in Section 3.2.

4.3 Changes to this policy

We'll post any update here with a new "Last updated" date. For material changes, we'll also email you or show a notice in the Service before they take effect.

4.4 Contact us

Yoinks, LLC · Attn: Privacy · 2611 W Royal Ln Apt 2905, Irving, TX 75063 · support@yoinks.co