Privacy Policy

Effective date: November 18, 2026

1 Who we are and what this policy covers

DEVINTHATDOOD LLC, doing business as DOOD Packs (we, us, or our), operates doodpacks.store. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you browse the store, create an account, purchase or reveal a pack, receive merchandise, or contact us. Our mailing address and privacy contact appear below. Third-party services you visit separately have their own privacy policies.

2 Information you provide

Contact and account information: name, email address, mailing and billing addresses, telephone number if requested, account username, date of birth and state of residence (to confirm you are 18 or older and live in a state where we sell), and authentication information.

Order and collection information: purchases, payment status and transaction references, purchased pack positions, assigned items, reveal history, shipment details, returns, and support or dispute records. If you enter our sweepstakes by mail, we also collect the name, mailing address, email address, and other details on your entry.

Communications and preferences: messages and attachments you send, support interactions, consent records, marketing preferences, and survey responses you choose to provide.

Verification information: Do not send government identification, payment card numbers, or sensitive information through ordinary support email unless we provide a secure and justified collection process.

3 Information collected automatically and from others

When you use the site, our systems and service providers may receive IP address, browser and device details, operating system, referral information, timestamps, page activity, error logs, and cookie or similar identifiers. Approximate location may be derived from IP address. The precise tools in use and their purposes are listed below.

Payment providers may give us transaction status, limited payment details such as card brand and last four digits, billing details, and fraud or dispute information. Shipping providers supply tracking and delivery updates. If you sign in with Google, we receive your email address and Google account ID, and we use them only to create and secure your account.

4 How we use information

We use personal information to operate accounts and checkout; confirm eligibility and purchase limits; process payments; assign inventory and provide digital reveals; maintain order and assignment records; ship physical items; respond to requests; resolve returns and disputes; prevent fraud and abuse; secure and troubleshoot the site; maintain tax and business records; and comply with legal obligations.

We use marketing contact information to send optional promotions only under the preferences and permissions that apply. Operational messages about payments, assignments, shipment, security, or policy changes are separate from promotional messages. Analytics and advertising uses, if enabled, are described below. We do not make additional uses materially inconsistent with the collection purpose without the notice or consent required by law.

5 Payments and service providers

Our payment provider is Stripe. Payment credentials are collected through that provider's payment interface. We do not receive or store full card numbers. Do not enter payment credentials into chat or ordinary email.

We disclose relevant information to providers performing services for us, including site hosting and infrastructure, payment processing, fraud prevention, email delivery, customer support, shipping, and any analytics actually enabled. These providers receive information appropriate to their function and are subject to contractual restrictions where required.

The principal providers and functions are: Cloudflare (cloudflare.com) for site hosting, data storage, and security; Stripe (stripe.com) for payment processing and fraud prevention; Google (google.com) for sign-in with Google; Resend (resend.com) for account and order emails; EasyPost (easypost.com) or Pirate Ship (pirateship.com), and the postal carriers they connect to, for shipping labels and tracking; and Pushover (pushover.net) for order and system alerts sent to our staff. We do not use an analytics provider.

6 Other disclosures and public activity

We may disclose relevant information to professional advisers, authorities, or other parties when reasonably necessary to comply with law, respond to valid legal requests, protect rights or safety, prevent fraud, or establish or defend a legal claim. In a proposed merger, asset sale, or similar business transaction, information may be disclosed subject to applicable safeguards and notice requirements. We may also disclose information at your direction or with your permission.

After a drop is revealed, other signed-in collectors in that drop can see each buyer's username and the cards that buyer pulled. Your name, email address, and mailing address are never shown. Our public proof page, which anyone can view, shows pack numbers and cards only, with no usernames. If we add other public features, we will tell you what becomes visible before you use them.

7 Cookies analytics and advertising

Cookies and similar technologies can support sign-in, shopping carts, payment security, fraud prevention, and preference storage. We use one essential cookie to keep you signed in. Our payment form, provided by Stripe, sets its own cookies to process payments and prevent fraud. We do not use analytics or advertising cookies, pixels, or tracking tags. Browser settings may allow you to delete or block cookies, although some store features may stop working.

If applicable law requires recognition of an opt-out signal, we honor it as required. We do not treat acceptance of Terms as consent to optional tracking.

8 Your choices and requests

You can request access to, correction of, or deletion of your information by contacting support@doodpacks.store. Where available, you can update account information directly. We may reasonably verify your identity, including through your existing account, before disclosing or changing personal information. Do not send more information than is necessary for verification. Certain records may be retained for legal, security, fraud prevention, tax, or transaction purposes.

To stop promotional email, use its unsubscribe link or contact us. Necessary transaction and security messages may continue. If promotional SMS is offered, it requires a separate program notice and appropriate consent; opt out will be available. Buying a pack is not consent to promotional texts.

Depending on your residence and applicable law, you may have rights to obtain access or a portable copy, correct or delete data, opt out of sale, targeted advertising or sharing, restrict certain sensitive uses, or appeal a denied request. Rights, exceptions, verification, and response periods vary. Contact support@doodpacks.store. We do not unlawfully discriminate against you for exercising privacy rights. Authorized agents may submit requests where permitted, subject to reasonable proof of authority and any lawful verification.

9 California disclosures

California residents may contact us to request information about disclosures of personal information to third parties for their own direct marketing, to the extent applicable California law requires.

If the California Consumer Privacy Act applies to our business, California residents also have the rights and notices required by that law, including applicable rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive uses, and receive nondiscriminatory treatment.

10 Retention and security

We retain personal information only as reasonably necessary for the purposes described here, subject to legal retention obligations and legitimate needs to handle disputes, security, and fraud. Our retention schedule is 60 months. Deleting an account does not necessarily delete transaction records that must be retained.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No system or transmission is completely secure. Where law requires notice of a security incident, we provide it. Contact us promptly if you believe your account has been compromised.

11 Children locations and external services

The store is only for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has supplied information, contact us so we can investigate and take appropriate action. You must be 18 or older to create an account or buy a pack.

We operate in the United States. Our providers process information in the United States. If we offer services to people in other jurisdictions, any legally required international transfer protections and additional notices must be provided. External links and independently operated payment or social platforms are governed by their own practices when you interact directly with them.

12 Changes and contact

We post an updated effective date when this policy changes. For material changes, we provide additional notice or obtain consent when required.

Privacy contact: support@doodpacks.store

Mailing address: DEVINTHATDOOD LLC, 318 Ave I #338, Redondo Beach, CA 90277