Legal
Privacy policy
Last updated September 20, 2026. Plain-English summaries appear in italics; the full text is what applies.
1. What we collect
Account details, payment metadata, your pulls, and the usual device data.
We collect the information you give us (email, display name, shipping address, identity verification documents when required), transaction data (deposits, pack openings, sell-backs, shipments), and technical data (IP address, device and browser information, pages viewed). Payment card numbers are handled by our payment processors and never stored by Kodapacks.
2. How we use it
To run the service, ship your cards, prevent fraud and keep you informed.
We use your data to operate your account, execute pack openings and sell-backs, purchase and ship locked listings, detect fraud and abuse, comply with legal obligations (including age and identity verification), improve the product, and send service messages. Marketing messages are optional and can be switched off in Settings.
3. Who we share it with
Payment, shipping and marketplace partners, only what they need.
We share data with payment processors (for deposits and withdrawals), our consolidation and shipping partners (name and address, to deliver cards), the marketplace where listings are purchased (order details only), analytics and infrastructure providers, and authorities where required by law. We do not sell your personal data.
4. Live pulls
Your handle and pulls are public by default. You can change your handle.
Pack results are shown on the public live-pulls feed along with your display handle. You can change your handle at any time in Settings; historical pulls will show the new handle.
5. Cookies and local storage
We use a few cookies and local storage to keep you signed in and remember preferences.
Essential cookies keep you logged in and protect against fraud. Local storage remembers preferences like your free-pack timer. Analytics cookies are used only with your consent where the law requires it.
6. Retention
We keep records as long as we need them for the service and the law.
Account and transaction records are kept for the life of your account and for seven years afterwards where financial regulations require. You can request deletion of non-required data at any time.
7. Your rights
Access, correct, export or delete your data. Just ask.
Depending on where you live you may have rights to access, correct, port or delete your personal data, and to object to or restrict certain processing. Email privacy@kodapacks.com and we will respond within 30 days.
8. Contact
privacy@kodapacks.com
Kodapacks, privacy team: privacy@kodapacks.com. For account help use support@kodapacks.com.