Privacy Policy

• Account details: email address, username, or blockchain wallet address.
• Identity verification: government ID and related documents when required for KYC/AML compliance or withdrawals.
• Shipping addresses: name, address, and phone number for physical card delivery.
• Transaction history: purchases, pulls, marketplace activity, deposits, and withdrawals.
• Technical data: IP address, browser type, device info, and language preference.

When you connect a blockchain wallet, your wallet address is publicly visible on-chain. Blockchain transactions are permanent and cannot be deleted by Pull.fun.

To process your transactions, deliver cards, verify your identity, prevent fraud, send account notifications, and improve the platform. We may also use your information to comply with legal obligations.

We do not sell your personal information. We share data only with:

• Stripe for payment processing;
• Shipping carriers for card delivery;
• KYC verification providers for identity checks;
• Vault and grading partners for physical card storage and authentication;
• Law enforcement when legally required.

In the event of a merger or acquisition, your data may be transferred to the new entity.

We use essential cookies for authentication and session management only. No advertising or third-party tracking cookies.

Account data is retained while your account is active and for a reasonable period after closure. Transaction records and KYC documentation are retained for a minimum of 5 years as required by financial regulations. Blockchain transaction data is permanent.

All connections are encrypted via HTTPS. Sensitive data is encrypted at rest. We use rate limiting, access controls, and webhook signature verification. No system is 100% secure — you are responsible for keeping your credentials and private keys safe.

You can access, correct, or delete your personal data through your account settings or by contacting us. Transaction records and KYC documentation may be retained where required by law. Blockchain data cannot be deleted.

If you are in the EU/UK, you also have the right to data portability, restriction of processing, and withdrawal of consent. If you are in California, you have rights under the CCPA including the right to know, delete, and opt out (we do not sell your data).

Your data may be processed in the United States or other countries. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses for international transfers.

Pull.fun is not intended for users under 18. If we discover we have collected information from a child, we will delete the account and data promptly. Parents may contact us at privacy@pull.fun.

We may update this policy from time to time. Material changes will be communicated via the platform or email. Your continued use after changes take effect constitutes acceptance.

Privacy questions? Contact us at privacy@pull.fun.