PRIVACY POLICY

Information you provide

We may collect information you choose to provide, including your email address, account or profile details, communications, support requests, waitlist registration, shipping address, delivery instructions, and information needed to process an item redemption or buyback.

Where required for fraud prevention, sanctions screening, age verification, customs, tax, or other compliance purposes, we may request identity information or supporting documents. We collect only what is reasonably necessary for the relevant purpose.

Wallet and blockchain information

When you connect a wallet or use an on-chain feature, we may collect or associate your public wallet address, network, transaction identifiers, NFT ownership and transfer history, smart-contract interactions, timestamps, and other data available on a public blockchain.

Public-blockchain records are visible to others and generally cannot be deleted or changed by MISTBOX. Do not place sensitive personal information directly on-chain.

Payments and transaction data

MISTBOX accepts supported digital assets only, such as USDC. Payment records are based on wallet and blockchain transaction information.

We may process digital-asset transaction details such as the amount, token, network, wallet addresses, transaction hash, status, applicable fees, refund or buyback amount, and related compliance records.

Information collected automatically

When you use the website or future DApp, we may collect device and usage information such as IP address, browser type, operating system, device identifiers, language, approximate location derived from IP, referring pages, pages viewed, clicks, session timing, crash data, and security events.

We may collect this information through cookies, local storage, pixels, logs, analytics tools, and similar technologies, subject to applicable law and available consent controls.

How we use information

• Operate the website, waitlist, accounts, drops, wallet connections, NFT claims, redemptions, deliveries, buybacks, and support services.
• Authenticate users and inventory, verify transactions, publish or validate results, prevent duplicate redemption, and maintain records linking an NFT to the corresponding item.
• Detect fraud, abuse, sanctions exposure, security incidents, prohibited activity, and violations of our Terms.
• Communicate service notices, drop information, requested updates, support responses, and—where permitted—marketing communications.
• Analyze performance, troubleshoot errors, improve design and functionality, satisfy legal obligations, establish or defend legal claims, and enforce agreements.

How we share information

We may share information with service providers that help us operate the Services, including hosting, security, analytics, communications, compliance, authentication, blockchain infrastructure, inventory authentication, vault or warehouse operations, insurance, logistics, customs, and customer support providers.

We may also disclose information when required by law, to protect users or the Platform, in connection with a corporate transaction, to professional advisers, or when you direct or consent to the disclosure. We do not sell personal information for money.

Cookies and analytics

Essential technologies help the Site function and remain secure. Functional technologies remember preferences. Analytics technologies help us understand performance and usage. Where required, you can manage optional cookies through available controls or your browser settings.

Blocking some technologies may affect website functionality. Third-party content or tools may use their own cookies and are governed by their own privacy policies.

Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain inventory and ownership records, complete shipping or buybacks, meet legal and compliance obligations, prevent fraud, resolve disputes, and enforce agreements.

Retention periods vary based on the type of information, the status of a transaction or item claim, legal requirements, security needs, and whether the information is recorded on a public blockchain outside our control.

International transfers

MISTBOX, its infrastructure, and its service providers may operate in countries other than your own. Where required, we use appropriate safeguards for international transfers of personal information and apply protections required by applicable law.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect information under our control. No system, transmission, storage method, smart contract, or blockchain is completely secure, and we cannot guarantee absolute security.

You are responsible for securing your wallet, device, private keys, seed phrase, passwords, and recovery information. MISTBOX will never ask you to disclose a private key or seed phrase.

Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, and to withdraw consent where processing is based on consent. You may also opt out of marketing using the unsubscribe method provided in a message.

We may need to verify your identity before acting on a request. Certain information may be retained where required by law, needed to complete a transaction or physical-item claim, or recorded on a public blockchain that MISTBOX cannot alter.

Age restriction

The Services are intended for adults and are not directed to anyone under 18, or below the legal age of majority where they live. We do not knowingly collect personal information from children. If we learn that such information was collected, we will take reasonable steps to delete it where possible.

Third-party services

The Platform may link to or integrate wallets, blockchains, marketplaces, social networks, logistics providers, or other third-party services. Their collection and use of information is governed by their own policies. MISTBOX is not responsible for third-party privacy or security practices.

Changes and contact

We may update this Privacy Policy as the Platform, technology, service providers, or legal requirements change. The updated date at the top of this page indicates the latest revision.

Privacy questions or rights requests should be submitted through the official privacy or support contact channel published by MISTBOX. Formal operating-entity and notice details will be added before commercial launch.