1. Who we are
Giftpull operates giftpull.store (and related domains). Contact: privacy@giftpull.store.
2. Data we collect
- Account: email, password hash or auth provider id, age attestation
- Transactions: pack purchases, amounts, timestamps, processor reference ids (not full card numbers — those stay with the payment processor)
- Fulfillment: gift codes delivered to you (stored encrypted where applicable)
- Technical: IP address, device/browser data, cookies for session and fraud prevention
- Support: messages you send us
3. How we use data
To provide packs and prizes, process payments, prevent fraud/chargebacks, meet legal obligations, improve the service, and communicate about orders and policy updates.
4. Processors and suppliers
We share data with payment processors, fraud tools, email delivery, hosting providers, and gift-card fulfillment APIs as needed to run the service. They process data under their own policies and our contracts.
5. Retention
Transaction and KYC-related records are retained as required for accounting, disputes, and law. You may request deletion of account data subject to legal holds.
6. Your rights
Depending on your region, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Email privacy@giftpull.store.
7. Security
We use industry-standard safeguards. No method of transmission is 100% secure.
8. Children
Service is 18+ only. We do not knowingly collect data from children.
9. Changes
We may update this policy; material changes will be posted on this page.