Privacy Policy

Introduction

Phantasmal LLC, a Delaware Incorporated LLC (“Phantasmal LLC,” “we,” “us,” “our”) a California limited liability company with its principal place of business in Los Angeles, California, operates the Phantasmal LLC website and mobile application (together, the “Platform”). This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to everyone who uses BagDrop. Questions can be sent to [email protected].

The Platform is not directed to anyone under eighteen (18), and we do not knowingly collect personal information from anyone under eighteen. If we learn that we have, we will delete it and close the account.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

• Device and technical data: device model, operating system, unique device and advertising identifiers, browser type, IP address, crash and diagnostic logs.
• Usage data: pages and screens viewed, features used, Drops viewed and purchased, time spent, session frequency and timing, referral source.
• Approximate location derived from IP address, used to confirm you are in an Eligible Location and to apply state-specific restrictions (see Terms of Use §2.3).
• Cookies and similar technologies, as described in Section 8.

1.3 Information From Third Parties

• Payment authorization results, chargeback notices, and fraud signals from our payment processor, Coinflow.
• Delivery status and exception data from shipping carriers.
• Identity verification results and biometric data from Persona (see Section 2 below and Terms of Use §2.2).
• Attribution and campaign data from advertising and analytics partners, where you have consented.

2. How We Use Information

• To create, secure, and administer your account.
• To verify your age, location, and eligibility (see Terms of Use §2.1, §2.2, §2.3).
• To process purchases, buybacks, withdrawals, shipments, and returns.
• To determine and display item values, probabilities, and inventory.
• To detect, investigate, and prevent fraud, abuse, prohibited conduct, and money laundering.
• To identify patterns that may indicate unhealthy purchasing, and to apply the measures described in our Responsible Purchasing Policy (see Terms of Use §2.7).
• To provide customer support and resolve disputes and claims.
• To send transactional and service communications, and — with your consent — marketing communications.
• To measure and improve BagDrop, including through aggregated and de-identified analysis.
• To comply with legal, tax, accounting, and regulatory obligations, and to establish or defend legal claims.

2.1 Automated Decision-Making

We use automated processes in fraud scoring and detection of purchasing patterns that may indicate harm. An automated process may result in a transaction being declined, a limit being applied, or an account being suspended pending review. You may request human review of any such decision by contacting us, and we will respond within a reasonable period. See Terms of Use §7.1 regarding investigation procedures and criteria.

3. How We Share Information

We do not sell your personal information for money. We share it only as described below.

We require service providers to use your information only to perform services for us and to protect it appropriately.

4. Retention

We keep personal information only as long as needed for the purposes described in this policy, and then delete or de-identify it. Retention periods differ by category:

5. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls limiting staff access to what their role requires, logging and monitoring, and periodic review of our practices. We require our service providers to maintain comparable protections.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

6. Your Privacy Rights

6.1 Rights Available to All Users

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information, subject to our legal retention obligations.
• Opt out of marketing communications at any time.
• Request human review of an automated decision that affected you.

6.2 Additional Rights for California Residents

Under the California Consumer Privacy Act as amended, California residents have the rights to know, delete, correct, and to limit the use and disclosure of sensitive personal information, together with the right not to receive discriminatory treatment for exercising those rights.

The categories of personal information we collect, the purposes for collecting them, and the categories of recipients are set out in Sections 1 through 3. The sensitive personal information we collect consists of account credentials and financial account information. We use sensitive personal information only for the purposes permitted without a right to limit — processing payments, preventing fraud, and complying with law.

We do not sell personal information for monetary consideration. Depending on how advertising cookies are configured, some sharing of identifiers with advertising partners may constitute “sharing” for cross-context behavioral advertising under the CCPA. You may opt out through the “Your Privacy Choices” link on our Website, by enabling a Global Privacy Control signal in your browser, or by contacting [email protected].

California residents may exercise these rights through the Website, in BagDrop, or by contacting us. We will verify your identity before responding, and you may use an authorized agent. We will respond within the timeframes the CCPA requires.

6.3 Other State Privacy Rights

Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as they take effect — have rights of access, correction, deletion, portability, and opt-out of targeted advertising and profiling, together with a right to appeal a denied request. To exercise these rights or appeal a decision, contact us using the details in Section 10. If we deny your appeal, you may contact your state attorney general.

6.4 Financial Information

Some information we collect in connection with payments and withdrawals may be subject to financial privacy laws, including the Gramm-Leach-Bliley Act, which may require separate notices. We do not disclose financial account information to nonaffiliated third parties except to process transactions you have authorized, to prevent fraud, or as permitted by law.

7. Marketing Communications

We send marketing communications only where you have opted in or where permitted by law. You may opt out at any time by using the unsubscribe link in an email, replying STOP to an SMS, adjusting your notification settings in BagDrop, or contacting us. Opting out of marketing does not stop transactional and service messages, which are necessary to operate your account.

During an Exclusion Period under Terms of Use §2.7, we automatically stop sending marketing communications and do not resume them unless you affirmatively re-opt in.

8. Cookies and Similar Technologies

We use cookies, SDKs, pixels, and similar technologies to keep you signed in, remember preferences, measure usage, detect fraud, and — with consent where required — measure and target advertising. You can control cookies through your browser settings and through the consent banner on our Website. Blocking essential cookies will prevent parts of BagDrop from working.

We honor Global Privacy Control signals as a valid opt-out of sale and sharing where applicable law requires.

Mobile device users can set their device preferences to Do Not Track (“DNT”) to tell websites and services not to collect information from that device. We [do/do not] recognize or respond to DNT signals.

9. Changes to This Policy

We may update this policy. The date at the top shows when it was last revised. If we make material changes, we will notify you by email or in-app notice before the change takes effect, and where required we will obtain your consent. Your continued use of BagDrop after the effective date constitutes acceptance of the updated policy.

10. Contact Us

Privacy inquiries and rights requests: [email protected]
Customer support: [email protected]

See also our Terms of Use and Responsible Purchasing Policy.