Privacy Policy

lastpack

Effective Date: May 14, 2026

Last Updated: May 18, 2026

Lotus Digital Inc. d/b/a Lastpack (“Lastpack,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access or use Lastpack, including our website, web application, account system, crypto payment flows, Pack-opening experiences, Vault, buybacks, shipping, rewards, promotions, customer support, and related services, collectively, the “Service.”

This Privacy Policy applies to information we collect through the Service, through electronic communications with you, through customer support interactions, and through third-party service providers that help us operate the Service.

This Privacy Policy does not apply to information collected by third-party websites, applications, crypto payment processors, wallet infrastructure providers, blockchain networks, shipping carriers, analytics providers, advertising platforms, or other third parties except where we receive that information from them in connection with the Service. Third parties may have their own privacy policies, and we encourage you to review them before providing information to them.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Service.

1. Age Limit

The Service is intended only for users who are at least eighteen (18) years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it or take other appropriate action.

If you believe that a person under 18 has provided personal information to us, please contact us at [email protected] or [email protected].

We collect personal information from and about users of the Service. The information we collect depends on how you use the Service.

We may collect information that you provide directly to us, including:

- Name

- Email address

- Telephone number

- Date of birth or age confirmation

- Username

- Password or account authentication information

- Shipping address

- Wallet address

- Crypto transaction information

- Customer support messages

- Promotion, referral, or rewards-related information

- Any other information you choose to provide through the Service

We do not currently require users to submit government-issued identification or a live selfie as part of our standard account creation process. However, we may require additional information in the future or in specific cases if needed for fraud prevention, sanctions screening, legal compliance, shipping, dispute resolution, transaction review, or enforcement of our Terms.

When you use the Service, we may collect information about your account activity and transactions, including:

- Account creation and login history

- Crypto payments and wallet addresses

- Blockchain transaction hashes and network information

- Pack purchases

- Pack-opening activity

- Items assigned to your Vault

- Item rarity, grade, category, and other collectible attributes

- FMV or valuation information displayed in the Service

- Buyback offers shown to you

- Buyback offers accepted by you

- Account Credits, promotional credits, rewards, points, XP, bonuses, and related activity

- Refunds, reversals, disputes, failed transactions, and pending transactions

- Shipping requests

- Shipping addresses

- Shipping status, carrier, tracking, insurance, and delivery information

- Taxes, fees, and other transaction-related amounts

- Customer support disputes or claims relating to transactions or Items

We may collect information needed to help determine your eligibility to use the Service, prevent fraud, comply with law, and enforce our Terms. This may include your email address, phone number, date of birth or age confirmation, IP address, device identifiers, wallet address, blockchain transaction information, location information, sanctions or risk screening results, and records of account reviews.

We do not currently require standard KYC for ordinary account creation. However, we may require additional verification or information in specific cases if needed for fraud prevention, sanctions screening, legal compliance, shipping, withdrawal or buyback review, dispute resolution, or enforcement of our Terms.

When you access or use the Service, we and our service providers may automatically collect certain information, including:

- IP address

- Browser type

- Operating system

- Device type

- Device identifiers

- Referring and exit pages

- Pages viewed

- Links clicked

- Features used

- Dates and times of access

- Session duration

- Error logs

- Crash logs

- Approximate location based on IP address

- Precise location, where permitted and where needed for eligibility, fraud prevention, or compliance

- Cookies, pixels, local storage, and similar tracking technologies

- Interactions with Packs, Vault, buybacks, rewards, promotions, and checkout flows

We may collect location information to determine whether you are in a jurisdiction where the Service is available, to prevent fraud, to verify eligibility, to support shipping compliance, to screen for restricted jurisdictions, and to protect the Service.

Location information may include IP-based location, device-based location, shipping address, phone number region, wallet-related risk information, or information provided by fraud prevention, crypto payment, blockchain analytics, or compliance providers.

If you block location-related collection, certain features of the Service may not function properly or may be unavailable.

Because the Service currently uses crypto payments, we may collect and process wallet addresses, blockchain transaction hashes, network information, token type, transaction amount, transaction timing, transaction status, and related crypto payment information.

Blockchain transactions may be public by nature. Information such as wallet addresses, transaction hashes, token type, transaction amount, and transaction timing may be visible on public blockchains and may be processed by third parties outside of our control. We do not control public blockchain networks or third-party blockchain explorers.

2.7 Cookies and Similar Technologies

We may use cookies, pixels, local storage, SDKs, and similar technologies to operate the Service, keep you logged in, remember preferences, analyze traffic, measure performance, prevent fraud, improve the Service, and support advertising or marketing where permitted.

You may be able to control cookies through your browser settings. If you block cookies, some parts of the Service may not function properly.

We use personal information to operate, maintain, secure, and improve the Service. This includes using personal information to:

- Create and manage user accounts

- Verify age, eligibility, location, and account information where needed

- Process crypto payments

- Match blockchain transactions to user accounts

- Provide Account Credits

- Process Pack purchases

- Display Items in your Vault

- Provide FMV or valuation information

- Show, process, or settle buyback offers

- Process refunds, reversals, disputes, or failed transactions where applicable

- Fulfill shipping requests

- Calculate taxes, shipping costs, insurance, fees, and other transaction amounts

- Provide customer support

- Send account, transaction, shipping, verification, security, and support notices

- Operate rewards, points, XP, referrals, promotions, or loyalty features

- Detect, prevent, and investigate fraud, abuse, botting, multi-accounting, wallet abuse, sanctions issues, - restricted jurisdiction access, and other prohibited conduct

- Enforce our Terms of Service and other policies

- Maintain financial, tax, accounting, compliance, and legal records

- Comply with crypto payment processor, wallet infrastructure, blockchain analytics, fraud prevention, shipping carrier, and other service provider requirements

- Improve, personalize, test, and optimize the Service

- Measure marketing and advertising performance

- Communicate with you about updates, changes, offers, and promotions, where permitted

- Protect the rights, property, safety, and security of Lastpack, our users, our service providers, and others

- Comply with applicable law, legal process, regulatory requests, and law enforcement requests

We may also use information for any other purpose disclosed to you when you provide the information or with your consent.

We may disclose personal information as described below.

We may disclose personal information to vendors, contractors, and service providers that help us operate the Service, including:

- Crypto payment processors

- Wallet infrastructure providers

- Blockchain analytics or sanctions screening providers

- Fraud prevention and risk scoring providers

- Cloud hosting providers

- Database and infrastructure providers

- Analytics providers

- Customer support tools

- Email, SMS, and notification providers

- Shipping carriers and logistics providers

- Tax calculation and compliance providers

- Marketing and advertising providers

- Professional advisors, including lawyers, accountants, auditors, consultants, and insurers

These service providers may use personal information only to provide services to us or as otherwise permitted by law.

We may disclose personal information to crypto payment processors, wallet infrastructure providers, blockchain analytics providers, sanctions screening providers, fraud prevention vendors, and compliance providers to process payments, match transactions to accounts, prevent fraud, detect prohibited activity, comply with law, enforce provider rules, resolve disputes, and protect the Service.

Blockchain transactions may be public by nature. Information such as wallet addresses, transaction hashes, token type, transaction amount, and transaction timing may be visible on public blockchains and may be processed by third parties outside of our control.

If you request shipment of an Item, we may disclose information to shipping carriers, logistics providers, insurance providers, fulfillment partners, and tax providers as needed to process, ship, insure, track, and deliver your shipment.

This information may include your name, shipping address, email address, phone number, tracking information, item information, insurance information, and transaction information.

We may disclose limited personal information to analytics and advertising partners to measure performance, understand usage, improve the Service, build audiences, and market Lastpack.

This may include identifiers such as email address, phone number, IP address, cookie identifiers, device identifiers, wallet address, hashed identifiers, or activity information. In some jurisdictions, this type of disclosure may be considered “sharing” or “targeted advertising” under privacy laws.

We do not sell your personal information for money. We do not sell sensitive personal information, wallet risk information, shipping information, crypto payment information, or SMS opt-in consent.

Where required by law, you may opt out of sharing for targeted advertising.

We may disclose personal information if we believe disclosure is necessary or appropriate to:

- Comply with applicable law

- Respond to subpoenas, court orders, legal process, regulatory requests, or law enforcement requests

- Enforce our Terms of Service or other policies

- Protect the rights, property, safety, or security of Lastpack, users, service providers, or others

- Prevent, detect, investigate, or respond to fraud, abuse, wallet abuse, restricted jurisdiction access, sanctions issues, security incidents, or illegal activity

- Resolve disputes

- Maintain compliance, accounting, tax, or business records

We may disclose or transfer personal information in connection with an actual or potential merger, acquisition, financing, investment, restructuring, bankruptcy, sale of assets, or other business transaction involving Lastpack.

We may disclose personal information with your consent or at your direction.

We do not currently require government-issued identification or live selfie verification as part of our standard account creation process.

We may collect limited sensitive personal information when necessary to operate the Service, verify eligibility, prevent fraud, comply with law, process transactions, fulfill shipments, or protect the Service. This may include precise location information where required, shipping address, account security information, wallet-related risk information, or other information required for compliance.

We do not sell sensitive personal information. We do not use sensitive personal information to infer characteristics about you. We do not use sensitive personal information for advertising.

We may require additional information, including identity verification information, in the future or in specific cases if needed for fraud prevention, sanctions screening, legal compliance, shipping, dispute resolution, transaction review, or enforcement of our Terms.

Some features of the Service may display limited account or activity information publicly or to other users, such as username, avatar, Pack openings, Item pulls, rarity outcomes, rewards, referral activity, promotional winners, or other activity you choose to share.

Do not provide or share information through the Service that you do not want others to see. Public information may be viewed, copied, saved, or shared by others, and we cannot control what others do with information that you make public.

We may send you transactional or account-related communications, including messages about account verification, login, security, crypto payments, Account Credits, Pack purchases, Vault activity, buybacks, refunds, shipping, delivery, customer support, policy updates, and other Service-related matters.

These communications are part of the Service and may be sent by email, SMS, in-app notification, push notification, or other electronic means.

If you opt in or where otherwise permitted by law, we may send you marketing communications about new Packs, promotions, rewards, product updates, offers, or other Lastpack news.

You may opt out of marketing emails by using the unsubscribe link in the email. You may opt out of promotional SMS messages by replying STOP to the message.

Opting out of marketing communications does not prevent us from sending transactional, security, legal, or account-related messages.

If you provide your mobile phone number and consent to receive SMS messages, you agree that Lastpack may send text messages to the phone number associated with your account.

Message frequency may vary. Message and data rates may apply. Consent to receive promotional SMS messages is not a condition of using the Service.

Mobile information and SMS opt-in consent will not be shared with third parties or affiliates for third-party marketing or promotional purposes. SMS opt-in data and consent will not be sold.

We may share mobile information with service providers that help us deliver SMS messages, including SMS platform providers, message aggregators, and mobile carriers. These parties may use the information only to deliver messages on our behalf or as otherwise required by law.

You may opt out of promotional SMS messages at any time by replying STOP. For help, reply HELP or contact us at [email protected].

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to:

- Confirm whether we process your personal information

- Access personal information we have collected about you

- Correct inaccurate personal information

- Delete personal information

- Request a copy of your personal information

- Opt out of certain sharing or targeted advertising

- Opt out of the sale of personal information, if applicable

- Limit certain uses of sensitive personal information, where applicable

- Withdraw consent where processing is based on consent

- Appeal a decision we make regarding a privacy request, where applicable

These rights are subject to exceptions and limitations under applicable law. For example, we may retain certain information as needed to provide the Service, complete transactions, process refunds or disputes, prevent fraud, comply with legal obligations, maintain tax and accounting records, enforce our Terms, resolve disputes, or protect the Service.

To exercise privacy rights, contact us at [email protected] or [email protected]. We may need to verify your identity before processing your request. Verification may require you to provide information matching your account, such as your email address, phone number, wallet address, transaction history, or other account information.

Certain U.S. state privacy laws may provide residents with additional rights regarding personal information.

Depending on your use of the Service, we may collect the following categories of personal information:

- Identifiers, such as name, email address, phone number, username, account ID, IP address, device ID, and wallet address

- Personal records, such as shipping address, transaction records, and customer support records

- Commercial information, such as Pack purchases, Account Credit purchases, Vault Items, buybacks, rewards, shipping, refunds, and disputes

- Internet or electronic network activity information, such as pages viewed, features used, clicks, interactions, cookies, logs, and Service usage

- Geolocation information, such as approximate location based on IP address or other location information used for eligibility, fraud prevention, shipping, or compliance

- Blockchain transaction information, such as wallet addresses, transaction hashes, token type, network, transaction amount, and transaction timing

- Audio, electronic, visual, or similar information, such as customer support communications

- Inferences, such as fraud risk, account risk, preferences, or Service usage patterns

- Sensitive personal information, only where applicable, such as precise location information, account security information, or other information required for compliance

We collect personal information from:

- You

- Your device and browser

- Your use of the Service

- Crypto payment processors

- Wallet infrastructure providers

- Blockchain networks

- Blockchain analytics providers

- Fraud prevention providers

- Shipping carriers

- Analytics providers

- Advertising partners

- Customer support tools

- Public sources

- Other service providers and business partners

We collect and use personal information for the purposes described in this Privacy Policy, including to operate the Service, process crypto payments, match transactions to accounts, verify eligibility, prevent fraud, provide shipping, process buybacks, provide support, run rewards and promotions, improve the Service, advertise, comply with law, and enforce our Terms.

We may disclose the categories of personal information listed above to the categories of recipients described in Section 4 of this Privacy Policy.

We do not sell your personal information for money.

We do not sell sensitive personal information, wallet risk information, shipping information, crypto payment information, or SMS opt-in consent.

We may share limited identifiers or internet activity information with advertising or analytics partners in a way that may be considered “sharing” or “targeted advertising” under certain privacy laws. Where required, you may opt out by contacting us at [email protected] or through any opt-out mechanism made available through the Service.

We will not discriminate against you for exercising your privacy rights, except as permitted by applicable law.

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, complete transactions, process crypto payments, fulfill shipments, process buybacks, provide customer support, comply with legal, tax, accounting, sanctions, fraud prevention, dispute, and security obligations, resolve disputes, and enforce our Terms.

Transaction records, wallet records, blockchain transaction records, fraud records, shipping records, tax records, dispute records, and compliance records may be retained for up to seven (7) years or longer where required by law, provider rules, litigation hold, regulatory request, law enforcement request, or legitimate business need.

If your account is suspended, banned, or associated with fraud, abuse, wallet abuse, sanctions issues, eligibility violations, restricted jurisdiction access, or prohibited activity, we may retain information reasonably necessary to prevent repeat abuse, enforce our Terms, comply with law, and protect the Service.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from accidental loss and unauthorized access, use, alteration, and disclosure.

However, no method of transmission over the internet and no method of electronic storage is completely secure. We cannot guarantee that personal information transmitted to or through the Service will be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your account, devices, email, phone number, wallet, and authentication methods. If you believe your account has been compromised, contact us immediately at [email protected].

12. Third-Party Links and Services

The Service may contain links to third-party websites, applications, services, crypto payment processors, wallet infrastructure providers, blockchain networks, shipping carriers, analytics providers, advertising platforms, or other third parties.

We do not control third-party privacy practices. Information you provide to third parties is governed by their privacy policies, not this Privacy Policy.

The Service is intended for users located in jurisdictions where Lastpack makes the Service available. If you access the Service from outside the United States, you understand that your information may be processed in the United States or other countries where our service providers operate.

By using the Service, you acknowledge that your personal information may be transferred to and processed in countries that may have privacy laws different from those in your jurisdiction.

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by posting the updated Privacy Policy on the Service, updating the “Last Updated” date, sending an email, providing an in-app notice, or using another reasonable method.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

To ask questions or comment about this Privacy Policy or our privacy practices, contact us at:

Lastpack

Lotus Digital Inc.

131 Continental Dr, Suite 305, City of Newark, County of New Castle, Delaware 19713

Email: [email protected]

Support: [email protected]

To submit a privacy request, complaint, or concern, please contact [email protected] and include enough information for us to understand and verify your request.

This Privacy Policy is incorporated into and subject to the Lastpack Terms of Service. Any dispute relating to this Privacy Policy will be governed by the dispute resolution provisions in the Terms of Service, except to the extent applicable law requires otherwise.