Privacy Policy
This policy explains what information Citybreaks LLC, doing business as City Packs ("City Packs", "we", "us"), collects when you use citypacks.com and our related services (the "Platform"), how we use it, who we share it with, and the choices you have. We do not sell your personal information.
1. Information we collect
Information you give us
- Account details: your email address or mobile number, username, password (stored only in scrambled, hashed form), and your name if you add it.
- Shipping and contact details: your shipping address and phone number, used to ship Cards, work out sales tax and contact you about orders.
- Your choices and agreements: the date and time you accepted our Terms, and whether you opted in to marketing texts (with the date and time).
- Messages: anything you send us through the Contact form or by email.
- Giveaway entries: the giveaways you enter, and for prizes worth $600 or more, the tax information we are required to collect.
Information created when you use the Platform
- Activity: packs you open, the Cards you pull, your vault, sell-backs, transfers, shipments, points, referrals and discount codes used.
- Money: your Balance, deposits, purchases and any withdrawal requests. Card numbers are entered directly with our payment processor, Stripe; City Packs never sees or stores your full card number.
- Identity checks: if you verify your identity, the photo of your ID and your selfie are collected and checked by Stripe Identity. We receive the result (verified or not) and do not store your ID images or ID number.
- Device and security data: your IP address, browser type and a random device identifier stored in your browser. We use these to keep accounts secure, limit repeated login attempts, prevent fraud and stop abuse of promotions.
Information from others
- Google sign-in: if you sign in with Google, Google shares your name and email address with us.
- Service providers: payment, chargeback and refund status from Stripe; delivery and tracking status from our shipping partners.
2. Cookies and similar technology
We use one essential cookie to keep you signed in. It cannot be read by other websites. We also store a few settings in your browser (for example, your device identifier and a referral code you arrived with). We do not use advertising cookies, and we do not let advertisers track you on City Packs. Our payment and sign-in providers (Stripe and Google) may set their own cookies when you use their features, under their own privacy policies.
3. How we use your information
- To run your account and the Platform: opening packs, holding Cards in your vault, sell-backs, transfers and giveaways.
- To take payments, verify identity where required, and collect sales tax where the law requires.
- To ship your Cards and give you tracking.
- To send you account, order, security and service messages, and to answer your questions.
- To send marketing emails and, if you opted in, marketing texts. You can stop these at any time (see Section 7).
- To keep the Platform safe: preventing fraud, chargebacks, duplicate accounts and promotion abuse, and investigating breaches of our Terms.
- To meet legal, tax and accounting obligations, and to enforce our Terms.
- To improve the Platform.
4. What other people can see
Your username is public. When you open a pack, your username, the pack you opened and the tier of your pull may appear in the hit feed and recent hits, and your username and the number of packs you have opened may appear on the Leaderboard. If you send a Card to another user, they see your username. We never show your email address, phone number, address or Balance to other users.
5. Who we share information with
We share information only with service providers that help us run the Platform, and only what each needs:
| Provider | What they do for us |
|---|---|
| Stripe | Card payments, identity verification and sales tax calculation |
| Shippo and USPS | Shipping labels, delivery and tracking (your name and shipping address) |
| Resend | Sending our emails |
| Twilio | Sending text messages and sign-in codes |
| Sign in with Google, if you choose it | |
| Render and Cloudflare | Hosting the Platform and protecting it from attacks |
We may also share information: (a) if the law requires it, or to respond to valid legal requests; (b) to protect the rights, safety and property of City Packs, our users or others, including to prevent fraud; (c) with professional advisers such as lawyers and accountants; and (d) as part of a merger, sale or transfer of our business, in which case this policy continues to apply. We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.
6. How long we keep it
We keep your account information for as long as your account is open. After you close your account, we keep records of transactions, payments, shipments, tax and identity-check results for as long as the law requires (usually up to 7 years), and other information only as long as needed to resolve disputes, prevent fraud and enforce our Terms. Login session records expire after 30 days.
7. Your choices
- Marketing emails: use the unsubscribe link in any marketing email.
- Marketing texts: reply STOP to any text, or turn texts off in your profile.
- Your details: you can update your name, phone and address in your profile.
- Access, correction and deletion: email support@citypacks.com to ask for a copy of your information, to correct it, or to delete your account. We will confirm your identity before acting, and we may keep information we are legally required to keep. We will not treat you differently for making a request.
Depending on where you live, state laws (such as those of California, Colorado, Connecticut, Virginia and others) may give you additional rights, including the right to know what we collect, to correct or delete it, and to appeal our decision. To use any of these rights, email support@citypacks.com. You can also use an authorized agent, who must show us your written permission.
8. Security
We protect your information with encryption in transit (HTTPS), hashed passwords, signed login sessions, limits on login attempts, and restricted access for our team. No system is perfectly secure, so please use a strong password that you do not use anywhere else, and tell us right away if you think your account has been accessed without your permission.
9. Children
The Platform is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will close it.
10. Where your information is stored
We are based in the United States and store your information in the United States.
11. Changes to this policy
We may update this policy. If we make a material change, we will tell you by email or on the Platform before it takes effect. The date at the top shows when it last changed.
12. Contact us
Citybreaks LLC (doing business as City Packs) · support@citypacks.com