Privacy Policy

We collect the following categories of information when you use TicketDrop:

Account Information: Name, email address, and any profile details you provide when registering.

Activity Data: Entry history, Drop participation, token purchases, subscription billing history, wallet balance, referral activity, social action completions, mystery pack purchases and pull outcomes, auction bid history, XP earned, XP level, and progression milestones.

Communication Preferences: Email and SMS opt-in status, phone number (if you choose to provide it for SMS alerts), and push notification subscription data (device endpoint, encrypted keys) if you enable browser or app push notifications.

Location Data: If you participate in Treasure Hunt drops, we collect your device's approximate GPS location to verify proximity to the drop location. This is only used in real-time during the hunt and is not stored long-term.

Technical Data: Device type, browser, IP address, and usage analytics to improve platform performance.

Payment Data: Payment transactions are processed by Stripe. We do not store credit card numbers or full payment details — only transaction metadata (amount, package name, status, Stripe session ID).

We use your information to:

• Create and manage your account
• Process entries, token purchases, and prize fulfillment
• Track XP, levels, and progression rewards
• Send transactional notifications (entry confirmations, winner announcements, drop alerts)
• Send marketing emails or SMS messages you have opted into
• Prevent fraud and enforce our Terms of Service
• Analyze platform usage and improve our service
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the platform and fulfill prize obligations
• Legitimate interests: Fraud prevention, security, and platform improvement
• Consent: Marketing communications and SMS alerts, which you may withdraw at any time
• Legal compliance: Where required by applicable law

We share your data only in the following circumstances:

• Stripe: For payment processing. Stripe's privacy policy governs their handling of your payment data.
• Twilio: For SMS delivery if you've opted in to SMS notifications.
• Promoters: If you win a Drop submitted by a third-party promoter, your name and contact information may be shared with the promoter solely for prize fulfillment purposes.
• Legal requirements: When required by law, court order, or to protect the rights and safety of TicketDrop and its users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We retain your personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records, which we retain for 7 years per IRS requirements).

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or cross-site tracking. Analytics data is collected in aggregate and anonymized where possible. You may disable cookies in your browser settings, but this may affect platform functionality.

We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password for your account. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing emails or SMS at any time via the unsubscribe link in any email, by texting STOP to our SMS number, or by contacting us directly

To exercise any of these rights, contact us at support@theticketdrop.com. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. We do not engage in the sale of personal information as defined by the CCPA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at support@theticketdrop.com with the subject line "CCPA Request."

TicketDrop is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly. If you believe a minor has created an account, please contact us at support@theticketdrop.com.

Your data may be processed and stored in the United States or other countries where our service providers operate. By using TicketDrop, you consent to the transfer of your data to these locations, which may have different data protection laws than your country of residence.

If you enable push notifications, we collect and store your device's push subscription endpoint and encrypted keys. This data is used solely to deliver notifications from TicketDrop. You may disable push notifications at any time through your browser or device settings, or through the Platform's notification settings. Disabling notifications will not affect your ability to use the Platform or enter Drops.

If you opt in to SMS alerts, standard message and data rates may apply. You can opt out at any time by texting STOP to the number from which you received the message, or by contacting us at support@theticketdrop.com. Message frequency varies. For help, text HELP or contact us directly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice at least 14 days before they take effect. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

The Ticket Drop LLC
452 31st Street
Miami, FL 33137
United States
Email: support@theticketdrop.com