Privacy
VERSION 2026-09-17
What we collect, why we collect it, and how long we keep it. Also what we deliberately don't collect, which is the shorter and more interesting list.
What we collect
Your account. Email address, a confirmation that you are 18 or older, and your phone number once you verify it.
Your activity. Boxes opened, pieces won, sales, shipments, and the balance on your account.
Technical records. The IP address a request reached us from, the country it resolved to, and the time. These are read from the network connection by our infrastructure rather than reported by your device.
Your device, as it describes itself. Model, operating system version, app version. Stored separately and labelled as unverified, because a phone describing itself is a claim, not a fact.
Identity documents, if you send them. Covered in its own section below.
What we do not collect
No advertising identifier. No location data. No contacts, photos beyond the document you choose to send, microphone, or browsing activity. We do not track you across other apps or sites, and there are no third-party analytics or advertising trackers in the app.
No card details, ever. Card numbers, expiry dates and security codes are handled entirely by our payment processor and are never transmitted to, processed by, or stored on our systems.
Identity documents
If you send a photo of an ID so we can ship to you, it is stored in a private location that is not publicly reachable — the file has no working public address, and viewing one requires a member of our staff to be signed in, which mints a link that expires within a minute.
The photo is re-encoded on your phone before it is sent, which removes the original file's embedded metadata including where the photo was taken. We have no reason to hold that and so we do not.
Documents are reviewed by a person and kept as evidence that we verified who we shipped to. Ask us and we will delete one, subject to any record we are required to keep.
Why we collect it
To run your account and send you what you won. To meet our obligation not to sell to under-18s. To honour a self-exclusion you asked for. To answer a payment dispute — if a charge is questioned, the record of how the account was used is what settles it.
We do not sell your information, and we do not share it for anyone else's marketing.
Who else sees it
Our hosting and database provider, our payment processor, the service that sends verification texts, and the carrier that delivers a shipment. Each receives only what it needs to do that job.
How long we keep it
Account and transaction records for as long as the account exists, and afterwards for as long as we are required to keep financial records. Verification and dispute evidence for the period a payment can still be disputed.
Your choices
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete your account. Write to us and we will act on it.
Some records survive a deletion request because we are required to keep them — a completed sale, for instance. We will tell you what those are rather than quietly retaining them.
Contact
Vault Collection LLC
755 W Big Beaver Rd, Suite 2020
Troy, MI 48084
United States