Privacy Policy

Cellopack operates the website at cellopack.xyz and the related account, profile, verification, and trust services available through it.

In this policy, "Cellopack," "we," "us," and "our" refer to the operator of the Service. "Service" means the Cellopack website, account tools, public profiles, verification features, vouches, reporting tools, and related services.

Account information

When you create an account, we collect your email address. Cellopack uses passwordless email codes, so we do not collect or store a password for your account.

Profile information

You may choose to add profile information, including:

• Username
• First and last name
• Display name
• Bio
• Profile photo
• Marketplace links
• Social links
• Other information you choose to associate with your collector identity

Some of this information may be public depending on your settings and profile status.

Linked accounts and verification

Cellopack allows you to link external marketplace and social accounts to your profile.

For some linked accounts, we may use OAuth or similar authorization methods to confirm that you control the account. When this happens, we may receive and store authorization tokens needed to complete or maintain verification. These tokens are kept private and are not displayed on your public profile.

When we connect to an external platform on your behalf, we request the minimum access needed to confirm the account is yours: read-only access to basic profile information such as your account identifier or username. We do not use this access to post on your behalf, read your private messages, or take any action on the external account. We do not use information obtained through these connections for advertising, we do not sell it, and we do not use it to train machine-learning or artificial-intelligence models.

Specific platform commitments:

• Google / YouTube. Cellopack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube API Services only to read the channel identity needed to verify your link.
• TikTok. We request read-only access to your basic TikTok profile (such as your username) solely to verify the account, consistent with TikTok's developer terms.
• Meta / Threads. We request read-only access to your basic Threads profile solely to verify the account, consistent with Meta's Platform Terms and developer policies.
• eBay. We request read-only access to your basic account identity solely to verify the account.

You can revoke Cellopack's access at any time from the external platform's connected-apps or security settings, and by removing the linked account in Cellopack.

For other linked accounts, verification may be reviewed manually using publicly available profile information.

If you remove a linked account, edit it so that it is no longer verified, or delete your Cellopack account, we delete or de-identify the related authorization tokens and verification information unless we need to retain certain records for security, fraud prevention, legal compliance, dispute resolution, or audit purposes.

Identity verification

Cellopack offers optional identity verification through a third-party identity verification provider. If you choose to initiate identity verification, the verification provider collects and processes a government-issued identity document, a selfie, and related verification information directly from you.

Cellopack does not receive or store identity document images, selfie images, or full government identification numbers. The verification provider retains those materials under its own terms and privacy policy.

Cellopack receives and stores the following information from the verification provider:

• The verification outcome (for example, verified, canceled, or redacted)
• The document type (for example, passport, driver license, ID card)
• The document's issuing country
• A privacy-protecting identifier derived from your verification, used to detect duplicate or fraudulent verifications across Cellopack accounts
• The dates associated with verification activity

We use this information to display verification status on your profile while eligible, to detect duplicate accounts, to enforce our Terms, and to respond to reports.

You may request that the verification provider redact your underlying verification record at any time by contacting Cellopack support. Redaction removes the document and selfie from the verification provider; Cellopack retains a limited record indicating that a verification existed and was redacted.

Billing and subscription information

If you purchase a paid membership, payment is processed by our third-party payment processor. Cellopack does not receive or store card numbers, card verification values, full bank account numbers, or other payment-instrument secrets.

Cellopack receives and stores the following information related to your subscription:

• A customer identifier issued by the payment processor
• A subscription identifier and the price or plan identifier you selected
• Subscription status (for example, active, past due, canceled)
• The current billing period end and cancellation status
• Related subscription metadata required to provide and manage your access to paid features

We use this information to provide access to paid features, to display billing status in your account settings, to process refunds where applicable, and to detect fraud or abuse. Payment-instrument information is handled by the payment processor under its own terms and privacy policy.

Vouches

Cellopack lets members vouch for one another as a reputation signal.

When you give or receive a vouch, we store the relationship between the two accounts. Vouches may be visible publicly when the related profiles are public.

You may revoke a vouch. If you revoke a vouch, we may retain a record of the prior vouch and revocation for trust, safety, fraud prevention, and audit purposes. This record may appear in activity history where relevant to the Service.

Activity history

We may record account activity, such as:

• Links added
• Links verified
• Vouches given
• Vouches revoked
• Profile visibility changes
• Other trust-related actions

Activity history may be displayed on your public profile when your profile is public. This helps visitors understand reputation history, but it may also reveal when certain trust-related actions occurred.

Reports and trust & safety submissions

If you report a profile, link, vouch, or other activity, we collect the report reason, any details you provide, and related timestamps.

Reports are visible to Cellopack administrators and may be used to investigate abuse, fraud, impersonation, harassment, or violations of our terms or policies.

Communications

If you contact us through a form or by email, we may collect your name, email address, message content, and the time your message was sent so we can respond and provide support.

Moderation records

If content or activity associated with your account is reported, reviewed, restricted, or otherwise moderated, we may keep records of the action, reason, related account, administrator involved, and timestamp.

These records are not displayed publicly unless we say otherwise, but they may be retained for trust, safety, audit, legal, or dispute-resolution purposes.

Automatically collected information

When you use the Service, we may automatically collect information such as:

• IP address
• Browser type
• Device information
• Pages viewed
• Actions taken
• Referring pages
• Approximate location derived from technical signals
• Log and diagnostic information

We use this information to operate the Service, maintain security, detect abuse, understand usage, fix issues, and improve the product.

Cellopack uses cookies, local storage, and similar technologies to:

• Keep you signed in
• Remember preferences and settings
• Protect against bots, spam, and abuse
• Understand how people use the Service
• Improve onboarding, product features, and site performance

We do not use cookies for cross-site advertising.

We may use analytics providers to understand how people navigate and use Cellopack. We do not sell analytics data or use analytics for advertising.

Essential cookies and storage (keeping you signed in, security) are always on: the Service can't function without them. Analytics and session-recording are non-essential: in the EU, EEA, and the UK we ask for your opt-in consent before loading them; elsewhere they load by default.

You can review or change your choice at any time via Cookie settings in the site footer.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and display public profiles
• Authenticate users
• Verify linked accounts
• Store and display vouches
• Maintain reputation and activity history
• Detect, investigate, and prevent fraud, abuse, impersonation, harassment, and other harmful activity
• Enforce our Terms of Service and other policies
• Respond to support requests and messages
• Improve the Service
• Monitor performance and troubleshoot issues
• Comply with legal obligations
• Protect the rights, safety, and security of Cellopack, our users, and others

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

Public information

When your profile is public, the following information may be visible to others:

• Username
• Display name
• Bio
• Profile photo
• Linked accounts
• Verification status of linked accounts
• Vouches given and received
• Trust-related activity history
• Other information you choose to make public

Public profiles may be visible through direct links, Cellopack search, search engines, or other public discovery methods.

Your profile may be added to Cellopack search based on trust or verification criteria. You may be able to turn off Cellopack search visibility in your settings.

Private account information

The following information is not displayed on your public profile unless you choose to make it public:

• Email address
• First and last name when not used as your display name
• OAuth or verification tokens
• IP address and device information
• Support messages
• Reports you file
• Reports filed about you
• Internal moderation records
• Security and diagnostic logs

We may still use private account information to operate the Service, provide support, maintain security, investigate abuse, and comply with law.

We may share information in the following situations.

Service providers

We use third-party service providers to help us operate Cellopack. These providers may support hosting, authentication, storage, email delivery, analytics, security, error monitoring, infrastructure, or related services.

We require service providers to process personal information only as needed to provide services to us and in accordance with applicable contractual obligations.

We publish a list of current subprocessors at cellopack.xyz/subprocessors. That page describes the providers we use, what they do, and what categories of information they may process.

Legal, safety, and enforcement

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, legal process, subpoena, or court order
• Enforce our Terms of Service or policies
• Investigate fraud, abuse, impersonation, harassment, or security issues
• Protect the rights, safety, or security of Cellopack, our users, or others
• Respond to lawful requests from public authorities

Where legally permitted and reasonably practical, we may notify affected users before disclosing their information in response to legal process.

Business transfers

If Cellopack is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, user information may be transferred as part of that transaction.

If that happens, we will take reasonable steps to ensure your information remains subject to appropriate protections.

We and our service providers may process and store information in the United States and other countries where we or our providers operate.

If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions that may not provide the same level of data protection as your home country.

We keep account information for as long as your account is active or as needed to provide the Service.

You may request deletion through your account settings or by contacting us. After you request deletion, your account may enter a grace period during which you can cancel the deletion request by signing back in.

After the grace period, we delete or de-identify account information from active systems, except where retention is needed for:

• Security
• Fraud prevention
• Trust and safety
• Legal compliance
• Dispute resolution
• Audit purposes
• Backups
• Enforcement of our terms or policies

Some information may remain in aggregated, de-identified, or non-identifying form. Some records related to vouches, moderation, abuse prevention, or trust history may be retained where necessary to protect the integrity of the Service.

You may access, update, or delete much of your information directly through your account settings.

Depending on where you live, you may have additional privacy rights. We honor the following requests for users, subject to applicable law and reasonable verification:

Access

You may request a copy of personal information associated with your account.

Correction

You may correct or update your profile and account information.

Deletion

You may request deletion of your account and related personal information.

Portability

You may request an export of your account information in a portable format.

Restriction or objection

You may ask us to restrict or stop certain processing of your information where required by applicable law.

Analytics opt-out

You may request to be excluded from certain analytics tracking by contacting us.

To exercise a privacy right, contact us at support@cellopack.xyz.

We aim to respond to privacy requests within 45 days. If we need more time, we will let you know.

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing personal information may include:

• Contract: to provide the Service you requested
• Legitimate interests: to operate, improve, secure, and protect the Service
• Consent: where required, such as for certain cookies or optional processing
• Legal obligation: to comply with applicable laws
• Protection of rights and safety: to prevent fraud, abuse, security incidents, or harm

You may have the right to access, correct, delete, export, object to, or restrict certain processing of your personal information. You may also have the right to lodge a complaint with your local data protection authority.

California residents may have rights under the California Consumer Privacy Act, as amended, including the right to know, delete, correct, and opt out of certain uses or disclosures of personal information.

Cellopack does not sell personal information. Cellopack does not share personal information for cross-context behavioral advertising.

To exercise your California privacy rights, contact us at support@cellopack.xyz.

We will not discriminate against you for exercising your privacy rights.

We use administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards may include encryption in transit, access controls, abuse prevention, logging, monitoring, and other security measures.

No system is perfectly secure. We cannot guarantee that information will always remain secure. If you believe you have found a security issue, contact us at safety@cellopack.xyz.

Cellopack is intended for adults. You must be at least 18 years old to use the Service.

We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at support@cellopack.xyz.

If appropriate, we will delete the information.

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last updated" date above. If we make material changes, we may notify you by email, in-app notice, banner, or other reasonable method.

The current version of this Privacy Policy will be available at cellopack.xyz/privacy.

Questions, requests, or concerns about this Privacy Policy can be sent to support@cellopack.xyz.