Last Updated: May 25, 2023

Scope

This Privacy Policy (“Policy”) describes how Loot Labs Inc. (dba Boxed) and its affiliates, (collectively, “we,” “us” and “our”) collect, use, and disclose your personal information when you visit our websites (“Sites”) or use any of our products or services (collectively, “Services”) that link to this Policy. This Policy does not apply to the personal information that we collect and process about personnel or applicants. Your use of the Services is subject to this Policy and our Terms.

Scope
Personal Information We Collect
How We Use Personal Information
How We May Disclose Personal Information
Cookies and Other Tracking Mechanisms
Third-Party Links
User Generated Content
Your Privacy Choices
Children
Security
Changes to This Policy
Contact Us

Personal Information We Collect
Personal Information We Collect From You. The personal information we collect from you depends upon how you use our Services or otherwise interact or engage with us, but generally includes:

• • Identifiers and Contact Information. We may collect personal identifiers and contact information such as your name, address, email address, and phone number.
• • Profile and Account Details. If you register an account with us, we collect your username, such as your email, user name, profile picture and the password used to login to your account.
• • Commercial Information. We may also collect personal information about your purchasing patterns and history and use of our Site and Services.
• • User and Message Contents. We may permit you to post or upload any content and feedback, including photos, videos, or other files, which is displayed publicly. In addition, when you contact our customer service team, including through our third party chat feature, texting or forms, we may collect your messages, emails, or any other personal information you choose to provide.
• • Audio or Similar Information. If you speak with our customer service team by phone, we may collect a recording for quality assurance, security, and training purposes.
• • Preferences. We may also collect personal information about the types of Services you use, your communications preferences, wish lists, and other preferences you may select in your account or profile.
• • Other Information. We also collect the personal information you provide when you complete online forms, surveys, or leave us product reviews. We may also collect any other personal information you choose to provide.

Personal Information We Collect Automatically.
As described below in the “Cookies and Other Tracking Mechanisms” section, when you visit our Site or use our Services, we may automatically collect certain personal information, including:

• • Identifiers and Device Information. We automatically collect IP address, unique identifiers, device name, type and model; browser type; operating system type, name, and version; information about your browser and browser language and other information.
• • Network Activity. We may also collect information related to how you interact with our Site, Services and advertisements, such as page views, time and length of visit; links and items clicked; and other activity information, referring URL, browsing history, and other similar information. We may use analytics, advertising and other providers and technologies, including cookies and similar tools, to collect this information.

Personal Information We Collect from Other Sources.
We may collect personal information about you through our affiliates, services providers, marketing and advertising partners, public and other sources. Public Information. Personal information does not include publicly available information, such as information you post online or in our Services (such as your user name, profile picture or leaderboard place and activities) lawfully made available from government records, information we have a reasonable basis to believe is lawfully made available to the general public by you or widely distributed media, or by a person to whom you have disclosed the information and not restricted it to a specific audience, or deidentified or aggregated information. To the extent permitted by applicable law, we may combine the personal information we collect with publicly available or third-party sources.

How We Use Personal Information
Generally, we may use the personal information we collect for the following purposes:

• • Operate Our Business. We use the personal information we collect to run our day- to-day operations.
• • Provide You Products and Services. We use the personal information we collect to provide you with our Site and Services, which may include referral and loyalty programs, sweepstakes, events and other activities, which may have different and/or additional terms and requirements. If you obtain a collectible associated with a video game, an NFT or physical item, you will need to provide us with information needed for fulfilment including game information, a blockchain wallet address or a physical shipping address.
• • Communicate With You. We use the personal information we collect to communicate with you about your use of our Sites and Services, to respond to your inquiries, to provide you with the information you request, and for other customer service purposes.
• • Evaluate and Improve Our Site and Services. We use the personal information we collect to evaluate, analyze, improve, and develop our products and Services, including this Site. We also use this information to tailor the content and information that we may send or display to you, to offer location customization, and to otherwise personalize your experiences while using our Site and Services.
• • Marketing and Advertising. We may use your personal information for marketing and promotional purposes, including to send you promotional communications about products and services we believe may interest you. We may send communications via e-mail, regular mail or may send push notifications via a mobile device. We may also use your information to serve you advertisements or customized content online.
• • Inferences. We may use the information we collect to better understand how you access and use our Site and Services, both on an aggregated and individualized basis.
• • Fraud and Security Purposes. We may use the personal information we collect to mitigate fraud and protect ourselves and others. We also use this information to prevent and detect security issues, malicious or deceptive behavior or activities, infringements of our policies and contracts and other potential misuse of or illegal activity.
• • Legal Requirements. We use the personal information we collect to investigate, enforce, and apply this Policy and our Terms, and to otherwise protect our own rights and interests, such as to resolve any disputes or to respond to requests from law enforcement, court orders, regulators, or other legal processes.
• • Other Operational and Business Purposes. We may use your personal information for other operational purposes such as to comply with contracts related to products or Services that we provide to you.
• • Other Uses. We may use your personal information for other purposes that we notify you of or obtain your consent.

How We May Disclose Personal Information
When permitted by applicable law, we may disclose your personal information to our affiliates, services providers, marketing and advertising partners, and others.

• • Identifiers and Device Information. We automatically collect IP address, unique identifiers, device name, type and model; browser type; operating system type, name, and version; information about your browser and browser language and other information.
• • Network Activity. We may also collect information related to how you interact with our Site, Services and advertisements, such as page views, time and length of visit; links and items clicked; and other activity information, referring URL, browsing history, and other similar information. We may use analytics, advertising and other providers and technologies, including cookies and similar tools, to collect this information.

• • Service Providers. We may disclose the personal information we collect with service providers who perform functions on our behalf, such as website hosting and analytics, email or other communication services, development and research, and customer support.
• • Marketing and Advertising Partners. We may also disclose your personal information, such as name and contact information, with our marketing and advertising partners to send you content about certain products and Services.

We also may disclose your personal information in the following circumstances:

• • Business Transfers. We may disclose personal information as part of commercial transactions (e.g., mergers, acquisitions, bankruptcy, or other similar business transactions) and in contemplation of such transactions (e.g., due diligence).
• • Legal Purposes. Personal information may be disclosed to third parties, as permitted by law or subpoena, or if we reasonably believe such action is necessary to comply with the law and the reasonable requests of regulators, law enforcement, other public authorities, or other similar purposes.
• • Security and Protection of Rights. We also may share and/or use your information to protect the safety, rights, property, or security of Company, our Site and Services, any third party, or the general public; to detect, prevent, or otherwise address fraud, security, cybersecurity, cybercrimes or technical issues; to prevent or stop any activity that we, in our sole discretion, may consider to be, or to pose a risk of being, illegal, unethical, or legally actionable; to use as evidence in litigation; to conduct audits; and/or to enforce our Terms.
• • Aggregate and De-Identified Information. We may disclose aggregate or de- identified personal information about users with third parties for marketing, advertising, research and any other purposes.
• • Other Disclosures. We may disclose your personal information for other purposes that we notify you of or obtain your consent.

Cookies and Other Tracking Mechanisms
We and our third-party service providers use cookies, pixels, tags, and other similar tracking mechanisms to automatically collect personal information about browsing activity, type of device and similar information within our Services and to target advertising and content across our properties and third-party sites and services. We use this information to, for example, analyze and understand how users access, use, and interact with others, as well to identify and resolve bugs and errors and to assess, secure, protect, optimize and improve the performance of our Services.

Cookies, Clear GIFs, Pixel Tags, and Other Technologies.
“Cookies” are alphanumeric identifiers we transfer to your device through your browser for tracking, advertising, measurement, security and other purposes. Some cookies allow us to make it easier for you to navigate our Services, support the security and performance of the Services, or allow us to track activity and usage data within our Service. In addition to cookies, we may also use pixel tags (sometimes called web beacons or “clear GIFs”) to collect personal information about you and your use of our Services. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, help us manage content and compile usage statistics. We may also use these in HTML e-mails we send, to help us track e-mail response rates, identify when our e-mails are viewed, and track whether our e-mails are forwarded.

Third-Party Analytics and Tools.
We use third party tools, such as Google Analytics, Mixpanel, and Meta Pixel, which are operated by third party companies. These third-party analytics companies may collect usage data (using cookies, pixels and similar tools) about our Site and Services in order to provide us with reports and metrics that help us evaluate usage and improve our Site and Services, and enhance performance and user experiences. These services record information such as purchase events, site navigation and profile changes. We may also use session replay cookies to understand your use of our Site and Services. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking.
We and our third-party providers may use the personal information that we collect about you within our Services and on other third-party sites and services to help us and these third parties to identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.).

Advertising, Personalized Content and Reporting.
We may work with third parties, such as ad networks, channel partners, analytics and measurement services and others to personalize content, messages and ads within our Services and/or on third party sites such as Facebook and similar companies. We may share personal information with these organizations, and we and those third parties may use cookies, pixels, tags, and other tools to collect usage, viewing, chatting, event, purchase and browsing information within our Services such as IP address, cookies and unique IDs, and other identifiers, as well as browsing information. We and these organizations use this information to provide you more relevant ads and content and to evaluate the success of such ads and content.

Social Plugins.
We may use social plugins on our Sites. When you view a Site that contains a plugin, your browser will create a direct link to the third parties’ servers. If you are logged into your social media account, the social media platform will record the visit to your social media account. Please visit the social media platform’s privacy policy for more information.

Do-Not-Track.
Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies); you also may opt-out of targeted advertising by following the instructions above.

Third-Party Links
Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third party websites. We are not responsible for the information practices of such third party websites.

User Generated Content
We invite you to post content on our Site and Services, including your comments, pictures, and any other information that you would like to be available on our Site or Services and meets our acceptable use policies. If you post content to our Site or Services, all of the information that you post will be available to all visitors to our Site and Services. If you post your own content on our Site or Services, your posting may become public and may be forwarded to others. We cannot prevent such information from being used in a manner that may violate this Policy, the law, or your personal privacy. We reserve the right to remove any content, but we do not actively monitor our Site and Services at all times. Please contact us as described below with any concerns.

Your Privacy Choices
We provide several ways for you to manage choices about your personal information.

• • Cookie Settings. If you wish to prevent cookies and other technologies from tracking your activity on our Sites and Services or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Sites who disable cookies will be able to browse the Sites, but some features may not function.
• • Industry Opt-Outs. You can control how participating third-party ad companies use the information that they collect about your visits to our websites and those of third parties. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). These preferences are browser and devices specific. You will need to set your preferences for each browser and device you use.
• • Marketing Communications. You can opt out of receiving marketing texts and emails from us by texting STOP or using the unsubscribe feature in the emails. We may continue to send you transactional emails.
• • Account Information. You may access, update, or correct your account and profile information at any time by logging in to your account and updating the information we maintain or by emailing us as described below.

Children
Our Services are not designed for children, and we do not knowingly collect personal information from children under the age of thirteen. If we learn that we have received personal information directly from a child, we will delete such information from our systems. If you are a parent or legal guardian and you believe we have collected your child’s personal information in violation of applicable law, please contact us using the contact information below.

Security
We have implemented safeguards designed to protect personal information. Please be aware that despite our efforts, no data security measures can guarantee security.

Changes to This Policy
This Privacy Policy is in effect as of the date noted at the top of the Privacy Policy. We may change this Privacy Policy from time to time. If we do, we will post the revised version here and change the “last updated date” (the date it applies from) at the top of the Privacy Policy. You should check here regularly for the most up-to-date version of the Privacy Policy.

Contact Us
If you have any questions about these Terms or otherwise need to contact Company for any reason, you can reach us at support@boxed.gg