SCRTRARE Privacy Policy

This Privacy Policy explains how SCRTRARE (“SCRTRARE,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information. “SCRTRARE” refers to the business operating scrtrare.com and selling the products offered through the Service.

This Privacy Policy applies to: • scrtrare.com; • beta.scrtrare.com; • SCRTRARE accounts; • Shopping carts, offers, purchases, payments, shipping, tracking, returns, refunds, and support; • Transactional emails and account notifications; and • Other interactions with SCRTRARE.

The beta and general-production versions of SCRTRARE are parts of the same service. Account, transaction, and support information may be available across both versions.

We collect the categories of information described below.

When you create or access an SCRTRARE account, we may collect: • Your name; • Email address; • Profile image, when provided by a sign-in provider; • The sign-in method you use; • An account identifier supplied by Google, Apple, or another sign-in provider; • Email-verification status; • Account creation and update information; • Beta-access or invitation status, when applicable; • Login, session, and authentication information; and • Information used to prevent unauthorized account access.

You may be able to access SCRTRARE using an email sign-in link, Google, or Apple.

When you place an order, submit an offer, save an address, or contact us, we may collect: • Recipient name; • Email address; • Telephone number; • Street address; • Apartment, unit, or suite information; • City, state, ZIP code, and country; • Address-verification results; • Delivery instructions; and • The address associated with a completed transaction.

We may retain the address used for a completed transaction as part of the transaction record even if you later update or delete a saved address.

We may collect information about your shopping and transaction activity, including: • Shopping-cart contents; • Products viewed, selected, reserved, or purchased; • Product identifiers, images, grades, grading companies, and certification numbers; • Offers, counteroffers, notes, amounts, deadlines, acceptance, rejection, and expiration; • Orders and purchase history; • Merchandise prices, taxes, shipping charges, discounts, totals, refunds, and disputes; • Policy versions and acceptance records associated with a transaction; • Inventory reservations, cancellations, and expiration records; • Shipping method, package, insurance, tracking, and delivery information; • Returns, refunds, and resolution requests; • Support communications; and • Records used to reconcile purchases, inventory, shipping, returns, and ownership.

SCRTRARE may publicly identify an item as sold, but we do not publicly identify the purchaser.

SCRTRARE uses Stripe’s embedded payment interface to collect and process payments.

Complete card numbers, card-security codes, bank-account credentials, and other complete payment credentials are submitted directly to Stripe. SCRTRARE does not store complete card numbers or card-security codes.

Stripe may provide SCRTRARE with limited payment-related information, including: • Stripe customer and transaction identifiers; • Payment-method type; • Card brand and last four digits, when available; • Payment amount and currency; • Payment, authentication, decline, processing, refund, and dispute status; • Payment, setup, charge, invoice, tax, refund, and dispute identifiers; and • Records showing that you authorized a payment method to be saved or charged.

When you submit an eligible offer or accept a counteroffer, Stripe may save the selected payment method for that particular offer. If SCRTRARE accepts the offer within the stated offer period, SCRTRARE may initiate the specifically authorized one-time charge described in the Terms of Service and the payment authorization displayed with the offer.

We may collect and retain: • Emails and support messages you send to us; • Transactional notices sent to you; • Message-delivery, bounce, complaint, and failure information; • Return and refund communications; • Photographs and videos submitted with a claim; • Photographs of packaging, labels, seals, slabs, certification numbers, or damage; • Carrier or insurance claim records; and • Other information you voluntarily provide.

SCRTRARE does not currently operate a marketing-email subscription. If we introduce marketing communications, we will provide any consent and unsubscribe choices required by law.

When you use SCRTRARE, we and our service providers may automatically receive: • IP address; • Browser and device type; • Operating system; • Pages or website addresses visited; • Referring page; • Date and time of access; • General location derived from network information, such as city, state, or country; • Session and login information; • Website-navigation and usage information; • Activity occurring within SCRTRARE, which may be associated with your account after you sign in; • Security, fraud, and abuse signals; • Request, diagnostic, and error information; and • Limited analytics information used to understand and improve the service.

We do not intentionally use this information for cross-site behavioral advertising.

We may receive personal information from: • You; • Your browser or device; • Google or Apple when you select social sign-in; • Stripe; • Address-verification providers; • Shipping carriers and package insurers; • Email, notification, hosting, security, and analytics providers; • Personnel handling orders, fulfillment, fraud prevention, returns, or support; and • Legal, accounting, insurance, compliance, or fraud-prevention sources when appropriate.

We use personal information to: • Create, authenticate, maintain, and protect accounts; • Administer beta access when applicable; • Maintain sessions and facilitate sign-in; • Save and synchronize shopping carts; • Process Buy Now orders; • Receive, evaluate, accept, reject, and counter offers; • Save a payment method for a particular offer and charge it if the offer is accepted; • Verify products, prices, inventory, addresses, and availability; • Process payments, payment authentication, refunds, and disputes; • Calculate shipping charges and applicable taxes; • Pack, insure, ship, track, and deliver orders; • Investigate lost, damaged, incorrect, or disputed deliveries; • Administer returns, refunds, and resolution requests; • Send account, transaction, payment, shipping, security, and policy communications; • Respond to customer-support requests; • Detect fraud, abuse, duplicate transactions, payment manipulation, and unauthorized access; • Maintain evidence of policy acceptance and payment authorization; • Reconcile inventory, orders, payments, deliveries, and returns; • Operate, secure, troubleshoot, and improve SCRTRARE; • Understand how registered customers use SCRTRARE and where account, Cart, or checkout workflows stop or encounter errors; • Produce aggregated or deidentified business analytics; • Comply with accounting, tax, insurance, legal, and recordkeeping obligations; • Enforce our Terms and policies; and • Protect SCRTRARE, our customers, our inventory, and others.

We do not use Google or Apple sign-in information to determine creditworthiness, create public profiles, broker personal information, serve targeted advertisements, or train unrelated artificial-intelligence models.

We may disclose information to the following recipients.

Stripe receives payment, contact, device, IP-address, and transaction information needed to: • Process and authenticate payments; • Save an authorized payment method; • Prevent fraud; • Issue refunds; • Administer payment disputes; and • Meet payment-network and legal requirements.

Stripe handles information under its own privacy terms in addition to providing services to SCRTRARE.

Google or Apple receives information needed to complete the sign-in process you choose.

We use service providers for functions such as: • Website hosting and data storage; • Account authentication; • Website security and fraud prevention; • Analytics; • Transactional email and notifications; • Address verification; • Shipping-rate calculation; • Shipping-label creation; • Package insurance; • Tracking and delivery; • Customer support; and • Accounting, legal, and compliance services.

These providers receive information reasonably necessary to perform their services.

Carriers, address-verification providers, and package insurers may receive: • Recipient name; • Shipping address; • Telephone number; • Email address; • Package details; • Declared or insured value; • Tracking information; and • Claim information.

We may disclose information when reasonably necessary to: • Comply with law, legal process, or a lawful government request; • Enforce our Terms or policies; • Detect or investigate fraud, theft, or security incidents; • Protect the rights, property, inventory, safety, or security of SCRTRARE, our customers, or others; or • Establish, exercise, or defend a legal claim.

Information may be disclosed or transferred in connection with a merger, financing, reorganization, acquisition, sale of assets, conversion to another business form, bankruptcy, or similar transaction.

When you select Google sign-in, SCRTRARE requests only basic account-identification permissions, which may provide: • Your Google account identifier; • Your name; • Your email address; • Email-verification status; • Profile image; and • Authentication information needed to complete sign-in.

We use this information only to: • Create or authenticate your SCRTRARE account; • Maintain your account session; • Link a verified identity to an account under our account-linking rules; • Communicate with you about SCRTRARE; and • Protect accounts and prevent abuse.

We do not sell Google user data or use it for advertising, targeted advertising, credit decisions, data brokerage, public profiles, or unrelated model training.

You may request that we disconnect Google sign-in or delete eligible account information by emailing privacy@scrtrare.com.

When you select Sign in with Apple, Apple may provide: • An Apple account identifier; • Your name, when authorized; and • Your email address or an Apple private-relay address.

SCRTRARE does not attempt to reverse, bypass, or de-anonymize an Apple private-relay address.

If your Apple relay address differs from the address used for an existing SCRTRARE account, a separate account may be created.

We use Apple sign-in information for account creation, authentication, security, account linking when appropriate, and service communications. We do not sell or provide Sign in with Apple information to advertising platforms, data brokers, or information resellers.

You may request that we disconnect Apple sign-in or delete eligible account information by emailing privacy@scrtrare.com.

SCRTRARE and its service providers may use cookies, browser storage, and similar technologies for: • Account authentication and sessions; • Security and request integrity; • Shopping carts; • Checkout and pending-purchase information; • Payment processing and fraud prevention; • Google or Apple sign-in; • Website preferences; • Navigation; and • Limited website analytics.

An anonymous shopping cart may be stored in your browser. When you sign in, cart information may become associated with your account.

Blocking or deleting essential cookies or browser storage may prevent account access, checkout, payment, or other functionality. You can clear browser storage through your browser settings, although doing so may remove an anonymous cart or sign you out.

We use limited website analytics and may change analytics providers. Analytics providers may receive pages or website addresses visited, referring pages, timestamps, approximate location, browser information, device information, and technical identifiers. SCRTRARE may separately associate activity occurring within the Service with a registered account to operate, understand, troubleshoot, and improve the Service.

We do not use this analytics activity to monitor what registered customers do on unrelated websites or services, and we do not intentionally use advertising cookies to follow customers across unrelated websites for behavioral advertising.

SCRTRARE does not sell personal information.

SCRTRARE does not share personal information for cross-context behavioral advertising or targeted advertising.

We do not use personal information to build advertising profiles about customers across unrelated websites or services.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on the type of information and may include: • Account information retained while an account remains active; • Temporary sign-in, authentication, checkout, and security records retained for short operational periods; • Shopping-cart information retained until removed, replaced, expired, or the account is closed; • Account-associated website activity summaries retained while the account remains active; • Order, payment, policy-acceptance, tax, shipping, insurance, return, refund, dispute, and support records retained as needed for transaction administration, accounting, taxes, fraud prevention, insurance, legal compliance, and dispute resolution; • Security and diagnostic records retained for an appropriate security and troubleshooting period; and • Backups retained under reasonable backup and disaster-recovery schedules.

Closing an account does not automatically delete every record. We may retain restricted copies of transaction, payment, tax, shipping, fraud, policy-acceptance, and dispute information when legally required or reasonably necessary.

When information is no longer required, we may delete, aggregate, or deidentify it.

You may request account closure, access, correction, or deletion by emailing privacy@scrtrare.com.

Describe your request and provide enough information for us to identify the relevant account or transaction. We may ask you to verify your identity before completing the request.

Depending on where you live and subject to applicable exceptions, you may also have rights to: • Access certain personal information; • Correct inaccurate information; • Receive a portable copy of certain information; • Restrict or object to certain processing; • Appeal a decision concerning a privacy request; or • Submit a request through an authorized agent.

Account deletion ordinarily removes or disables account-access information, sessions, saved addresses, account-associated website activity summaries, and other eligible account data. It may not delete transaction, tax, payment, shipping, fraud, insurance, return, dispute, or legal records that SCRTRARE must or reasonably needs to retain.

Disconnecting Google or Apple sign-in does not necessarily delete retained transaction records.

We will not discriminate against you for exercising an applicable privacy right.

SCRTRARE is not directed to children under 13 and does not knowingly collect personal information from children under 13.

You must be at least 18 years old to: • Create an SCRTRARE account; • Submit or accept an offer; • Place an order; or • Enter into a transaction with SCRTRARE.

A person under 18 may browse SCRTRARE, but a purchase for or on behalf of a minor must be made by a parent or legal guardian who is at least 18 years old. The adult must use the adult’s own account and authorized payment method and must accept the applicable terms as the purchaser.

A parent or guardian who believes that a child improperly provided personal information may contact privacy@scrtrare.com.

SCRTRARE uses reasonable administrative, technical, and organizational measures designed to protect personal information.

These measures may include: • Encrypted transmission; • Account and session controls; • Restricted access to service-provider credentials; • Payment and transaction monitoring; • Fraud and security monitoring; and • Procedures for responding to suspected unauthorized access.

No website, transmission method, or storage system can be guaranteed to be completely secure.

SCRTRARE does not store complete card numbers or card-security codes.

Report suspected unauthorized account activity to support@scrtrare.com.

SCRTRARE and its service providers may process personal information in the United States and other countries. Those countries may have privacy laws different from the laws where you live.

SCRTRARE currently ships only to eligible addresses within the United States. Visiting the website or creating an account does not guarantee that shipping is available to a particular address.

We may update this Privacy Policy to reflect changes in our services, practices, providers, or legal obligations.

The updated Privacy Policy will be posted with a revised effective or last-updated date. Material changes will apply prospectively unless applicable law requires otherwise.

SCRTRARE PO Box 29 Brookfield, IL 60513 Privacy inquiries: privacy@scrtrare.com Customer support: support@scrtrare.com