Privacy Policy

Effective October 29, 2026

This policy explains what Spin Shop collects, why, who it’s shared with and the choices you have. Spin Shop is run by VREE LLC, a Wyoming limited liability company (“we”, “us”). It covers this website, spinyourprice.com, and the Spin Shop itself.

Contents

• What we collect
• Google and Apple sign-in
• How we use it
• Who we share it with
• How long we keep it
• Your choices
• Security
• Children
• Changes to this policy
• Contact us

What we collect

When you create an account or sign in

• Google, Apple or a 6-digit email code. These go through Privy, the service that runs our sign-in and makes your account’s Solana wallet. Privy receives what you sign in with: your email address, or the details Google or Apple share for sign-in (see Google and Apple sign-in). Privy then makes a Solana wallet for your account, or finds the one you already have. To sign you in to the shop, that wallet signs a one-time message, and our servers receive only the wallet’s public address. The shop’s page also gets your account’s email address from Privy, to show you who you’re signed in as. It isn’t sent to our servers.
• A crypto wallet you already have, such as Phantom: your wallet’s public address, and the one-time sign-in message it signs.
• A sign-in link we email you: your email address. We keep a scrambled (hashed) copy of the link’s code, which works once, for 15 minutes, and a scrambled marker of the browser that asked for it, so that a link opened somewhere else warns you before signing in.

Your account

• Your wallet’s public address, your email address, or both
• Your two balances: USDC you topped up, and site credit from selling items back
• The last shipping address you used, so we can offer it next time
• When your account was made and last used, and whether it’s blocked

Spins and items

• Each spin: the item, the deal you chose, the price it landed on, how it was paid (site credit or USDC) and when
• The provably fair records behind each spin: the server seeds (revealed when you switch seeds), your client seed, and each spin’s number
• The items you own, ship or sell back, and the site credit each sell-back gave you
• Every change to your balances, in a ledger

Shipping

When you ship items: your name, street address, apartment or suite, city, state or region, ZIP or postal code, country and, if you give it, phone number. Once it ships, the carrier and tracking number, and any notes about the shipment.

Payments

• Top-ups in USDC: the amount you asked for, the Solana transaction that paid it (its signature, amount, time and the wallet it came from) and its status.
• Card top-ups: the card checkout opens in the shop’s page, but it’s run by Privy’s payment partners (currently Stripe or MoonPay, depending on your currency). They collect your card details and any identity checks they need, under their own privacy policies. We never see your card number. The USDC you buy goes to your account’s wallet, and our servers look up that wallet’s USDC balance on the Solana network so the shop can move it into your balance.
• Withdrawals: the wallet address you withdraw to, the amount, its status, the transaction that paid it and, if we turn one down, the reason.

Technical information

• Cookies. One cookie keeps you signed in. It lasts 30 days unless you sign out. When you ask for a sign-in link, a second cookie marks the browser that asked, for 15 minutes. Only our server can read them. We don’t use advertising or analytics cookies.
• Your browser’s storage. The shop remembers your deal settings (range or odds, and whether that panel is open) in your browser. While you sign in with Google or Apple, it briefly remembers the item you had open, to bring you back to it. Privy’s sign-in keeps its own sign-in data in your browser.
• IP address. Our server uses your IP address to limit repeated sign-in attempts. It’s held briefly in the server’s memory and isn’t saved. Our hosting providers may record IP addresses as part of running our servers and this website.
• Fonts. The shop’s page loads the Inter font from Google Fonts, so your browser connects to Google, which sees your IP address and browser details. The pages of this website (the home page and this policy) don’t load anything from other sites.

Google and Apple sign-in

When you choose Continue with Google, Google shares basic account details with Privy, our sign-in provider, and Privy keeps your name, your email address and your Google account ID. Privy uses them to sign you in and to bring back the same account, and the same wallet, each time.

We use Google user data only to sign you in and to show you which account you’re signed in with. We don’t use it for advertising, we don’t sell it, and we don’t share it with anyone except Privy, to sign you in. Our servers don’t receive or store it: they only see your account wallet’s public address.

Spin Shop’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

When you choose Continue with Apple, Apple shares your name (the first time you sign in) and your email address, or a private relay address if you choose Hide My Email, with Privy. Privy keeps your Apple account ID and your email address, and uses them the same way.

You can remove Spin Shop’s access at any time: for Google, in your Google Account’s security settings; for Apple, in your Apple Account’s Sign in with Apple settings.

How we use it

• To sign you in and keep you signed in
• To run spins, keep your balances, items and ledger, and let you check that spins are fair
• To ship the items you ask us to ship
• To credit your top-ups and pay your withdrawals
• To prevent abuse: limiting repeated attempts, and blocking accounts that misuse the shop
• To answer you when you contact us

We don’t use your information for advertising.

Who we share it with

• Privy, for sign-in and your account’s wallet.
• Stripe or MoonPay, through Privy’s card checkout, when you pay by card.
• Resend, which sends the emails our servers send, such as sign-in links.
• The Solana network. Top-ups and withdrawals are Solana transactions: anyone can see their wallet addresses and amounts, permanently. We read public Solana data through a Solana data provider, which sees the wallet addresses we look up.
• Shipping carriers, who get the details on the label.
• Our hosting providers, which run our servers, our database and this website.
• Google Fonts, when the shop’s page loads its font (see Technical information).
• Our team, who see account details to ship items, pay withdrawals and answer you.
• When the law requires it.

We don’t sell your personal information.

How long we keep it

• The sign-in cookie: 30 days, or until you sign out.
• Sign-in links work for 15 minutes; wallet sign-in messages for 10 minutes.
• IP addresses used to limit sign-in attempts: briefly, in the server’s memory only.
• Your account, spins, items, shipping and payment records, and records of sign-in requests (the email or wallet address each was for, and when): for as long as your account is open. After your account is deleted, we keep only what the law requires us to keep, such as payment records.
• Solana transactions are permanent and public. No one can delete them, including us.

Your choices

• Email support@vree.us to ask for a copy of your information, to correct it, or to delete your account. We may have to keep some records, such as payments, where the law requires.
• Sign out at any time from the shop’s wallet menu.
• Remove Spin Shop’s access to your Google or Apple account (see Google and Apple sign-in).

Security

• Only our server can read the sign-in cookie, and on our website it’s sent only over HTTPS. We store only a scrambled (hashed) copy of each sign-in’s code.
• Our servers hold no key that can move money from your wallet or from the shop’s. The only key they hold pays network fees, from a separate wallet that holds a small amount of SOL. Withdrawals are paid by our team from the shop’s own wallet.
• The keys to your account’s wallet are handled by Privy’s systems. We never have them.
• Card details go to the checkout provider, never to us.

No system is perfectly secure, so we can’t promise that nothing will ever go wrong.

Children

Spin Shop isn’t for anyone under 18. If you think someone under 18 has used it, email support@vree.us and we’ll close the account.

Changes to this policy

If we change this policy, we’ll post the new version here with a new effective date.

Contact us

VREE LLC · support@vree.us