Privacy Policy

1. Scope and eligibility

Outlier Collective, Inc. d/b/a LVL6 (“LVL6,” “we,” “us,” or “our”) provides a collectible portfolio, market-information, and pack-opening platform. This Privacy Policy applies to information we handle through lvl6.com, LVL6 accounts, customer support, and other services that link to this policy (collectively, the “Service”).

The Service is offered only to people who are at least 18 years old and located in the United States. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information to us, contact us so we can review and delete it as appropriate.

This policy does not control independent websites, marketplaces, identity providers, payment providers, carriers, or other third parties. Their own privacy notices govern information they handle for their independent purposes.

2. Information we collect

The information we collect depends on the features you use. Some paid-pack, Vault, shipping, buyback, and payout features described below may not yet be available. We collect the related information only if and when you use those features.

Account and identity information

When you create or use an account, we may receive your email address, name or display name, LVL6 username, authentication-provider identifiers, linked login method, account status, age confirmation, and account-security information. Privy and the login provider you choose handle the authentication flow. LVL6 does not receive your Google password or a password you use with another identity provider.

Portfolio, wishlist, and user-provided information

We collect the information you enter to operate your collectible portfolio, including card and product names, printings, variants, condition, grading company and grade, quantity, acquisition or disposition type, purchase or sale price, fees, currency, dates, notes, cost basis, wishlist selections, and corrections. We also collect messages, feedback, and information you send to customer support.

Usage, device, and log information

When you use the Service, we and our service providers may automatically record IP address, approximate location derived from IP, browser and operating-system information, device type, referring pages, pages and features used, dates and times of access, session identifiers, diagnostic events, and security or error logs. The current website does not request precise device geolocation.

Paid packs, Vault, shipping, buybacks, and payouts

If LVL6 enables these features and you use them, we may collect or receive:

• order, pack, price, odds-version, item-assignment, Vault, valuation, and buyback records;
• purchase-fund, credit, reward, refund, sale-proceeds, withdrawal, chargeback, and payment-status information;
• your name, shipping address, email, telephone number, carrier, tracking, delivery, insurance, and shipment-claim information;
• payout destination details and limited payment metadata, such as a processor token, payment type, billing country, and last four digits, when provided by a payment processor; and
• age, identity, fraud, sanctions, payment-risk, and compliance results, including identity-document information when a provider requires verification for a transaction, shipment, or payout.

Payment-card credentials are entered with and processed by a PCI-compliant payment provider. LVL6 is not designed to store full payment-card numbers or card security codes.

Sensitive personal information

Some information used for account access, identity verification, payment, shipping, fraud prevention, or payout may be treated as sensitive under state law. We use sensitive information only to provide requested services, secure the Service, prevent fraud, verify eligibility, process transactions, meet legal obligations, or for other legally permitted purposes. We do not use sensitive information to infer characteristics about you or for targeted advertising.

3. Sources of information

We may obtain information:

• directly from you when you use the Service or contact us;
• automatically from your browser, device, cookies, and Service activity;
• from authentication providers such as Privy and the social or email login method you select;
• from payment, identity-verification, fraud-prevention, shipping, insurance, and payout providers when those features are enabled;
• from public sources and collectible-data providers, including marketplaces and market-data services; and
• from professional advisers, business partners, and other people who lawfully provide information to us.

4. How we use information

We use personal information to:

• create, authenticate, secure, and support LVL6 accounts;
• store and display your portfolio, wishlist, transaction history, cost basis, and account preferences;
• provide catalog search, market estimates, price history, and valuation provenance;
• operate paid packs, item assignment, Vault custody, shipping, buybacks, credits, rewards, refunds, and payouts when enabled;
• verify age and eligibility and perform identity, payment, fraud, sanctions, and risk reviews when appropriate;
• communicate about accounts, security, transactions, shipments, support, policy changes, and Service updates;
• diagnose errors, measure performance, understand usage, develop features, and improve the Service;
• detect, investigate, and prevent abuse, bots, multi-accounting, unauthorized transactions, chargebacks, and other prohibited conduct;
• enforce our Terms of Service and protect LVL6, our users, our providers, and others; and
• maintain business, accounting, tax, compliance, and legal records and respond to lawful requests.

5. How we disclose information

We may disclose information to the following categories of recipients for the purposes described in this policy:

• Infrastructure and account providers. This includes providers that support authentication, hosting, content delivery, databases, security, communications, support, and error monitoring, such as Privy, Vercel, and PlanetScale.
• Catalog and market-data providers. Marketplace sources help us identify collectibles and provide pricing evidence. We do not disclose your private portfolio ledger to public marketplaces merely to display market data.
• Transaction and fulfillment providers. If paid features are enabled, payment processors, identity/KYC vendors, fraud and sanctions-screening providers, banks, payout providers, warehouses, insurers, logistics providers, and carriers may receive information needed to complete and protect a transaction.
• Professional advisers. Lawyers, accountants, auditors, consultants, and insurers may receive information when reasonably necessary to provide services to us.
• Legal and safety recipients. We may disclose information when we reasonably believe it is necessary to comply with law or legal process, enforce agreements, investigate fraud or security events, or protect rights, property, and safety.
• Business-transaction recipients. Information may be reviewed or transferred as part of a proposed or completed financing, merger, acquisition, restructuring, bankruptcy, or sale of assets.
• Recipients you direct. We may disclose information with your consent or at your direction.

No sale or targeted-advertising sharing

LVL6 does not currently sell personal information for money or share personal information for cross-context behavioral advertising. We do not sell sensitive personal information. If these practices change, we will update this policy and provide legally required choices before beginning the new practice.

6. Cookies and tracking technologies

LVL6 and its providers use cookies, local storage, and similar technologies that are necessary to authenticate users, maintain sessions, remember preferences, prevent fraud, balance traffic, and protect the Service. Server logs and limited performance signals also help us diagnose failures and secure the platform.

The current Service does not use advertising cookies or disclose browsing activity for targeted advertising. You can restrict cookies through your browser, but essential account and security features may stop working. Because we do not currently sell or share personal information, an opt-out preference signal such as Global Privacy Control does not change our current practices. We will honor such signals if and when applicable law requires it for a future practice.

7. US state privacy rights

Depending on your state and subject to legal exceptions, you may have the right to request that we:

• confirm whether we process your personal information;
• provide access to or a portable copy of your information;
• correct inaccurate information;
• delete information;
• opt you out of a sale, targeted-advertising sharing, or certain profiling if we engage in those activities;
• limit certain uses of sensitive personal information; or
• review an appeal of a denied privacy request.

Submit a request by emailing a@outlier.co with the subject “LVL6 Privacy Request” or by writing to the mailing address in Section 11. Describe the right you want to exercise and provide the email address associated with your account. We may ask for information reasonably necessary to verify your identity and protect your account. An authorized agent may submit a request where permitted by law, but we may require proof of authority and direct verification with you.

We will not discriminate against you for exercising a privacy right. If we deny a request, our response will explain the reason and any available appeal process. We may retain information when an exception applies, including when it is needed to complete a transaction, secure the Service, maintain records required by law, or establish or defend legal claims.

California notice at collection

The table summarizes categories of personal information LVL6 has collected or expects to collect when you choose an enabled feature. We use and disclose these categories for the business purposes in Sections 4 and 5. We do not sell or share these categories for cross-context behavioral advertising.

Rewards and financial incentives

LVL6 may offer optional rewards, referrals, discounts, or promotions under separate program terms. Unless a program-specific notice says otherwise, these benefits reward qualifying Service activity and are not payment for selling personal information. You may decline a program and still use generally available Service features.

8. Data retention and security

We retain information for as long as reasonably necessary to provide the Service, maintain your account and portfolio, complete transactions, resolve disputes, enforce agreements, prevent fraud, and satisfy tax, accounting, compliance, and legal obligations. Retention periods vary by data type and context. For example, portfolio data generally remains while your account is active, while transaction and compliance records may be retained after account closure when law or legitimate recordkeeping requires it. Backups may retain information for a limited period before being overwritten.

We use administrative, technical, and physical safeguards designed to protect personal information, including account authentication, access controls, encrypted network transport, provider security reviews, and separation between private account records and public catalog data. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Protect your login method and notify us promptly if you suspect unauthorized account activity.

9. Third-party services and United States processing

The Service may link to marketplaces, pricing sources, carrier sites, or other services that LVL6 does not control. Review their privacy practices before providing information to them. Public marketplace listings and sales data displayed by LVL6 may include information that was already made public by marketplace participants; it is not part of your private LVL6 portfolio unless you add it.

LVL6 is a United States service. Information is processed in the United States and other locations where our providers operate. The Service is not directed to users outside the United States.

10. Changes to this policy

We may update this policy to reflect changes to the Service, our practices, or applicable requirements. The “Last updated” date shows when the current version was posted. If a change materially affects how we use personal information, we will provide additional notice as appropriate, such as through the Service or by email. We will request consent when required by law.

11. Contact us

For privacy questions or requests, email a@outlier.co or write to:

LVL6
1027 Alma Street
STE B
Palo Alto, CA 94301
United States

Registered office: 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808.