NIL FANBOX PRIVACY POLICY

Effective Date: August 12, 2026
Last Updated: August 12, 2026

NIL FanBox, LLC (“FanBox,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you:

• Visit NILFanBox.com;
• Visit or purchase from a school-specific FanBox storefront;
• Purchase or manage a FanBox membership;
• Participate in the FanBox Flex Payment Plan;
• Use the FanVault or other member experiences;
• Purchase collectibles, add-ons, or limited-edition products;
• Interact with FanBox emails, advertising, social media, or digital content;
• Contact FanBox Member Support; or
• Otherwise interact with FanBox products, services, websites, or experiences.

By using FanBox services, you acknowledge the practices described in this Privacy Policy.

If you have questions about this Privacy Policy or your personal information, contact us at:

privacy@nilfanbox.com

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected by FanBox through our websites, school-specific storefronts, member experiences, ecommerce systems, customer-support channels, marketing activities, events, and other services we operate.

FanBox may operate multiple school-specific ecommerce storefronts while providing a unified FanBox membership experience.

Information associated with your FanBox relationship may therefore be processed across FanBox systems and authorized service providers as necessary to:

• Manage your membership;
• Process payments;
• Fulfill your FanBox;
• Provide digital member experiences;
• Maintain your FanVault;
• Provide customer support;
• Measure marketing performance; and
• Operate our business.

This Privacy Policy does not govern the independent privacy practices of third parties whose websites or services you access separately from FanBox.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with FanBox.

Information You Provide Directly

We may collect information including:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Account credentials;
• School or team preferences;
• Membership selections;
• Athlete selections;
• Product preferences;
• Order information;
• Membership history;
• Customer-support communications;
• Survey responses;
• Reviews;
• Contest or promotion entries; and
• Other information you choose to provide.

3. MEMBERSHIP INFORMATION

When you purchase or manage a FanBox membership, we may collect and maintain information including:

• Your selected school;
• Membership plan;
• Annual or Flex payment selection;
• Subscription status;
• Renewal date;
• Payment status;
• Installment status;
• Athlete selection, where applicable;
• Fulfillment status;
• Membership benefits;
• FanVault information;
• Order history; and
• Customer-service history.

We use this information to operate and administer your FanBox membership.

4. ANNUAL AND FLEX PAYMENT INFORMATION

FanBox offers membership payment options that may include:

• An Annual Payment Plan; and
• A Flex / 3-Pay Payment Plan.

If you select Flex, information about your three scheduled installment payments, payment status, and fulfillment eligibility may be maintained through our ecommerce and subscription-management systems.

FanBox uses this information to:

• Process scheduled payments;
• Determine whether a membership has been paid in full;
• Place or remove fulfillment holds;
• Manage failed payments;
• Communicate with you about your payment method;
• Process cancellations or refunds; and
• Determine when your physical FanBox is eligible for shipment.

5. PAYMENT INFORMATION

Payments are processed using authorized third-party ecommerce and payment providers, which may include Shopify, Shopify Payments, Recharge, and other payment-processing partners.

When you provide payment information, your full payment-card information is generally collected and processed by the applicable secure payment provider rather than stored directly in FanBox's own systems.

FanBox may receive and maintain limited information associated with your payment method, such as:

• Payment token;
• Card brand;
• Last four digits;
• Expiration information;
• Payment status; and
• Other transaction identifiers.

These details allow us to administer purchases, subscriptions, renewals, installment payments, refunds, and payment recovery without maintaining your full card number in our internal systems.

Please do not send full credit-card or debit-card information to FanBox by email, chat, or other unsecured communications.

6. PAYMENT-METHOD AND SUBSCRIPTION MIGRATIONS

From time to time, FanBox may restructure, migrate, or consolidate its ecommerce or subscription systems, including moving customers between FanBox school-specific storefronts.

Where necessary, FanBox and its authorized service providers may securely migrate:

• Customer records;
• Subscription records;
• Payment tokens or payment-method references;
• Order history;
• Membership information; and
• Related identifiers

between authorized FanBox systems or service providers.

Any migration of payment-card information is handled through applicable payment providers and PCI-compliant processes.

FanBox does not receive or manually handle full payment-card numbers as part of such migrations.

7. ORDER AND FULFILLMENT INFORMATION

When you purchase a membership or product, we collect information necessary to process and fulfill your order.

This may include:

• Name;
• Shipping address;
• Email;
• Telephone number;
• Products ordered;
• Athlete or membership selections;
• Order status;
• Fulfillment status;
• Shipment tracking information; and
• Delivery information.

We may share necessary fulfillment information with:

• Warehouses;
• Fulfillment providers;
• Shipping carriers;
• Logistics partners;
• Product manufacturers; and
• Other service providers involved in completing your order.

8. FANVAULT INFORMATION

FanBox may provide members with a digital FanVault or similar experience that displays collectibles associated with their FanBox membership.

FanVault information may include:

• Products associated with your membership;
• Athlete information;
• Collectible descriptions;
• FanBox rarity classifications;
• Suggested product values;
• Edition or quantity information;
• Images;
• Product history; and
• Other digital collectible information.

We may use FanVault engagement information to personalize the member experience, understand member interests, improve FanBox products, and develop future offerings.

9. CUSTOMER SUPPORT INFORMATION

If you contact FanBox Member Support, we may collect:

• Your name;
• Email address;
• Telephone number;
• Order number;
• Membership information;
• Payment status;
• Shipping information;
• Support request;
• Communications with our support team; and
• Any other information you voluntarily provide.

We use this information to investigate and resolve your request and to improve our member experience.

10. INFORMATION COLLECTED AUTOMATICALLY

When you use FanBox websites or digital services, we and our service providers may automatically collect information including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Referring website;
• Pages viewed;
• Links clicked;
• Time spent on pages;
• Dates and times of visits;
• Shopping-cart activity;
• Checkout activity;
• Purchases;
• Advertising interactions;
• Approximate geographic location derived from IP address; and
• Other technical and usage information.

We use this information to operate our websites, understand customer behavior, improve performance, prevent fraud, and measure marketing effectiveness.

11. COOKIES AND SIMILAR TECHNOLOGIES

FanBox and our service providers use cookies and similar technologies, including:

• Cookies;
• Pixels;
• Web beacons;
• Tags;
• Software development kits;
• Local storage;
• Advertising identifiers; and
• Similar technologies.

These technologies may be used for the purposes described below.

Strictly Necessary

These technologies are required to:

• Operate our websites;
• Maintain shopping carts;
• Process checkout;
• Authenticate users;
• Prevent fraud; and
• Provide core website functionality.

Performance and Analytics

These technologies help us understand:

• How visitors use our stores;
• Which pages are visited;
• How customers move through checkout;
• Which products generate engagement; and
• How our websites perform.

Functional

These technologies may remember:

• Preferences;
• Account settings;
• School selections; and
• Other information that improves your experience.

Advertising and Measurement

Advertising technologies may help us:

• Measure marketing campaigns;
• Attribute purchases to advertising sources;
• Build advertising audiences;
• Retarget visitors;
• Limit irrelevant advertising;
• Understand conversion activity; and
• Optimize paid media.

12. SHOPIFY AND ECOMMERCE TECHNOLOGY

FanBox operates ecommerce experiences using Shopify and related services.

Shopify may process information necessary to provide:

• Storefront services;
• Checkout;
• Payment processing;
• Customer accounts;
• Order management;
• Fraud prevention;
• Analytics; and
• Other ecommerce functionality.

Shopify's processing of personal information may also be governed by Shopify's own privacy terms and policies.

13. RECHARGE AND SUBSCRIPTION MANAGEMENT

FanBox may use Recharge to administer membership subscriptions, renewals, payment schedules, installment payments, membership changes, and related subscription functionality.

Recharge may process information including:

• Customer information;
• Subscription information;
• Payment-method references;
• Billing schedules;
• Renewal information;
• Failed-payment information; and
• Subscription activity.

We provide Recharge only the information reasonably necessary to operate our subscription program.

14. ANALYTICS AND ADVERTISING

FanBox uses analytics and advertising platforms to understand customer behavior and acquire new members.

These providers may include platforms such as:

• Meta;
• Google;
• Shopify;
• Email and customer-engagement platforms;
• Analytics providers;
• Attribution providers; and
• Other advertising technology partners.

We may provide or allow these providers to collect information such as:

• Browser or device identifiers;
• Website activity;
• Product views;
• Cart activity;
• Checkout activity;
• Purchases;
• Conversion information; and
• Hashed or otherwise protected customer identifiers where permitted.

This information helps FanBox measure and optimize advertising.

15. META PIXEL, CONVERSIONS API AND SCHOOL-SPECIFIC DATASETS

FanBox may use Meta advertising technologies, including browser-based tracking and server-side event transmission through tools such as the Meta Pixel and Conversions API.

Our school-specific storefronts may use separate measurement datasets so that marketing performance can be measured and optimized independently for each school.

Information transmitted to Meta may include events such as:

• Page View;
• View Content;
• Add to Cart;
• Initiate Checkout;
• Purchase; and
• Other relevant ecommerce events.

Depending upon applicable settings and law, identifiers used for matching may be hashed or otherwise protected before transmission.

FanBox uses these technologies for advertising measurement, attribution, audience development, retargeting, and campaign optimization.

16. PARTNERSHIP ADS AND CREATOR CONTENT

FanBox may advertise through publishers, creators, sports-media organizations, athletes, schools, or other partners using platform features such as Meta Partnership Ads.

FanBox may use engagement and conversion information to measure the effectiveness of such advertising.

Our advertising partners generally do not receive access to FanBox customer lists, payment information, or subscription-management systems merely because their content is used in an advertisement.

17. EMAIL AND MARKETING COMMUNICATIONS

If you provide your email address or other contact information, FanBox may use it to send:

• Order confirmations;
• Membership communications;
• Renewal notices;
• Payment reminders;
• Failed-payment notices;
• Shipping notifications;
• Member-experience communications;
• Customer-support messages; and
• Marketing communications.

You may unsubscribe from promotional email communications using the unsubscribe link in the applicable email.

Even if you opt out of marketing, FanBox may continue sending necessary transactional or administrative communications concerning your account, membership, order, payment, or legal notices.

18. SOCIAL MEDIA

If you interact with FanBox through social-media platforms, we may receive information based on:

• Your interactions with FanBox content;
• Platform permissions;
• Advertising activity;
• Publicly available information; and
• Information otherwise made available by the social-media platform.

Information collected directly by social-media platforms is governed by those platforms' respective privacy policies.

19. INFORMATION FROM PARTNERS AND OTHER SOURCES

FanBox may receive information from:

• Schools;
• Athletes or athlete representatives;
• Marketing partners;
• Media partners;
• Referral partners;
• Analytics providers;
• Advertising platforms;
• Ecommerce providers;
• Payment providers; and
• Other authorized sources.

We may combine this information with information already associated with your FanBox account where permitted by law.

20. HOW WE USE PERSONAL INFORMATION

FanBox may use personal information to:

• Create and manage your account;
• Provide FanBox memberships;
• Process purchases;
• Process annual and Flex payments;
• Administer automatic renewals;
• Recover failed payments;
• Fulfill and ship products;
• Provide FanVault experiences;
• Respond to customer-service requests;
• Process cancellations and refunds;
• Prevent fraud;
• Protect FanBox systems and customers;
• Personalize member experiences;
• Analyze product and service performance;
• Develop new FanBox products and services;
• Measure advertising;
• Perform attribution;
• Build and optimize marketing audiences;
• Send marketing communications;
• Maintain business records;
• Enforce our Terms of Service;
• Comply with legal obligations; and
• Protect our legal rights.

21. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the categories of recipients described below.

Service Providers

We may provide personal information to companies that perform services on our behalf, including:

• Shopify;
• Recharge;
• Payment processors;
• Warehouses and fulfillment providers;
• Shipping carriers;
• Customer-support platforms;
• Email and communications providers;
• Cloud-hosting providers;
• Fraud-prevention providers;
• Analytics services;
• Advertising platforms;
• Marketing agencies;
• Professional advisors; and
• Other operational vendors.

These providers receive information reasonably necessary to perform services for FanBox.

Legal and Safety Purposes

We may disclose information if reasonably necessary to:

• Comply with applicable law;
• Respond to legal process;
• Protect FanBox rights or property;
• Prevent fraud;
• Protect customers or the public; or
• Investigate suspected unlawful conduct.

Corporate Transactions

Personal information may be disclosed in connection with an actual or proposed:

• Merger;
• Acquisition;
• Financing;
• Investment;
• Sale of assets;
• Reorganization;
• Bankruptcy; or
• Similar corporate transaction.

22. SALE AND SHARING OF PERSONAL INFORMATION

FanBox does not sell personal information for money in the ordinary meaning of the word “sell.”

However, certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough that some uses of advertising cookies, pixels, audience-matching technologies, or advertising platforms may fall within those definitions.

Where required by law, you may have the right to opt out of:

• The sale of personal information;
• Sharing for cross-context behavioral advertising; or
• Processing for targeted advertising.

Where applicable, you may exercise these rights through the privacy controls made available on our websites or by contacting:

privacy@nilfanbox.com

23. YOUR PRIVACY CHOICES

Depending upon where you live, you may have rights regarding your personal information.

These may include the right to:

• Confirm whether we process your information;
• Access personal information;
• Correct inaccurate information;
• Delete personal information;
• Obtain a portable copy of certain information;
• Opt out of targeted advertising;
• Opt out of certain sales or sharing of information;
• Limit certain uses of sensitive information, where applicable; and
• Appeal a denial of a privacy request where required by law.

Your rights vary based on applicable law.

24. CALIFORNIA PRIVACY RIGHTS

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

Subject to applicable exceptions, California residents may request:

• The categories of personal information FanBox has collected;
• The sources from which information was collected;
• The business or commercial purposes for collecting or using information;
• Categories of third parties to whom information was disclosed;
• Specific pieces of personal information collected;
• Correction of inaccurate information;
• Deletion of certain information;
• A portable copy of certain information; and
• Opt-out of sale or sharing of personal information.

California residents also have the right not to receive discriminatory treatment for exercising applicable privacy rights.

25. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain other U.S. states may have additional privacy rights under applicable comprehensive state privacy laws.

Depending upon your state, those rights may include:

• Access;
• Correction;
• Deletion;
• Portability;
• Opt-out of targeted advertising;
• Opt-out of certain sales of personal information;
• Opt-out of certain profiling; and
• The ability to appeal certain privacy-request decisions.

FanBox will process verified requests in accordance with applicable law.

26. GLOBAL PRIVACY CONTROL AND OPT-OUT SIGNALS

Where required by applicable law and technically supported, FanBox will recognize qualifying browser-based opt-out preference signals, such as Global Privacy Control (“GPC”), for the browser or device from which the signal is received.

Because these signals may be device- or browser-specific, you may need to enable them separately on each browser or device you use.

27. HOW TO SUBMIT A PRIVACY REQUEST

To submit a privacy request, contact:

privacy@nilfanbox.com

You may also use any privacy-request or “Do Not Sell or Share My Personal Information” functionality made available through a FanBox website.

We may need to verify your identity before completing certain requests.

Authorized agents may submit requests where permitted by applicable law, subject to appropriate verification.

28. MARKETING OPT-OUTS

You may unsubscribe from promotional emails by using the unsubscribe link included in those communications.

Marketing opt-outs do not prevent FanBox from sending necessary communications relating to:

• Purchases;
• Memberships;
• Payments;
• Renewals;
• Shipping;
• Security;
• Customer support; or
• Other transactional or administrative matters.

29. COOKIE CONTROLS

You may be able to control cookies and similar technologies through:

• Your browser settings;
• FanBox cookie or privacy controls;
• Platform-specific privacy settings; or
• Device advertising settings.

Blocking certain cookies may affect the operation or functionality of FanBox websites.

30. DATA SECURITY

FanBox uses reasonable administrative, technical, and physical safeguards designed to protect personal information.

These measures may include:

• Encryption in transit;
• Restricted access;
• Authentication controls;
• Vendor security requirements;
• Access management;
• Secure payment-processing systems; and
• Other industry-standard safeguards.

Payment-card information is processed through authorized payment providers using security standards applicable to payment-card processing.

However, no system can guarantee absolute security.

You are responsible for protecting your account credentials and should notify FanBox promptly if you believe your account has been compromised.

31. DATA RETENTION

FanBox retains personal information for as long as reasonably necessary to:

• Provide products and services;
• Maintain memberships;
• Process orders;
• Support customers;
• Maintain business and financial records;
• Resolve disputes;
• Prevent fraud;
• Enforce agreements; and
• Comply with legal obligations.

Retention periods may vary by category of information.

If you close your account or request deletion, FanBox may retain certain information where permitted or required by law, including information necessary for:

• Tax and accounting purposes;
• Payment records;
• Fraud prevention;
• Chargebacks;
• Litigation;
• Regulatory compliance; and
• Enforcement of legal rights.

The legacy policy already recognized that some information must be retained after account closure for order fulfillment, litigation and legal obligations; that concept is preserved here.

32. CHILDREN'S PRIVACY

FanBox services are not directed to children under 13.

We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

Parents or guardians who believe a child has provided personal information to FanBox may contact:

privacy@nilfanbox.com

Individuals under 18 should use FanBox only with the involvement and supervision of a parent or legal guardian.

33. THIRD-PARTY LINKS AND SERVICES

FanBox websites may contain links to websites or services operated by third parties.

FanBox is not responsible for the privacy practices of independently operated third-party websites or services.

We encourage you to review the privacy policies of third parties before providing them personal information.

34. INTERNATIONAL USERS

FanBox primarily operates in the United States.

If you access FanBox services from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where FanBox or our service providers operate.

Privacy and data-protection laws in those locations may differ from those in your country of residence.

35. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as FanBox products, technology, business practices, or legal requirements evolve.

When we update this Privacy Policy, we will revise the Last Updated date.

For material changes, we may provide additional notice through:

• Email;
• FanBox websites;
• Member portals;
• Checkout;
• Account notices; or
• Other reasonable methods.

We encourage you to review this Privacy Policy periodically.

36. CONTACT US

Questions, privacy requests, or concerns about FanBox privacy practices may be directed to:

NIL FanBox, LLC
Attn: Privacy
472 Bartram Street, SE
Atlanta, Georgia 30316

Email: privacy@nilfanbox.com

Member Support: help@nilfanbox.com