G
GRAIL HUNTERZby Caldarus Labs
Legal Hub OverviewResponsible Purchasing Policy
User Safety

Responsible Purchasing Policy

Effective: July 29, 2026Version: 1.0

RESPONSIBLE PURCHASING POLICY

Caldarus Labs
Effective Date: July 30, 2026
Last Version: 1.0 (Production Release)

1. PREAMBLE, RETAIL CLASSIFICATION & CONSUMER PROTECTION FRAMEWORK

1.1 Purpose and Policy Commitment

Caldarus Labs, a Virginia sole proprietorship ("Grail Hunterz," "Company," "we," "us," or "our"), is dedicated to fostering a safe, transparent, and balanced digital e-commerce environment for hobbyists, sports card enthusiasts, and trading card collectors. This Responsible Purchasing Policy (the "Policy") establishes binding standards, operational controls, spending thresholds, age verification protocols, and self-exclusion mechanisms across the Grail Hunterz mobile applications, web portals, marketplace services, and associated digital collectible interfaces (collectively, the "Platform").

Digital mystery pack openings ("Rips") are designed strictly as a retail entertainment and hobby collecting activity. Caldarus Labs recognizes that digital collectible platforms involve randomized item distribution, which requires rigorous consumer protection controls to prevent impulsive spending, protect vulnerable individuals, enforce age restrictions, and uphold digital wellness.

1.2 Retail E-Commerce Goods Classification & Non-Gambling Legal Disclaimer

Caldarus Labs operates exclusively as a retail e-commerce marketplace and vaulting service for authenticated physical collectibles (including PSA, BGS, and CGC graded slabs, as well as raw trading cards). GRAIL HUNTERZ IS NOT A GAMBLING PLATFORM, LOTTERY, CONTEST, SWEEPSTAKES, OR CASINO SERVICE.

  1. Sale of Tangible Personal Property: Every mystery pack purchased on the Platform represents a final retail sale of physical tangible personal property stored in secure, third-party climate-controlled vault facilities. Every mystery pack purchase transfers 100% unencumbered legal title and ownership of the underlying physical collectible card to the purchaser upon reveal.
  2. No Loss Transactions: Every mystery pack contains a verified, physical card from the disclosed pack manifest pool. No mystery pack purchase yields zero value or an empty pull.
  3. Discretionary Merchant Buyback: The Platform may offer users an instant voluntary option to sell their revealed physical collectible card back to Caldarus Labs or a third-party marketplace liquidity provider at a transparent, real-time Fair Market Value ("FMV"). The existence of a secondary merchant buyback mechanism is a standard retail liquidity service and does not transform the underlying retail goods purchase into a wager, bet, or gambling transaction.
  4. Regulatory Positioning: Caldarus Labs voluntarily implements casino-grade consumer protection standards, financial velocity caps, and self-exclusion tools to provide industry-leading consumer protection under Federal Trade Commission ("FTC") Section 5 guidance (15 U.S.C. § 45) and state unfair and deceptive acts and practices ("UDAP") statutes.

1.3 Scope and Binding Nature

This Policy applies universally to all registered account holders ("Users," "you," or "your"), visitors, payment transactions, pack openings, marketplace buybacks, and vault redemption requests executed on or through the Platform. By creating an account, depositing funds, or purchasing mystery packs on the Platform, you acknowledge that you have read, understood, and agreed to be bound by all terms, thresholds, and operational rules set forth in this Policy.

2. ACCOUNT SPENDING THRESHOLDS, VELOCITY LIMITS & SESSION CONTROLS

2.1 Default System Velocity Caps

To protect Users from unintentional overspending, Caldarus Labs enforces automated financial velocity caps on all accounts. Velocity caps monitor cumulative fiat currency deposits and mystery pack purchases across rolling time windows.

Unless a User configures lower custom spending limits pursuant to Section 2.2, every account is subject to the following default maximum spending caps:

  • Default Daily Spending Cap: $500.00 USD per calendar day (calculated on a rolling 24-hour basis resetting at 00:00:00 UTC).
  • Default Weekly Spending Cap: $2,500.00 USD per rolling 7 calendar days (calculated continuously over 168 consecutive hours).
  • Default Monthly Spending Cap: $5,000.00 USD per calendar month (resetting on the first day of each calendar month at 00:00:00 UTC).

Transactions, deposits, or pack purchases that would cause a User’s total account spend to exceed any active velocity cap are automatically declined by the Platform payment engine.

2.2 User-Configured Custom Spending Limits

Users have the absolute right to set custom spending limits that are lower than the system defaults. Custom limits can be established at any time within the Platform mobile app interface under Account Settings -> Responsible Purchasing Controls or by emailing support@caldaruslabs.app.

Users may configure lower limits for:

  1. Daily maximum deposit/spend allowance (e.g., $50.00 USD per day).
  2. Weekly maximum deposit/spend allowance (e.g., $200.00 USD per week).
  3. Monthly maximum deposit/spend allowance (e.g., $500.00 USD per month).

Once a custom lower spending limit is saved, it is immediately enforced across the Platform.

2.3 Mandatory 48-Hour Cooling-Off Protocol for Limit Increases

To prevent impulsive limit adjustments during active session engagement, any request by a User to increase an existing spending limit or remove custom spending caps is subject to a strict, mandatory forty-eight (48) hour cooling-off period.

The cooling-off protocol operates as follows:

  1. Initiation: Upon submitting a request to increase or remove a spending limit, the Platform registers a pending modification log and starts an automated 48-hour timer (172,800 seconds).
  2. Active Protection During Window: Throughout the 48-hour cooling-off window, the User's pre-existing, lower spending limit remains 100% active and strictly enforced.
  3. Mandatory Post-Expiration Re-Confirmation: Upon expiration of the 48-hour timer, the requested limit increase DOES NOT automatically take effect. The User must log into the Platform and complete an affirmative, manual re-confirmation step within twenty-four (24) hours post-expiration.
  4. Automatic Cancellation: If the User fails to affirmatively re-confirm the limit increase within twenty-four (24) hours following the expiration of the 48-hour cooling-off window, the increase request is automatically voided and canceled, and the existing lower spending limit remains in effect.

2.4 Immediate Application of Limit Decreases

Any request by a User to decrease a spending limit or establish tighter velocity constraints takes effect immediately (within 60 seconds of system processing). No cooling-off delay or post-expiration re-confirmation is required for limit reductions.

2.5 Session Velocity Micro-Interruptions & Mandatory Spend Prompts

To encourage mindful collecting and interrupt compulsive session looping, the Platform triggers automated micro-interruptions and spend alerts:

  1. 25-Pack Session Micro-Interruption: When a User opens twenty-five (25) consecutive mystery packs within a single active application session (defined as continuous interaction without a 15-minute period of inactivity), the Platform automatically pauses pack purchasing and presents a full-screen mandatory modal prompt. The modal displays:
    • Total number of packs opened during the current session.
    • Total USD spent during the current session.
    • A mandatory 10-second pause timer requiring the User to manually acknowledge their session spend before permitting further pack purchases.
  2. 75% Velocity Proximity Alert: When a User's cumulative spend reaches seventy-five percent (75%) of any active daily, weekly, or monthly limit, the Platform displays an in-app banner warning detailing remaining allowable spend.

3. VOLUNTARY SELF-EXCLUSION & ACCOUNT LOCK PROTOCOLS

3.1 Voluntary Self-Exclusion Tiers

Caldarus Labs provides robust self-exclusion mechanisms allowing Users to restrict access to their accounts for specified durations or permanently. Self-exclusion requests can be executed directly within the Platform application under Account Settings -> Self-Exclusion or by submitting a written request to support@caldaruslabs.app.

Users may select from the following binding self-exclusion tiers:

  1. 72-Hour Cooling-Off Period: A temporary 3-day account suspension for Users seeking a brief pause from Platform activity.
  2. 30-Day Short-Term Exclusion: A 30-calendar-day complete account lockout.
  3. 90-Day Medium-Term Exclusion: A 90-calendar-day complete account lockout.
  4. 1-Year Long-Term Exclusion: A 365-calendar-day complete account lockout.
  5. Permanent Lifetime Self-Exclusion: An irrevocable, lifetime ban from the Platform, blocking all current and future account creation attempts.

3.2 Instant Token Revocation and Account Lockdown Mechanics

Upon triggering a self-exclusion request via the Platform app or written notice, the Platform execution engine immediately executes the following security protocols:

  1. Session Token Revocation: All active JSON Web Tokens (JWT), OAuth authentication tokens, and session states in the iOS app are invalidated within ten (10) seconds.
  2. Account Login Suspension: The User's account credentials are locked. Attempts to log into the Platform return an error indicating that the account is under active self-exclusion.
  3. Financial Transaction Block: All deposit capabilities, payment gateway authorizations, mystery pack purchases, marketplace bids, and pack opening mechanics are immediately disabled.
  4. Marketing Communication Suppression: The User's email address, phone number, and device push tokens are added to the internal suppression list within twenty-four (24) hours. Automated promotional emails, SMS notifications, and push messages are halted for the duration of the exclusion period.

3.3 Custody, Transfer, and Disposition of User Assets & Balances

Self-exclusion restricts Platform gaming and purchasing functionality but does NOT confiscate earned fiat proceeds or physical collectibles legally owned by the User. Account assets are handled strictly as follows:

A. Physical Vaulted Collectibles (vault_inventory)

  • All physical trading cards owned by the User and stored in the secure vault remain 100% the legal property of the User.
  • During an active self-exclusion period, the User may contact Customer Support at support@caldaruslabs.app or support@caldaruslabs.app to request physical shipping and delivery of vaulted items to their verified residential mailing address.
  • Standard shipping and handling fees apply. Shipments will be dispatched within five (5) business days of identity verification.

B. Withdrawable Cash Proceeds (user_proceeds)

  • Net cash balances originating from prior voluntary marketplace sales, trade-ins, or merchant buybacks represent customer fiat proceeds.
  • Self-excluded Users retain the absolute right to withdraw 100% of their withdrawable cash proceeds.
  • To initiate a payout during self-exclusion, the User must contact Customer Support at support@caldaruslabs.app. Proceeds will be disbursed to the User's verified bank account or original payout method within three (3) to five (5) business days following standard anti-money laundering (AML) and identity checks.

C. Promotional Credits and Non-Withdrawable Credits (user_bonus / user_pack_credit)

  • Temporary Exclusions (72-Hour, 30-Day, 90-Day, 1-Year): Unused promotional credits, match bonuses, or non-withdrawable deposit credits are frozen for the duration of the exclusion period. Credits resume availability upon expiration of the temporary exclusion, subject to original credit expiration dates.
  • Permanent Lifetime Exclusion: Upon activation of Permanent Lifetime Exclusion, all unredeemed promotional credits, bonus credits, and non-withdrawable deposit credits are permanently forfeited and canceled without compensation.

3.4 Absolute Irrevocability of Active Self-Exclusion

SELF-EXCLUSION IS ABSOLUTELY IRREVOCABLE. Once activated, a self-exclusion period cannot be canceled, shortened, modified, paused, or waived under any circumstances prior to the scheduled expiration timestamp.

The owner of Caldarus Labs, and any support or engineering personnel, are strictly prohibited from overriding, bypassing, or lifting an active self-exclusion flag. Inquiries requesting early termination of self-exclusion will be automatically declined.

4. AGE VERIFICATION, AUTOMATED KYC & MINOR PROTECTION SAFEGUARDS

4.1 Strict 18+ Eligibility Requirement

The Platform is strictly restricted to individuals who are at least eighteen (18) years of age (or the legal age of majority in their jurisdiction of residence, whichever is higher). Persons under 18 years of age ("Minors") are strictly prohibited from opening an account, depositing funds, purchasing mystery packs, accessing the marketplace, or utilizing any Platform service.

4.2 Automated Identity Verification (KYC) Standards

Caldarus Labs enforces mandatory, automated identity verification (Know Your Customer / KYC) protocols leveraging industry-leading enterprise identity verification platforms.

The KYC verification process requires:

  1. Government-Issued Document Verification: Real-time optical scan and authentication of an unexpired, government-issued photo ID (Driver’s License, State ID card, or Passport).
  2. Biometric Liveness Match: Facial recognition liveness check matching the User's live selfie against the photo on the government document.
  3. Database Validation: Automated cross-referencing of User legal name, Date of Birth (DOB), and residential address against credit reporting databases and public records.

KYC Verification Triggers:

  • Mandatory prior to completing initial account registration.
  • Mandatory prior to processing any deposit exceeding $100.00 USD.
  • Mandatory prior to executing any fiat withdrawal or physical item vault redemption.

Accounts that fail automated KYC verification or indicate an age under 18 are automatically blocked from accessing transactional features.

4.3 Minor Account Discovery, Freeze, and Closure Protocols

If Caldarus Labs determines, discovers, receives notification of, or reasonably suspects that an account belongs to or is being operated by a Minor under 18 years of age, the Platform will immediately execute the following enforcement steps:

  1. Immediate Account Lockdown: The account is instantly frozen and locked within sixty (60) seconds of discovery.
  2. Order Cancellation: All unrevealed mystery pack orders, pending marketplace bids, and active transactions are immediately canceled.
  3. Financial Settlement & Deposit Refund:
    • Caldarus Labs strictly enforces a zero-profit policy regarding Minor accounts.
    • Net fiat currency deposited into the account (calculated as total deposits minus any amounts previously disbursed for fulfilled physical shipping requests) will be refunded to the original payment instrument within seven (7) business days.
  4. Vaulted Item Disposition: Any physical collectible cards remaining in vault storage acquired by a Minor will be placed on legal hold. Physical items may be claimed by a verified parent or legal guardian upon proof of authority within thirty (30) days. Unclaimed items will be handled in compliance with applicable state unclaimed property laws.
  5. Permanent Blacklisting: The Minor's name, email address, physical address, device ID, and payment details are permanently blacklisted to prevent future account creation.

4.4 Parental and Guardian Intervention Procedures

Parents or legal guardians who suspect or discover that a Minor child has created an account or accessed the Platform using unauthorized credentials may request an immediate emergency account lockdown.

Parental Lockdown Request Protocol:

  • Dedicated Contact Email: Send an urgent notice to support@caldaruslabs.app with the subject line URGENT: Minor Account Lockdown Request.
  • Required Documentation:
    1. Full legal name and DOB of the Minor.
    2. Account details (email address, username, or payment method details used on the Platform).
    3. Proof of parent/guardian legal authority (e.g., copy of government ID of parent and birth certificate or legal guardianship order).
  • Execution SLA: Upon receipt of a complete lockdown request, Customer Safety personnel will freeze the target account and block associated payment methods within four (4) hours.

5. FINANCIAL RESPONSIBILITY WARNINGS & COMPREHENSIVE CONSUMER HOTLINE DIRECTORY

5.1 Behavioral Warnings & Compulsive Purchasing Disclosures

Purchasing digital mystery packs involves financial risk. Users are strongly advised to adhere to the following digital wellness guidelines:

  • Entertainment Budgeting: Mystery pack purchases should be funded strictly from personal discretionary entertainment budgets. Never use funds earmarked for essential living expenses, housing, food, medical bills, utilities, tuition, or debt service.
  • No Speculative Investment: Trading card market values fluctuate based on secondary market demand. Mystery packs MUST NOT be purchased as investments, savings vehicles, or income-generating instruments.
  • Avoid Loss-Chasing: Attempting to recoup financial losses by making rapid, successive pack purchases is a primary indicator of compulsive behavior. If you feel compelled to chase losses, utilize our self-exclusion tools immediately.

5.2 National Problem Spending Support Resources

If you or someone you know is struggling with compulsive spending, problem gambling, or emotional purchasing behavior, confidential help is available 24/7 through national support organizations:

  • National Council on Problem Gambling (NCPG):
  • Substance Abuse and Mental Health Services Administration (SAMHSA):
    • National Helpline: 1-800-662-HELP (1-800-662-4357)
    • TTY Helpline: 1-800-487-4889
    • Official Website: samhsa.gov
  • Gamblers Anonymous (GA):
  • Gam-Anon International Support:
    • Support for Families & Loved Ones: gam-anon.org | 1-718-352-1671

5.3 State-Specific Problem Gambling & Consumer Protection Helpline Directory

State law mandates specific localized helpline disclosures for residents of various U.S. jurisdictions. The table below outlines state-specific confidential support resources:

StateOrganization / State AgencyContact Hotline NumberWebsite / Resource Link
AlabamaAlabama Council on Compulsive Gambling1-800-GAMBLER (1-800-426-2537)alcompulsivegambling.org
ArizonaArizona Department of Gaming - Problem Gambling1-800-NEXT-STEP (1-800-639-8783) / Text NEXTSTEP to 53342problemgambling.az.gov
CaliforniaCalifornia Office of Problem Gambling (OPG)1-800-GAMBLER (1-800-426-2537) / Text SUPPORT to 53342problemgambling.ca.gov
ColoradoProblem Gambling Coalition of Colorado1-800-GAMBLER (1-800-426-2537)problemgamblingcolorado.org
ConnecticutConnecticut Council on Problem Gambling1-888-789-7777ccpg.org
FloridaFlorida Council on Compulsive Gambling1-888-ADMIT-IT (1-888-236-4848)gamblinghelporg.org
GeorgiaGeorgia Crisis and Access Line (GCAL)1-800-715-4225dbhdd.georgia.gov
IllinoisIllinois Department of Human Services - Are You Really Winning?1-800-GAMBLER (1-800-426-2537) / Text ILGAMB to 53342areyoureallywinning.com
IndianaIndiana Problem Gambling Help1-800-9-WITH-IT (1-800-994-8448)in.gov/fssa/dmha/pg.htm
KentuckyKentucky Council on Problem Gambling1-800-GAMBLER (1-800-426-2537)kycpg.org
LouisianaLouisiana Problem Gamblers Helpline1-877-770-STOP (1-877-770-7867)helpforproblemgambling.org
MarylandMaryland Center of Excellence on Problem Gambling1-800-GAMBLER (1-800-426-2537)mdproblemgambling.com
MassachusettsMassachusetts Problem Gambling Helpline1-800-327-5050mahelpline.org/problemgambling
MichiganMichigan Department of Health and Human Services1-800-270-7117michigan.gov/mgcb
MinnesotaMinnesota Problem Gambling Helpline1-800-333-HOPE (1-800-333-4673)gethelpmn.org
MissouriMissouri Department of Mental Health1-888-BETS-OFF (1-888-238-7633)dmh.mo.gov/behavioral-health
NevadaNevada Council on Problem Gambling1-800-GAMBLER (1-800-426-2537)nevadacouncil.org
New JerseyCouncil on Compulsive Gambling of New Jersey1-800-GAMBLER (1-800-426-2537)800gambler.org
New YorkNew York State HOPEline1-877-8-HOPENY (1-877-846-7369) / Text HOPENY to 467369oasas.ny.gov/hopeline
North CarolinaNorth Carolina Problem Gambling Helpline1-877-718-5543morethanagame.nc.gov
OhioOhio Problem Gambling Helpline1-800-589-9966pgohio.org
PennsylvaniaCouncil on Compulsive Gambling of PA1-800-GAMBLER (1-800-426-2537)pacouncil.com
TennesseeREDLINE Tennessee Department of Mental Health1-800-889-9789tn.gov/behavioral-health
TexasTexas Council on Problem Gambling1-800-GAMBLER (1-800-426-2537)texasproblemgambling.org
VirginiaVirginia Council on Problem Gambling1-888-532-3500vcpg.net
WashingtonWashington State Problem Gambling Helpline1-800-547-6133evergreencpg.org

6. UI/UX COMPLIANCE SAFEGUARDS & TRANSACTION TRANSPARENCY

6.1 Anti-Loss-Disguised-as-Win (Anti-LDAW) Visual and Audio Restrictions

To prevent deceptive visual framing and comply with FTC Section 5 fair presentation standards, Caldarus Labs enforces strict system-level UI/UX guidelines:

  1. Sub-Price Pull Rule (Anti-LDAW): When a mystery pack reveal yields a physical collectible card whose current Fair Market Value (FMV) is lower than the pack purchase price:
    • The application interface MUST NOT play celebratory audio effects, victory chimes, fanfare sounds, or positive particle animations (e.g., gold coin explosions, confetti, sparkles).
    • The application interface MUST NOT display green "WIN" banners, positive percentage graphics, or congratulatory text prompts.
    • The reveal MUST be presented in a neutral visual tone displaying the verified physical card image, card attributes, and real-time FMV valuation without misleading celebratory feedback.
  2. Above-Price Pull Rule: Celebratory visual effects (confetti, chime effects) are permitted ONLY when a pack reveal yields a high-tier physical collectible card whose verified FMV exceeds the original pack purchase price.

6.2 Mandatory Terminology and Copy Tone Standards

To maintain retail e-commerce classification and eliminate predatory gambling framing, all Platform interfaces, copy, marketing materials, and push notifications strictly adhere to mandatory terminology standards:

  • STRICTLY PROHIBITED WORDS: The following words and their derivatives are strictly banned across all Platform communications:
    • "win", "winner", "jackpot", "bet", "wager", "gambling", "casino", "payout", "odds of winning", "house edge".
  • MANDATORY PERMITTED RETAIL TERMINOLOGY: The Platform exclusively utilizes retail e-commerce and hobby collecting terms:
    • "pull", "find", "reveal", "hunt", "collectible", "purchase", "fair market valuation", "merchant buyback", "vault redemption", "pack opening".

6.3 Transparent Real-Time Valuation and Buyback Terms

  1. Manifest Disclosures: Every mystery pack displayed on the Platform includes a published, verifiable Manifest Pool detailing all potential card outcomes, card conditions, grading criteria, and exact mathematical pull probability distributions.
  2. Real-Time Valuation Data: Card Fair Market Values (FMV) displayed on the Platform are generated dynamically using aggregation algorithms pulling from verified secondary market transaction data (including TCGplayer market prices, eBay sold listings, and Card Kingdom price guides).
  3. Transparent Buyback Lock: Instant merchant buyback offers are subject to explicit expiration timers (e.g., 60-second quote lock). Prices will not adjust dynamically during an active quote lock without explicit User re-confirmation.

7. GOVERNING LAW, AMENDMENTS, ENFORCEMENT & CONTACT INFORMATION

7.1 Virginia Governing Law & Enforcement

This Policy, its construction, validity, and enforcement, shall be governed by and construed in accordance with the internal laws of the Commonwealth of Virginia, without giving effect to any choice of law or conflict of law principles that would require the application of the laws of another jurisdiction. Any legal dispute, claim, or arbitration arising under or relating to this Policy shall be resolved in accordance with the dispute resolution and binding arbitration provisions set forth in the main Grail Hunterz Terms of Service.

7.2 Policy Modifications and 14-Day Notice Protocol

Caldarus Labs reserves the right to modify, update, or amend this Policy at any time to reflect statutory changes, evolving regulatory guidance, or operational enhancements.

  • Material Changes Notice: If Caldarus Labs makes material changes to spending caps, self-exclusion tiers, or consumer protection protocols, registered Users will be notified via in-app banner alert and email at least fourteen (14) calendar days prior to the effective date of the updated Policy.
  • Continued Acceptance: Continued use of the Platform, maintenance of an active account, or purchasing of mystery packs following the expiration of the 14-day notice period constitutes full acceptance of the revised Policy.

7.3 Contact Information for Responsible Purchasing & Safety Concerns

For questions, custom spending limit requests, self-exclusion assistance, parental intervention lockdown requests, or consumer safety inquiries, please contact Caldarus Labs using the official details below:

Business:
Caldarus Labs (Sole Proprietorship)

Business Address:
1521 Boyd Pointe Way, Unit 3402, Tysons, VA 22182
United States of America

Official Contact Email Directory:

  • Responsible Purchasing & Self-Exclusion: support@caldaruslabs.app
  • Parental & Minor Safety Lockdown: support@caldaruslabs.app
  • General Customer Support & Payouts: support@caldaruslabs.app
  • Legal & Regulatory Inquiries: support@caldaruslabs.app

© 2026 Caldarus Labs All rights reserved.