Last updated: May 21, 2026
This Privacy Policy explains how Steven Hoorfar and Benjamin Gabayan, doing business as Mystery Box (“Mystery Box,” “we,” “us,” or “our”), collect, use, and share personal information when you participate in the Mystery Box sweepstakes or use itsmysterybox.com (the “Site”).
We collect the information you provide when you enter, which may include your name, email address, phone number, and social media handle, along with your entry details and the participating location. We also collect limited technical information automatically, such as general device and usage information, to operate and secure the Site.
We use personal information to administer the sweepstakes and determine and notify winners; to verify entries and prevent fraud or abuse; to operate, maintain, and improve the Site; and, where you have opted in, to send you promotional and marketing communications by email and/or text message. We may also use information as required to comply with legal obligations.
You will only receive marketing communications from us if you opt in at the point of entry. Opting in to marketing is never required to enter or win — an alternate method of entry that does not involve marketing is available as described in Section 4(b) of our Official Rules. You can withdraw consent at any time: reply STOP to any text message to stop texts, or use the unsubscribe link in any marketing email to stop emails. When you unsubscribe, we add you to a suppression list so that we do not send you further marketing.
We do not sell your personal information. We share personal information only with service providers who help us operate the sweepstakes and Site (for example, data storage, email/SMS delivery, and analytics providers), and only as needed to perform those services. We may also disclose information if required by law or to protect our rights, users, or the public.
We use third-party services to operate the Site and sweepstakes, including providers for database storage, email delivery, text-message delivery, and hosting. These providers process information on our behalf and are not authorized to use it for their own marketing.
We retain entry and contact information for as long as needed to administer the sweepstakes, provide communications you have requested, and comply with our legal obligations. You may request deletion of your information as described below.
Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you, and to opt out of marketing. California residents may have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information. To exercise any of these rights, contact us at certifiedmysterybox@gmail.com and we will respond as required by applicable law.
The sweepstakes and Site are intended for individuals who are at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
We use reasonable administrative and technical measures to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued participation after an update constitutes acceptance of the revised policy.
For any privacy questions or requests, contact us at certifiedmysterybox@gmail.com, or by mail at Mystery Box, 439 S Peck Dr, Beverly Hills, CA 90212.