CCPA Privacy Notice

This California Privacy Notice supplements our Privacy Policy and applies only to residents of California, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”). It describes the personal information MAGA Enterprises LLC (“Patriot Social,” “we,” “us,” or “our”) collects through the Patriot Social platform at thepatriotsocial.com (the “Service”), how we use and disclose it, and the privacy rights available to California residents. Terms not defined here have the meaning given in our Privacy Policy.

1. Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information (as those categories are defined by the CCPA):

• Identifiers — such as your name, username, email address, phone number, IP address, and device and advertising identifiers.
• Account and referral data — your password (stored securely), the referral code or link you used, and the referral relationships between patriots.
• Commercial and rewards information — points earned and redeemed, Rewards Store orders, and leaderboard standing.
• Internet and network activity — pages viewed, features used, and other usage and log data.
• Shipping information — the recipient name and mailing address you enter when you redeem points for a physical reward. We do not collect tax documents, government IDs, or financial account details.
• Geolocation data — only the approximate region implied by your IP address, used for security and anti-fraud checks. We do not collect GPS or precise location.
• Inferences and anti-fraud signals — information used to detect duplicate accounts, bots, and abuse.

We collect this information directly from you, automatically as you use the Service, and from service providers who help us operate it (for example, hosting, email, email or phone verification, crash monitoring, and analytics and attribution providers). We do not knowingly collect personal information from anyone under 18.

2. How We Use Your Personal Information

We use the personal information we collect for the business and commercial purposes described in our Privacy Policy, including to:

• operate the Service, your account, and your referral link;
• credit points when a referral becomes verified, and run leaderboards, promotions, and the Rewards Store;
• ship the physical rewards you redeem with your points;
• detect, investigate, and prevent fraud, duplicate accounts, and abuse;
• communicate with you about your account and the Service; and
• maintain security and comply with applicable law.

3. How We Disclose Your Personal Information

In the past 12 months, we have disclosed personal information for business purposes to the following categories of recipients:

• service providers who process data on our behalf (for example, hosting, email, push-notification delivery, crash and performance monitoring, shipping, phone and email verification, and customer support providers);
• analytics and attribution partners, only where you have accepted our cookie banner on the website or allowed tracking in the mobile app;
• government agencies, courts, or other parties when required by law or to protect rights, safety, and the integrity of the Service; and
• a successor entity, in connection with a merger, acquisition, or sale of assets.

4. Sale or Sharing of Personal Information

We do not sell your personal information in exchange for money. Some analytics and advertising activity — cookies on the website, and device and advertising identifiers in the mobile app — may be considered “sharing” for cross-context behavioral advertising under the CCPA. It happens only with your permission, and you can opt out or withdraw that permission at any time: on the website, through the “Cookie Settings” link in the footer; in the mobile app, through iOS Settings → Privacy & Security → Tracking, or by resetting or deleting your advertising ID in Android settings. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

5. Your California Privacy Rights

If you are a California resident, you have the right to:

• Know and access — request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties to whom we disclose it.
• Obtain a copy — receive a portable copy of the personal information you have provided to us.
• Delete — request that we delete the personal information we collected from you, subject to certain exceptions permitted by law.
• Correct — request that we correct inaccurate personal information we maintain about you.
• Opt out of sale or sharing — direct us not to sell or share your personal information. We do not sell it for money, and you can opt out of any analytics or advertising “sharing” yourself: Cookie Settings on the website, or your tracking and advertising-ID settings on iOS and Android.
• Non-discrimination — not receive discriminatory treatment for exercising any of these rights.

6. How to Exercise Your Rights

You can exercise these rights by contacting us using the details below, or by updating your account settings and cookie choices within the Service. To protect your information, we will verify your request by matching the details you provide against the information in your account before we act on it. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent’s authorization. We will respond within the time required by law (generally within 45 days, with one extension where permitted), and we will not charge a fee for a verifiable request unless it is excessive or repetitive.

7. Shine the Light

California’s “Shine the Light” law (Civil Code § 1798.83) permits California residents to request information about a business’s disclosure of personal information to third parties for those third parties’ own direct-marketing purposes. We do not share personal information with third parties for their own direct marketing.

8. Changes to This Notice

We may update this California Privacy Notice from time to time. We will update the “Effective” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

9. Contact

This Service is operated by MAGA Enterprises LLC, 250 Stockade Ct, Powell, WY 82435, USA. To exercise your California privacy rights or ask about this Notice, contact us at this address or through the support options in the Service.