Privacy Policy

This Privacy Policy explains how RIPMoney collects, uses, shares and protects your personal data when you use our website, and what rights you have over that data. It applies to the website at ripmoney.com and to any account you create on it.

For details on cookies specifically, see our Cookie Policy. For the rules of the service itself, see our Terms of Service.

Who we are

The data controller for your personal data is the RIPMoney team, the operator of ripmoney.com ("we", "us", "our"). You can reach us about any privacy matter, including a request for our full company and registration details, at [email protected].

Data we collect

Data you give us

• Account data: email address, username, first and last name, and a unique account identifier (UUID).
• Sign-in data: if you sign in with a third-party provider such as Google, we receive your email address, name and provider account ID. We never receive your provider password.
• Content you submit: messages you send, trade offers and proposals you create, and any text you enter in forms.

Data generated by your use of the service

• Activity data: your credit balance, clicks, unlocked collectibles and their rarity, trades and trade proposals, leaderboard position, and certificates you generate.
• Technical data: IP address, browser and device type, referring page, and timestamps, recorded in server logs for security and abuse prevention.
• Analytics data: pages viewed and interactions, collected via Google Analytics only if you consent to analytics cookies.

Payment data

Payments are handled by Stripe. We do not collect or store your card number, expiry date or security code. We receive from Stripe a customer identifier, the amount and currency, the number of credits purchased and the status of the payment, which we store to grant credits and keep accounting records.

Why we use your data, and on what legal basis

• To provide the service: create and maintain your account, authenticate you, track credits and collectibles, run the exchange and leaderboard, generate certificates. Legal basis: performance of a contract.
• To process payments and comply with tax and accounting obligations. Legal basis: performance of a contract and legal obligation.
• To send service emails, including one-time sign-in links and notices about your account or important changes. Legal basis: performance of a contract.
• To keep the service secure: rate limiting, fraud and abuse detection, debugging, backups. Legal basis: legitimate interest in protecting the service and its users.
• To understand how the site is used through analytics. Legal basis: your consent, which you can withdraw at any time.
• To establish, exercise or defend legal claims. Legal basis: legitimate interest.

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

What is visible to other users

Your name is shown publicly on the leaderboard and on certificates you generate and share. Your username and the collectibles you offer are visible to other users in the exchange when you create or respond to a trade. Your email address and payment history are never shown to other users.

Who we share data with

We share data only with service providers who process it on our behalf, under contract and only for the purposes we specify:

• Stripe: payment processing and checkout.
• Google: sign-in with Google, and Google Analytics where you have consented.
• Email delivery provider: sending sign-in links and service emails.
• Hosting and infrastructure provider: running the website, its database and backups.

We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger, acquisition or sale of assets, in which case we will notify you.

International transfers

Some of our providers are located outside the European Economic Area, including in the United States. Where data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request a copy of the relevant safeguards by contacting us.

How long we keep data

• Account and activity data: for as long as your account exists. When you delete your account, we delete or anonymise it without undue delay.
• Payment and invoicing records: retained for the period required by tax and accounting law (typically 7 to 10 years), even after account deletion.
• Server and security logs: typically up to 12 months.
• Backups: deleted data may persist in encrypted backups for a short rolling period before being overwritten.

Your rights

Depending on where you live, you have the right to access your data, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time (withdrawal does not affect processing carried out before). You can exercise most of these directly in your profile settings, including deleting your account.

For anything else, email [email protected]. We respond within one month. If you are in the EEA or the UK and believe we have mishandled your data, you may also lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

Security

We use HTTPS, signed and expiring sign-in links, rate limiting, access controls and regular updates to protect your data. No system is completely secure; if a breach affects your rights, we will notify you and the competent authority as required by law.

Children

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy. The "Last updated" date above reflects the current version, and we will notify you of material changes by email or a notice on the website.

Contact Us

Questions about this Privacy Policy or your data? Email us at [email protected].