01
How these technologies work
RipHQ uses cookies, local storage, session storage, and similar technologies to provide the service, protect accounts, remember your choices, understand product usage, and measure advertising.
Essential technologies operate when needed to provide features you request. Product analytics and advertising measurement are on by default and can be turned off at any time; an enabled Global Privacy Control signal turns both off automatically. You can change your choices at any time in Your Privacy Choices. RipHQ does not display a first-visit cookie banner on its supported United States storefront.
RipHQ also stores UTM campaign parameters in the URL used to reach RipHQ and the RipHQ landing-page path for first-party campaign reporting. This recordkeeping continues when optional analytics or advertising measurement is off, including under Global Privacy Control.
02
Essential technologies
sb-{project}-auth-token and cookie chunks- Provider
- Supabase
- Purpose
- Maintains a secure signed-in session and refreshes authentication.
- Duration
- Up to 400 days, or until the session expires or you sign out.
{storage-key}-code-verifier- Provider
- Supabase
- Purpose
- Completes secure PKCE authentication and provider sign-in flows.
- Duration
- Limited to the authentication flow.
riprush:presentation:v2:{presentation}:{pack}- Provider
- RipHQ
- Purpose
- Resumes an interrupted pack reveal at the correct position.
- Duration
- Until the reveal is completed, reset, or browser storage is cleared.
riprush:checkout:{product}:attempt-key- Provider
- RipHQ
- Purpose
- Prevents duplicate checkout attempts when a payment is retried.
- Duration
- For the current browser tab; removed after successful checkout.
Stripe-managed cookies and browser storage- Provider
- Stripe
- Purpose
- Supports payment processing, fraud prevention, and payment authentication when checkout or saved payment features are used.
- Duration
- Varies by Stripe technology; session-based and persistent identifiers may be used.
hCaptcha-managed cookies and browser storage- Provider
- hCaptcha
- Purpose
- Supports bot detection and authentication challenges when the login security check is used.
- Duration
- Varies by hCaptcha technology and the security session.
rhq_vid- Provider
- RipHQ
- Purpose
- Assigns this browser consistently to experiments. When analytics is enabled, it also links browser and server events before sign-in.
- Duration
- Up to 365 days; rotated on sign-out or account switching.
rhq_vid_sig- Provider
- RipHQ
- Purpose
- Authenticates the browser visitor identifier so another visitor's analytics history cannot be linked during sign-in.
- Duration
- Up to 365 days; replaced when the visitor identifier rotates.
rhq_authenticated- Provider
- RipHQ
- Purpose
- Records that this browser completed authentication so a later account switch can rotate its visitor identifier safely.
- Duration
- Up to 365 days; cleared on sign-out or account switching.
rhq_skip_pre_auth_alias- Provider
- RipHQ
- Purpose
- Prevents analytics history from a previous account being linked during an account switch.
- Duration
- Up to 10 minutes; cleared when the next sign-in starts.
03
Always-active first-party attribution
This first-party record is maintained by RipHQ and is not affected by the optional product analytics or advertising settings. Global Privacy Control does not disable it.
riprush_campaign_attribution- Provider
- RipHQ
- Purpose
- Stores UTM campaign parameters in the URL used to reach RipHQ and the RipHQ landing-page path so an account or completed purchase can be attributed in RipHQ's own records.
- Duration
- 90 days in the browser; campaign values attached to account and order records follow those records' retention.
04
Preference storage
riprush_analytics_consent- Provider
- RipHQ
- Purpose
- Remembers whether product analytics is enabled or disabled.
- Duration
- 365 days.
riprush_advertising_consent- Provider
- RipHQ
- Purpose
- Remembers whether advertising measurement is enabled or disabled.
- Duration
- 365 days.
riprush-analytics-consent- Provider
- RipHQ
- Purpose
- Keeps the browser copy of your product analytics choice.
- Duration
- Until browser storage is cleared.
riprush-pending-tracking-preferences- Provider
- RipHQ
- Purpose
- Temporarily queues a preference while account synchronization is unavailable.
- Duration
- Until synchronization succeeds or browser storage is cleared.
05
Optional product analytics
RipHQ loads PostHog for necessary error monitoring. Unless you opt out of product analytics, PostHog also records selected page and product events with interaction autocapture disabled and, for a signed-in user, may associate them with an account ID, email address, and display name. An enabled Global Privacy Control signal turns product analytics off automatically. When analytics is off, browser error monitoring uses memory-only state and does not persist a PostHog identifier.
ph_{project-key}_posthog- Provider
- PostHog
- Purpose
- Maintains the analytics identity, session, and related analytics state.
- Duration
- Managed by PostHog until product analytics is disabled or browser storage is cleared.
riprush-analytics-user-id- Provider
- RipHQ
- Purpose
- Keeps the signed-in analytics identity synchronized in this browser.
- Duration
- Until sign-out, product analytics is disabled, identity reset, or browser storage is cleared.
06
Optional advertising measurement
Unless you opt out of advertising measurement, RipHQ may load Meta Pixel, the Google Ads tag, TikTok Pixel, Reddit Pixel, and the OpenAI Ads pixel for ads in ChatGPT, and preserve provider click and browser identifiers. For a signed-in user, these providers may also receive hashed (SHA-256) versions of supported identifiers, including the account email address, stable account ID, verified phone number, and the first and last name from the account's default shipping address, to improve conversion matching. The city, state or region, postal code, and country of that address may also be sent, hashed for Meta and TikTok and as normalized plain text for Google Ads and OpenAI Ads. RipHQ does not send the plain email address, phone number, account ID, or recipient name. Meta may receive public page and product views, card searches, checkout steps, submitted product interest, and support-contact clicks. Purchase and completed-registration events are sent from RipHQ's server. RipHQ treats an enabled Global Privacy Control signal as an advertising opt-out.
Independently of these browser technologies, and unless advertising measurement is off for the account, RipHQ uploads customer lists to Google Ads (Customer Match) and Meta (Custom Audiences) from its own account records. The lists contain SHA-256 hashes of the account email address, verified phone number, and the first and last name from the default shipping address, plus that address's city, state or region, postal code, and country. They do not set cookies or run in your browser. Turning off advertising measurement while signed in removes the account from those lists within about 24 hours. The Privacy Policy describes this disclosure and your related state privacy rights.
riprush_provider_attribution- Provider
- RipHQ
- Purpose
- Stores the latest consented Meta, Google Ads, TikTok, Reddit, and OpenAI Ads click identifiers for purchase attribution.
- Duration
- 90 days.
_fbc- Provider
- RipHQ and Meta
- Purpose
- Stores a Meta click identifier used for advertising attribution.
- Duration
- 90 days when set by RipHQ.
_fbp- Provider
- Meta
- Purpose
- Stores a browser identifier used for Meta advertising measurement.
- Duration
- Provider-managed, typically up to 90 days.
_gcl_*- Provider
- Google
- Purpose
- Stores advertising click and conversion-linking identifiers used for Google Ads measurement and remarketing.
- Duration
- Provider-managed; duration varies by identifier.
_ttp, ttcsid*, ttclid, and _tt_enable_cookie- Provider
- TikTok
- Purpose
- Stores browser, session, and click identifiers used for TikTok advertising measurement.
- Duration
- Provider-managed, typically up to 13 months.
_rdt_uuid, _rdt_cid, and _rdt_em- Provider
- Reddit
- Purpose
- Stores browser and click identifiers used for Reddit advertising measurement.
- Duration
- Provider-managed, typically up to 90 days.
__oppref and __obref- Provider
- OpenAI Ads
- Purpose
- Stores click and browser identifiers for ads shown in ChatGPT.
- Duration
- 30 days for __oppref and 365 days for __obref.
07
Your controls
Use the tracking preference settingsto allow or disable optional categories. Turning off either category stops its future optional tracking. Turning off advertising measurement also clears RipHQ-managed advertising attribution storage where supported. Neither control disables RipHQ's first-party UTM and landing-path records described above.
You can also delete cookies and site data through your browser. Doing so may sign you out, reset your preferences, or prevent an interrupted checkout or reveal from resuming. Browser settings cannot always remove information already received by a third-party provider.
