Privacy Policy

This Privacy Policy explains how RipHQ, a brand operated by Bangers LLC, collects, uses, discloses, and protects personal information when you use RipHQ services or contact support. It does not govern third-party services you visit independently.

Depending on how you use RipHQ, we collect:

• Account data such as email address, display name, phone number, authentication provider, and security settings.
• Shipping data such as recipient name, United States address, selected service, tracking, and delivery status.
• Order and vault records, including products, prices, payment status, allocated cards, reveals, custody events, and shipments.
• Support messages, notification preferences, and information you choose to provide.
• Device, browser, IP address, user-agent, session, event, security, and diagnostic information.
• Unless you opt out of advertising measurement, campaign parameters, Meta, Google Ads, and TikTok click and browser identifiers, pages viewed, checkout activity, and completed-purchase value and currency.

Stripe processes complete payment credentials. RipHQ receives transaction identifiers, status, amount, currency, and limited billing details needed to reconcile payments, but does not store full card numbers.

We collect information from you, your device, RipHQ transactions, authentication providers such as Google or Apple when selected, payment and shipping providers, security and monitoring tools, and lawful fraud-prevention sources.

• Authenticate accounts and secure sessions.
• Process orders, allocations, reveals, custody, and shipping.
• Provide receipts, service notices, and requested support.
• Detect fraud, abuse, security incidents, and policy violations.
• Maintain audit, accounting, tax, and legal records.
• Measure and improve RipHQ unless you opt out of product analytics.
• Measure advertising performance and attribute purchases unless you opt out of advertising measurement.
• Send you a Trustpilot invitation to review RipHQ after your first package is delivered when you have enabled marketing emails, or when RipHQ staff manually requests a service review.
• Comply with law and protect users, Bangers LLC, and others.

We disclose only information reasonably needed for the described purpose to service providers, including Supabase for authentication, databases, private storage, and signed proof-video delivery; Stripe for payments and refunds; Trigger.dev for workflows; PostHog for necessary error monitoring and optional product analytics; Resend for authentication, transactional, and marketing email delivery; hosting providers; and carriers involved in delivery. RipHQ may provide Trustpilot with your email address, account display name, and a unique invitation reference to request a service review after your first delivered package when you have enabled marketing emails, or when RipHQ staff manually requests a service review. Unless you opt out of advertising measurement, we also disclose website and purchase events to Meta, Google, and TikTok for ad attribution, audience creation, and campaign measurement.

We may also disclose information to professional advisers, auditors, insurers, authorities, or transaction counterparties when reasonably necessary to comply with law, prevent harm, enforce agreements, or complete a merger, financing, or sale. RipHQ does not sell personal information for money.

Supabase session cookies are necessary to sign you in, refresh your session, and protect account access. RipHQ also uses browser local storage to remember analytics consent, maintain the analytics identity for a signed-in account, and resume an interrupted reveal.

PostHog product analytics is on by default and stops when you opt out or your browser sends a Global Privacy Control signal. It records page and product interactions with autocapture disabled. For signed-in users who have not opted out, events may be associated with an account ID, email address, and display name. Trading-card identities and payment details are never included. You can change your choice for this browser at any time in your tracking preference settings. Clearing browser storage may also reset your choice.

RipHQ does not display a first-visit cookie banner on its supported United States storefront. Instead, optional analytics and advertising measurement operate on an opt-out basis, with a persistent Your Privacy Choices control available from the site footer. Visitors outside the supported region receive an unavailable notice before optional trackers initialize.

PostHog error monitoring remains active when product analytics is disabled because it is used to detect and repair service failures. In that case, browser errors are sent with limited diagnostic details and an anonymous, memory-only identifier that resets when the page is reloaded or closed. RipHQ does not associate those browser error events with your signed-in analytics identity.

Advertising measurement is separate and on by default; it stops when you opt out or your browser sends a Global Privacy Control signal. Meta Pixel, the Google Ads tag, and TikTok Pixel may set browser and click identifiers such as _fbp, _fbc, _gcl_aw, and _ttp. For a signed-in user, providers may also receive a normalized one-way hash of the account email address with browser events to improve conversion matching. For a completed purchase, RipHQ may send the applicable provider the order value, currency, product, event time, consented identifiers and normalized one-way hashes of email and verified phone number. Depending on the provider, RipHQ may also send IP address, user-agent, or a hashed account ID. We do not send full payment-card details or revealed card identities.

You can independently change analytics and advertising choices in your tracking preference settings. RipHQ treats an enabled Global Privacy Control signal as an analytics and advertising opt-out for that browser. For signed-in users, RipHQ also records the latest choice on the account so a withdrawn choice can stop a delayed server-side conversion.

The Cookie Notice lists the browser technologies RipHQ uses, their purposes, and their retention periods.

We retain information for as long as needed to provide the service, maintain chain-of-custody and transaction records, resolve disputes, detect fraud, and meet tax, accounting, insurance, and legal duties. Short-lived advertising attribution records and completed delivery receipts are normally scheduled for deletion after 90 days; failed delivery records may be retained longer to investigate and resolve the failure. Meta, Google, TikTok, and PostHog may retain events under their own published retention settings and policies. Other retention periods vary by record type and are based on operational, contractual, and legal requirements.

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including access controls, scoped credentials, private media storage, and audit records. No system is completely secure. RipHQ operates in the United States, and information may be processed where our providers operate under applicable safeguards.

Depending on your state, you may have rights to confirm processing; access, correct, or delete personal information; obtain a portable copy; opt out of certain targeted advertising, sales, or profiling; limit certain sensitive-data uses; and appeal a denied request.

You can delete or deactivate your RipHQ account from account security settings. Accounts with order, vault, shipment, reveal, or RipCash history are deactivated so those records can be kept for legal and accounting reasons. Accounts with none of that history are erased. You can also submit a request to support@riphq.com. We may verify your identity and authority before acting. You may use an authorized agent where state law permits. We will not discriminate against you for exercising a privacy right.

Use your tracking preference settings to opt out of advertising measurement for this browser. RipHQ also honors Global Privacy Control for advertising measurement. You may contact support to request that advertising identifiers associated with your account be included in a privacy request.

You can change your marketing email preference in your account. Essential account, security, and transaction messages may continue. If you unsubscribe, report spam, or messages to your address repeatedly bounce, our email provider may record that status on your RipHQ account so we stop sending messages that should not be delivered.

RipHQ may offer a new US customer $6 in promotional RipCash after the customer submits an email address, agrees to receive marketing email, completes email-link authentication, creates a RipHQ account, and verifies an eligible US phone number. The promotional RipCash is limited to one award per new customer, expires seven days after phone verification, has no cash value, and is subject to the displayed campaign limit and terms. Taxes, shipping, and amounts above $6 remain the customer's responsibility.

Participation is voluntary. A participant may unsubscribe from marketing at any time without forfeiting promotional RipCash already awarded. To withdraw before completing enrollment, do not use the sign-in link or contact support@riphq.com. RipHQ reasonably estimates that the value of the email relationship and associated customer engagement is at least the $6 incentive, based on anticipated marketing, acquisition, and customer-retention value. The estimate is made in good faith and may be updated as campaign performance changes.

RipHQ does not set a separate minimum age for trading-card purchases beyond what applicable law requires, and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child under 13 provided information so we can investigate and delete it as required.

We may update this Policy as RipHQ or applicable law changes. We will post the revised effective date and provide additional notice when required. For privacy questions, requests, or appeals, email support@riphq.com.