Skip to content

Privacy Policy

Privacy Policy

Last updated October 2026

This policy explains what Rippd collects when you use the Service, why we collect it and the choices you have. The short version: we collect as little as we can, much of what happens on Rippd is public on Solana anyway, and we never sell your data.

Contents 11
  1. 01What we collect
  2. 02Cookies and local storage
  3. 03How we use it
  4. 04Public data
  5. 05Sharing
  6. 06Uploads and moderation
  7. 07How long we keep data
  8. 08Your choices and rights
  9. 09Security
  10. 10Children
  11. 11Changes and contact

01What we collect

We only collect what the Service needs to work:

  • Wallet address: your public key, when you connect and sign in. We never see your private keys or recovery phrase.
  • Profile: the display name, bio, avatar and social links you choose to add.
  • Content: comments and their images, reports, and everything you upload to build a set, including images, card names and flavor text.
  • Verification requests: the links and notes you send to have a set verified, such as an official X account or website.
  • Activity: packs, market listings, purchases and sales, watchlist, follows, notifications and the other transactions you make through Rippd, linked to your wallet.
  • Referrals: your personal referral code and the card sets credited to it. If you open someone's referral link, we keep their code in a cookie for 30 days.
  • Price signatures: when you change a listing's price, the message you sign and its signature, kept as a record of the price you approved.
  • Technical data: your IP address, browser type and request logs, used for rate limiting, security and debugging.

02Cookies and local storage

Rippd sets two cookies. One is essential to the Service: it keeps you signed in. The other is a functional cookie that remembers a referral link you opened, so the person who shared it is credited if you create or claim a card set. We don't use advertising or cross-site tracking cookies.

foil_session
Lasts: 7 days
Purpose: Keeps you signed in. It's httpOnly, so scripts on the page can't read it.
foil_ref
Lasts: 30 days
Purpose: Remembers the first referral link you opened, so the person who shared it is credited if you create or claim a card set. It holds a short code and nothing about you, and it's only set when you open a link with a referral code.

Your preferences, such as sound, reduced motion and transaction priority, and the name of the wallet you last used are saved in your browser's local storage. They stay on your device.

03How we use it

  • to sign you in and run features like profiles, collections, packs, the card market, comments and notifications
  • to review verification requests and keep badges accurate
  • to prevent abuse, enforce rate limits and moderate content
  • to keep the Service secure and fix problems
  • to understand overall usage through aggregate statistics
  • to meet our legal obligations

04Public data

Your wallet address, pack payments, token burns and card ownership are recorded on Solana. That data is public and permanent, and neither Rippd nor anyone else can delete it. Your Rippd profile publicly links your display name and avatar to your wallet address.

Sets are public too: a set shows the wallet that built it, the token it's built on and whether it's Official or Community. Market activity is public as well. Your listings, with their card and price, and your sales, with their price, buyer and seller, are shown on Rippd to anyone, and every sale is also recorded on Solana.

05Sharing

We don't sell your personal data or share it for advertising. We share it only with:

  • service providers that help us run Rippd, such as hosting, storage and content delivery, Solana RPC and price-data providers, and image moderation, under contracts that limit how they use it
  • authorities, when the law requires it or to protect people from harm
  • a successor, if Rippd is ever merged or sold, who must keep this policy's promises

06Uploads and moderation

Images you upload are checked, stripped of EXIF metadata such as location, and resized before they're published. Uploads may be scanned automatically for prohibited content. The original raw files are deleted after processing.

07How long we keep data

We keep your profile and content while your account is active, or until you delete them. Rate-limit counters expire within minutes. Server logs, including IP addresses, are kept for a limited period for security and then deleted. Market records, such as listings, sales and the price messages sellers sign, are kept to show market history and to resolve problems. Verification requests and their evidence are kept with the set's record. Content tied to a published set, such as card images and the set manifest, is kept permanently because the on-chain record points to it.

08Your choices and rights

  • Edit or remove your profile details at any time in Settings.
  • Delete your own comments.
  • Sign out, or clear cookies and local storage in your browser.
  • Ask us for a copy of your data, or to correct or delete it. On-chain records, such as sales, and published sets can't be erased.

Depending on where you live, you may have further rights under laws such as the GDPR or Korea's Personal Information Protection Act.

09Security

We use HTTPS everywhere, httpOnly session cookies and signed sessions, and we limit which team members can access personal data. No system is perfectly secure, so please protect your wallet and device too.

10Children

Rippd is not for anyone under 18, and we don't knowingly collect data from children.

11Changes and contact

When this policy changes, we'll update the date at the top and tell you in the app about material changes. Contact details for privacy requests will be published here before Rippd launches on mainnet.