Privacy Policy

This Privacy Policy explains how Bangers LLC, doing business as RipRush, collects, uses, discloses, and protects personal information when you use RipRush services or contact support. It does not govern third-party services you visit independently.

Depending on how you use RipRush, we collect:

• Account data such as email address, display name, phone number, authentication provider, and security settings.
• Shipping data such as recipient name, United States address, selected service, tracking, and delivery status.
• Order and vault records, including products, prices, payment status, allocated cards, reveals, custody events, and shipments.
• Support messages, notification preferences, and information you choose to provide.
• Device, browser, IP address, user-agent, session, event, security, and diagnostic information.

Stripe processes complete payment credentials. RipRush receives transaction identifiers, status, amount, currency, and limited billing details needed to reconcile payments, but does not store full card numbers.

We collect information from you, your device, RipRush transactions, authentication providers such as Google or Apple when selected, payment and shipping providers, security and monitoring tools, and lawful fraud-prevention sources.

• Authenticate accounts and secure sessions.
• Process orders, allocations, reveals, custody, and shipping.
• Provide receipts, service notices, and requested support.
• Detect fraud, abuse, security incidents, and policy violations.
• Maintain audit, accounting, tax, and legal records.
• Measure and improve RipRush when optional analytics is allowed.
• Comply with law and protect users, Bangers LLC, and others.

We disclose only information reasonably needed for the described purpose to service providers, including Supabase for authentication, databases, private storage, and signed proof-video delivery; Stripe for payments and refunds; Trigger.dev for workflows; Sentry for error monitoring; PostHog for optional analytics; hosting and communications providers; and carriers involved in delivery.

We may also disclose information to professional advisers, auditors, insurers, authorities, or transaction counterparties when reasonably necessary to comply with law, prevent harm, enforce agreements, or complete a merger, financing, or sale. RipRush does not sell personal information for money.

Supabase session cookies are necessary to sign you in, refresh your session, and protect account access. RipRush also uses browser local storage to remember analytics consent, maintain the analytics identity for a signed-in account, and resume an interrupted reveal.

PostHog analytics is optional and starts only after you select “Allow analytics.” It records page and product interactions with autocapture disabled. For signed-in users who allow analytics, events may be associated with an account ID, email address, and display name. Trading-card identities and payment details are never included. You can change your choice for this browser at any time below. Clearing browser storage may also reset your choice.

We retain information for as long as needed to provide the service, maintain chain-of-custody and transaction records, resolve disputes, detect fraud, and meet tax, accounting, insurance, and legal duties. Retention periods vary by record type and are based on operational, contractual, and legal requirements.

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including access controls, scoped credentials, private media storage, and audit records. No system is completely secure. RipRush operates in the United States, and information may be processed where our providers operate under applicable safeguards.

Depending on your state, you may have rights to confirm processing; access, correct, or delete personal information; obtain a portable copy; opt out of certain targeted advertising, sales, or profiling; limit certain sensitive-data uses; and appeal a denied request.

Submit a request to support@riprush.com. We may verify your identity and authority before acting. You may use an authorized agent where state law permits. We will not discriminate against you for exercising a privacy right.

You can change product and marketing notification preferences in your account. Essential account, security, and transaction messages may continue.

RipRush is for people who have reached the age of majority where they live and is not directed to children. We do not knowingly collect personal information from children under 13. Contact us if you believe a child provided information so we can investigate and delete it as required.

We may update this Policy as RipRush or applicable law changes. We will post the revised effective date and provide additional notice when required. For privacy questions, requests, or appeals, email support@riprush.com.