Privacy Policy

This Privacy Policy describes how Rip & Hold LLC (“Rip & Hold,” “we,” “us,” or “our”) handles personal information in connection with the Rip & Hold website at ripandhold.com, the Rip & Hold application at app.ripandhold.com, and related services (the “Service”). It applies to information we collect through the Service and does not apply to third-party websites or services that we do not control.

By using the Service, you agree to this Privacy Policy and our Terms & Conditions.

Account information

When you create an account, our authentication provider, Clerk, collects and processes information such as your name, email address, and login credentials (or the identifiers from any single sign-on provider you choose). We receive a limited account profile from Clerk to identify you within the Service.

Billing information

When you purchase a subscription, payments are processed by Stripe. Stripe collects your payment card and billing details directly. We do not receive or store your full payment card number; we receive limited information such as subscription status, plan, and partial card metadata needed to manage your subscription.

Checkout also collects your billing address, which Stripe stores against your customer record. It is used to determine the sales tax or VAT applicable to your purchase and to keep that calculation correct on renewals.

Sensitive information

We do not intentionally collect sensitive personal information such as Social Security numbers, government identification numbers, health information, precise geolocation, biometric information, or payment card numbers. Please do not submit sensitive personal information through the Service.

Usage and content data

We collect information about how you use the Service, such as your card holdings, watchlists, thesis calls, followed collectors, preferences, and the cards and sets you view or interact with. A thesis call includes the exact card printing and grade, Buy/Hold/Sell stance, your note, ownership disclosure, visibility choice, performance-tracking choice, timestamps, and the available market estimates used to open or close tracked performance.

Some content you create has a visibility setting. Content you mark public (for example, a public thesis call) is shown with your account identity on relevant card, profile, discovery, or ranking surfaces; content marked private is visible only to you. Visibility and deletion controls depend on the content type. In particular, a thesis created as private cannot later become public; a published call can be made private but its substantive content remains locked; a published call cannot be deleted; and retiring a call preserves a permanent frozen record. Never-published private theses may be edited or deleted. If you claim a profile username or write a profile bio, they are shown publicly whenever your profile is public; a master switch on your account page hides your profile page.

Public means publicly accessible, not just visible to other members. Public profiles and public thesis calls can be read by anyone on the internet without signing in or holding an account. Your holdings are not among them: there is no public holdings surface, and the cards you own are visible only to you. Public profile pages may also be indexed by search engines and generate a preview image when someone shares a link to them. Content you keep private is not included in these public surfaces.

Challenges, XP, and competitions

The Service includes research challenges, an experience-point (XP) system, and card-picking competitions. When you complete a qualifying action we add a record to an append-only ledger: the type of action, the item it applied to (a card or variant identifier), when it happened, and, for XP entries, the points awarded, the season, and a key that stops the same action being counted twice. These records hold identifiers, category labels, counts, dates, and card catalog names. They do not hold text you write. We also keep the totals derived from them: your lifetime XP, your level, your XP for the current season, your current and longest streak, and when you were last active.

Each challenge is stored with its progress count, when you completed it, and the identifiers that counted toward it. When you enter a competition we store the cards you picked, when you submitted or last edited the entry, the market prices we record for those cards when the competition locks and again when it resolves, and the return and rank we calculate from them.

Some of this is shown to other people:

• Your collector level and title appear on your public profile and beside your name on leaderboards. Your XP total, your XP history, and your challenge progress are not shown to anyone else.
• Once a competition locks, the standings show each entrant’s display name, the cards they picked, and their return. While a competition is still open, you see only your own picks.
• Leaderboards and competition standings are shown only to signed-in accounts, and are not visible to logged-out visitors.

The level shown beside your name is calculated partly from private activity, such as adding cards to your collection or watchlist, so it can move as you use the Service even when nothing you did was public.

Public ranking

Ranking is not a separate privacy switch. Qualifying public thesis calls with performance tracking enabled may enter ranked surfaces. A ranked row publishes statistics we calculate (such as returns over time, performance against a benchmark, a score, or a rank) alongside your display name. Availability and ranking methodology vary by leaderboard, and leaderboards are shown only to signed-in accounts.

Hiding your profile has limits we would rather state here than have you discover. Hiding it makes your profile page unavailable to others and removes your @username and your avatar from leaderboards and competition standings. It does not remove the name on your account: that name can still appear as the author of a public thesis call and as an entrant in a competition standing. To take content off these surfaces, use the applicable visibility, retirement, or deletion control; published and retired calls remain subject to the locked record rules described above.

Product analytics

We do not run a product-analytics tracker: no per-user usage events are sent to an analytics provider, and there is no session recording, no automatic capture of the text you click on, no on-site surveys, and no heatmap collection. The only usage measurement is aggregate traffic and performance measurement (Vercel Analytics and Speed Insights), which is cookieless, runs on every visit, and measures page volume and load performance rather than individuals. Feature activity that is part of the Service itself (for example your Collector XP history or challenge progress) is recorded in our own database as described above and is not shared with an analytics provider.

Communications

Rip & Hold does not send you email. We removed product and activity email in August 2026, along with the features it described. The only messages you receive are the account, security, and sign-in email sent by our authentication provider and the billing and receipt email sent by our payment provider, both of which are necessary to operate the Service. We do not send marketing or newsletter email, and we do not sell or rent your email address.

Device and log data

Like most online services, our infrastructure providers automatically collect technical information such as your IP address, browser type, device information, pages viewed, referring pages, and timestamps, for security, diagnostics, and analytics. Separately, our own application code reads your IP address to apply rate limits. This protects the Service against automated abuse and excessive load. We use it for that check and do not build a profile from it.

Errors and security reports are handled as follows:

• Errors on our servers are recorded in our hosting provider’s server logs (Vercel, described below) and are not sent to a separate error-tracking service. Log entries may include limited technical request context.
• Errors in your browser are not collected: we receive no browser error reports or session data.
• Content-security reports: your browser reports it to us whenever something on a page tries to load from a source our security policy does not allow, and we record that report in our server logs. This happens on any visit and is not governed by the analytics choice, because it is a security control rather than analytics. We deliberately keep the record minimal: which rule was triggered, and the origin (the site name, never the full address) that was blocked. Your browser also offers a snippet of the affected code and the file it came from; because those are the fields most likely to contain page content, we discard them on receipt and never store or forward them.

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and manage your account and authenticate you;
• process subscriptions, payments, and renewals;
• personalize your experience (e.g., your holdings and watchlists);
• communicate with you about your account, security, and service updates;
• monitor, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information.

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal information on the following legal bases:

• Contract: to provide the Service and process subscriptions you request;
• Legitimate interests: to secure, analyze, and improve the Service, balanced against your rights. This covers preventing abuse of the Service, including reading your IP address to apply rate limits and acting on browser security reports;
• Legal obligation: to comply with applicable laws.

We and our providers use cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in and to secure your session), and we may use a limited set of browser storage to remember preferences such as your theme, dashboard layout, dismissed welcome message, and recent card-picker searches on that device. You can control cookies and local storage through your browser settings; disabling essential cookies may prevent parts of the Service from functioning.

We do not use analytics or advertising cookies. Cookieless aggregate measurement (Vercel Analytics and Speed Insights) runs on every visit and sets no cookie. For a full list of the cookies and local storage we use, see our Cookie Policy.

Some browsers offer a “Do Not Track” signal. There is not currently a uniform industry standard for responding to these signals, so the Service does not respond to them in a separate or automated way. Because we do not sell personal data or use it for targeted advertising, there is no sale or targeted-advertising processing to opt out of through a universal signal. You can still control cookies and browser storage through your browser settings; deleting functional local storage resets the corresponding device preferences and recent-search list.

We do not sell your personal information. We share it only with service providers that help us operate the Service, and only as needed for them to perform their functions:

• Clerk: authentication and account management;
• Stripe: payment processing and subscription billing;
• Neon: managed database hosting for your application data;
• Vercel: application hosting, content delivery, and cookieless traffic and performance analytics;
• GitHub: hosting our source code and running the scheduled jobs that refresh market data, which access the production database;
• Cloudflare: bot and abuse protection on our sign-in and sign-up pages, used by Clerk as part of authentication.

We aggregate card catalog and market data from third-party data providers (TCGdex and ScryDex) into the Service; we do not send your personal information to them.

We may also disclose information (a) to comply with law, legal process, or lawful requests; (b) to protect the rights, property, or safety of Rip & Hold, our users, or others; or (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy.

We retain personal information for as long as your account is active and, after your account is closed, for up to 30 days or as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it. Some records held by our providers (for example, billing records at Stripe) are retained on their own schedules to meet financial and legal requirements.

You can delete many individual items, including holdings, watchlist entries, and never-published private theses, through the controls provided by the Service. Published calls cannot be deleted; making one private closes its public tracked leg, while retiring it permanently freezes and preserves the record. These product-level restrictions do not prevent you from requesting deletion of your account and personal information. To close your account, use the request button on your account page, which opens an email to us; see “Your privacy rights” below.

Cancel any active subscription first. Account deletion is deliberately blocked while a subscription can still renew, so that closing an account never leaves a charge behind. Cancel through the billing portal, then send the deletion request.

When your account is deleted, an automated process erases your personal data from our database. That goes further than deleting content item by item: it also removes the derived copies that would otherwise remain, such as your entries in leaderboard history and the revision history of content you created. A small number of shared records are kept with your identifier removed (for example the edit history of shared content, which would otherwise become unreadable for them) and internal logs that never contained a user identifier in the first place are unaffected.

Deletion applies to our own database. Copies held by our providers follow their own schedules: Stripe retains billing records as the financial system of record for as long as tax and accounting law requires, and records at Clerk are removed according to that service’s retention settings rather than immediately. If you need data removed from a specific provider, contact us and we will action it.

We use reasonable technical and organizational measures designed to protect personal information, and we rely on providers (Clerk, Stripe, Neon, Vercel) that maintain their own security programs. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach happens. If we determine that a security incident has compromised your personal information, we will notify you and any regulator we are required to inform without undue delay once we have established what happened and who is affected. Because we hold no email address of our own, that notice will reach you through your sign-in provider’s address of record and through a prominent notice in the Service. We will tell you what we know, what we are doing about it, and what you can do.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@ripandhold.com. We will respond consistent with applicable law and may need to verify your identity first. Exercising these rights is free, and you never need a paid plan to do it.

For the collection data you enter yourself, you do not have to wait for us. PRO accounts can download their own holdings, watchlist, and calls as CSV files at any time from the account page. The calls file includes your private calls as well as your public ones. That download is a convenience feature rather than the mechanism for the rights above: whatever your plan, you can always email us for a copy of the personal information we hold about you.

If you are in the EEA or the UK, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority. To exercise data portability, contact us as described in Section 10, which also covers the self-serve CSV download. Where we transfer data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

Depending on your state of residence, including California, Colorado, Connecticut, Minnesota, Virginia, Utah, and other states with consumer privacy laws, you may have the right to confirm whether we process your information; know or access categories or copies of it; request correction or deletion; obtain a portable copy; obtain information about certain third-party disclosures; appeal a denied request; opt out of sale, targeted advertising, or certain profiling; and be free from discrimination for exercising your rights. These rights and our response time depend on the law that applies to you. See Section 10 for how to make a request and for the self-serve CSV download.

We do not sell your personal information, we do not share it for cross-context behavioral advertising as that term is defined under California law, and we do not use personal data for targeted advertising or for profiling that produces legal or similarly significant effects. We do not knowingly collect, sell, or share the personal information of consumers under 16.

To exercise your rights, contact us at contact@ripandhold.com. We may need to verify your identity and may ask for information reasonably necessary to process the request. You may use an authorized agent to submit a request on your behalf where applicable law allows.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or provide any information about yourself. If you believe a child under 13 has provided us with personal information, contact us at contact@ripandhold.com and we will take steps to delete it. Users between 13 and the age of majority should use the Service only with the involvement of a parent or guardian, and may not purchase a subscription.

We are based in the United States, and our providers may process and store information in the United States and other countries. By using the Service, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those of your country. Where required, we use appropriate safeguards for such transfers.

The Service may reference or link to third-party websites and services (such as marketplaces, grading companies, or data providers). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

Account and transactional messages (such as sign-in security, billing receipts, and important service notices) are necessary to operate the Service and cannot be turned off while your account is active.

We no longer send product or activity email. That category was removed in August 2026 together with the features behind it, so there is nothing to switch off. The account, security, and billing messages sent by our authentication and payment providers remain, because they are necessary to operate the Service. See Section 2. We do not sell or rent your email address, and we do not send marketing or newsletter email.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at contact@ripandhold.com.

Rip & Hold LLC · ripandhold.com