Privacy Policy

This Privacy Policy describes how Rip & Hold LLC (“Rip & Hold,” “we,” “us,” or “our”) handles personal information in connection with the Rip & Hold website at ripandhold.com, the Rip & Hold application at app.ripandhold.com, and related services (the “Service”). It applies to information we collect through the Service and does not apply to third-party websites or services that we do not control.

By using the Service, you agree to this Privacy Policy and our Terms & Conditions.

Account information

When you create an account, our authentication provider, Clerk, collects and processes information such as your name, email address, and login credentials (or the identifiers from any single sign-on provider you choose). We receive a limited account profile from Clerk to identify you within the Service.

Billing information

When you purchase a subscription, payments are processed by Stripe. Stripe collects your payment card and billing details directly. We do not receive or store your full payment card number; we receive limited information such as subscription status, plan, and partial card metadata needed to manage your subscription.

Checkout also collects your billing address, which Stripe stores against your customer record. It is used to determine the sales tax or VAT applicable to your purchase and to keep that calculation correct on renewals.

Sensitive information

We do not intentionally collect sensitive personal information such as Social Security numbers, government identification numbers, health information, precise geolocation, biometric information, or payment card numbers. Please do not submit sensitive personal information through the Service.

Usage and content data

We collect information about how you use the Service, such as your card holdings, watchlists, calls, dated call updates, likes, comments, preferences, and the cards and sets you view or interact with. A call includes the exact card printing and grade, Buy/Hold/Sell stance, your note, ownership disclosure, visibility choice, performance-tracking choice, timestamps, and the available market estimates used to open or close tracked performance.

Some content you create has a visibility setting. Content you mark public (for example, a public call) is shown with your account identity on relevant card, profile, or discovery surfaces; content marked private is visible only to you. Visibility and deletion controls depend on the content type. In particular, a call created as private cannot later become public; a published call can be made private but its substantive content remains locked; a published call cannot be deleted; and retiring a call preserves a permanent frozen record. Never-published private calls may be edited or deleted. Your profile is always public, including your username and any bio you write. There is no private-profile setting. Your followers and the people you follow are public too. You can follow or unfollow other users and choose whether to show your public calls across card pages, your profile, Community, and other collectors’ call-history views.

Public profiles and follower/following lists are accessible without signing in. Public calls may appear as limited previews on card and profile pages. Full eligible call reasoning, dated updates, Community feeds, and discussions require sign-in and are available on both Free and Pro. Calls appear to other collectors only while the call is public, you choose to show your calls, and its card is shown in the product. Retired public calls can remain visible. Community pages are excluded from search indexing. Public profile pages may be indexed and generate a preview image when shared. Your holdings, ownership disclosure, and private-from-creation calls are not included in public payloads.

Public calls link to your public profile. Your display name and avatar appear publicly after you save your profile settings; until then, your profile uses your username and an initials avatar. Individual call visibility, retirement, and deletion controls remain subject to the locked record rules described above.

Likes and comments connect your account to a call. Visible comments show your public account identity, text, posting date, and any edit date to signed-in readers of that discussion. You may remove your own like or delete your own comment even after the call becomes hidden. Comment deletion clears its text and retains a minimal request record to prevent a retried save from restoring it. Hiding a call or turning off Show your calls restricts access; it does not erase the stored interactions.

Report call and Report comment open an email draft containing the relevant identifiers and discussion link. You must send that draft to submit a report. Information you include in a report is used to review the reported content.

Community leaderboards and performance history require sign-in on Free and Pro. We store daily derived call metrics, counts, calculation dates, pricing-date coverage, and a calculation version with your account identifier. Snapshots do not copy call text, names, avatars, or email addresses. Eligible frozen results of previously public calls, including losses, remain in aggregate performance after hiding or retirement, without exposing the hidden call or its card. Calls created private never enter that record. Same-day hides are not counted; a priced same-day retirement can count.

Turning off Show your calls hides your entire Community leaderboard row and performance history, including from your own Community view, without erasing stored results. Turning it back on restores your retained record. You keep access to your own dashboard calls. History begins with actual daily calculations; missing days are not invented, and delayed results keep their real dates. Account deletion erases your performance snapshots.

Product analytics

We use aggregate traffic and performance measurement (Vercel Analytics and Speed Insights), which is cookieless. We also count milestones after a recognized search-engine visit: viewing signup, completing signup, and the first successful watch or call save after signup. These events include only the search-engine category, landing page category and save type. They do not include account identifiers, card identifiers, search terms, call text, or the current page URL beyond our site origin.

A tab-scoped record keeps the milestone counts from repeating for up to 30 minutes; it contains no unique visitor identifier. We inspect the account creation date locally to distinguish signup from an existing account signing in, but do not store that date in the visit record or send it to analytics. We do not connect these milestones across devices or later visits. There is no session recording, automatic capture of clicked text, on-site survey, or heatmap collection. The contents of your calls and collections remain in our own database and are not sent to analytics.

Communications

Rip & Hold does not send you email. We removed product and activity email in August 2026, along with the features it described. The only messages you receive are the account, security, and sign-in email sent by our authentication provider and the billing and receipt email sent by our payment provider, both of which are necessary to operate the Service. We do not send marketing or newsletter email, and we do not sell or rent your email address.

Device and log data

Like most online services, our infrastructure providers automatically collect technical information such as your IP address, browser type, device information, pages viewed, referring pages, and timestamps, for security, diagnostics, and analytics. Separately, our own application code reads your IP address to apply rate limits. This protects the Service against automated abuse and excessive load. We use it for that check and do not build a profile from it.

Errors and security reports are handled as follows:

• Errors on our servers are recorded in our hosting provider’s server logs (Vercel, described below) and are not sent to a separate error-tracking service. Log entries may include limited technical request context.
• Errors in your browser are not collected: we receive no browser error reports or session data.
• Content-security reports: your browser reports it to us whenever something on a page tries to load from a source our security policy does not allow, and we record that report in our server logs. This happens on any visit and is not governed by the analytics choice, because it is a security control rather than analytics. We deliberately keep the record minimal: which rule was triggered, and the origin (the site name, never the full address) that was blocked. Your browser also offers a snippet of the affected code and the file it came from; because those are the fields most likely to contain page content, we discard them on receipt and never store or forward them.

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and manage your account and authenticate you;
• process subscriptions, payments, and renewals;
• personalize your experience (e.g., your holdings and watchlists);
• communicate with you about your account, security, and service updates;
• monitor, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information.

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal information on the following legal bases:

• Contract: to provide the Service and process subscriptions you request;
• Legitimate interests: to secure, analyze, and improve the Service, balanced against your rights. This covers preventing abuse of the Service, including reading your IP address to apply rate limits and acting on browser security reports;
• Legal obligation: to comply with applicable laws.

We and our providers use cookies and similar technologies that are necessary to operate the Service (for example, to keep you signed in and to secure your session), and we may use a limited set of browser storage to remember preferences such as your theme, dashboard layout, and recent card-picker searches on that device. You can control cookies and local storage through your browser settings; disabling essential cookies may prevent parts of the Service from functioning.

We do not use analytics or advertising cookies. Cookieless aggregate measurement (Vercel Analytics and Speed Insights) runs on every visit and sets no cookie. For a full list of the cookies and local storage we use, see our Cookie Policy.

Some browsers offer a “Do Not Track” signal. There is not currently a uniform industry standard for responding to these signals. Our additional search-to-signup and first-save milestones are disabled when your browser sends Do Not Track; aggregate page and performance measurement remains enabled. Because we do not sell personal data or use it for targeted advertising, there is no sale or targeted-advertising processing to opt out of through a universal signal. You can still control cookies and browser storage through your browser settings; deleting functional local storage resets the corresponding device preferences and recent-search list.

We do not sell your personal information. We share it only with service providers that help us operate the Service, and only as needed for them to perform their functions:

• Clerk: authentication and account management;
• Stripe: payment processing and subscription billing;
• Neon: managed database hosting for your application data;
• Vercel: application hosting, content delivery, and cookieless traffic and performance analytics;
• GitHub: hosting our source code and running the scheduled jobs that refresh market data, which access the production database;
• Cloudflare: bot and abuse protection on our sign-in and sign-up pages, used by Clerk as part of authentication.

We aggregate card catalog and market data from third-party data providers (TCGdex and ScryDex) into the Service; we do not send your personal information to them.

We may also disclose information (a) to comply with law, legal process, or lawful requests; (b) to protect the rights, property, or safety of Rip & Hold, our users, or others; or (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy.

We retain personal information for as long as your account is active and, after your account is closed, for up to 30 days or as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it. Some records held by our providers (for example, billing records at Stripe) are retained on their own schedules to meet financial and legal requirements.

You can delete many individual items, including holdings, watchlist entries, and never-published private calls, through the controls provided by the Service. Published calls cannot be deleted; making one private closes its public tracked leg, while retiring it permanently freezes and preserves the record. These product-level restrictions do not prevent you from requesting deletion of your account and personal information. To close your account, use the request button on your account page, which opens an email to us; see “Your privacy rights” below.

Deleting your account cancels any active subscription. The cancellation takes effect immediately, so that closing an account never leaves a charge behind, and the remaining time in the current billing period is not refunded. The data described below is then erased.

When your account is deleted, an automated process erases your personal data from our database. That goes further than deleting content item by item: it also removes the derived copies that would otherwise remain, such as the publication history and dated updates of calls you created, your likes and comments on other people’s calls, comment request records, and your daily Community performance snapshots. Interactions attached to your own erased calls are also removed. A small number of shared records are kept with your identifier removed (for example the edit history of shared content, which would otherwise become unreadable for them) and internal logs that never contained a user identifier in the first place are unaffected.

Deletion applies to our own database. Copies held by our providers follow their own schedules: Stripe retains billing records as the financial system of record for as long as tax and accounting law requires, and records at Clerk are removed according to that service’s retention settings rather than immediately. If you need data removed from a specific provider, contact us and we will action it.

We use reasonable technical and organizational measures designed to protect personal information, and we rely on providers (Clerk, Stripe, Neon, Vercel) that maintain their own security programs. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach happens. If we determine that a security incident has compromised your personal information, we will notify you and any regulator we are required to inform without undue delay once we have established what happened and who is affected. Because we hold no email address of our own, that notice will reach you through your sign-in provider’s address of record and through a prominent notice in the Service. We will tell you what we know, what we are doing about it, and what you can do.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@ripandhold.com. We will respond consistent with applicable law and may need to verify your identity first. Exercising these rights is free, and you never need a paid plan to do it.

If you are in the EEA or the UK, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority. To exercise data portability, contact us as described in Section 10. Where we transfer data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

Depending on your state of residence, including California, Colorado, Connecticut, Minnesota, Virginia, Utah, and other states with consumer privacy laws, you may have the right to confirm whether we process your information; know or access categories or copies of it; request correction or deletion; obtain a portable copy; obtain information about certain third-party disclosures; appeal a denied request; opt out of sale, targeted advertising, or certain profiling; and be free from discrimination for exercising your rights. These rights and our response time depend on the law that applies to you. See Section 10 for how to make a request.

We do not sell your personal information, we do not share it for cross-context behavioral advertising as that term is defined under California law, and we do not use personal data for targeted advertising or for profiling that produces legal or similarly significant effects. We do not knowingly collect, sell, or share the personal information of consumers under 16.

To exercise your rights, contact us at contact@ripandhold.com. We may need to verify your identity and may ask for information reasonably necessary to process the request. You may use an authorized agent to submit a request on your behalf where applicable law allows.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or provide any information about yourself. If you believe a child under 13 has provided us with personal information, contact us at contact@ripandhold.com and we will take steps to delete it. Users between 13 and the age of majority should use the Service only with the involvement of a parent or guardian, and may not purchase a subscription.

We are based in the United States, and our providers may process and store information in the United States and other countries. By using the Service, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those of your country. Where required, we use appropriate safeguards for such transfers.

The Service may reference or link to third-party websites and services (such as marketplaces, grading companies, or data providers). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

Account and transactional messages (such as sign-in security, billing receipts, and important service notices) are necessary to operate the Service and cannot be turned off while your account is active.

We no longer send product or activity email. That category was removed in August 2026 together with the features behind it, so there is nothing to switch off. The account, security, and billing messages sent by our authentication and payment providers remain, because they are necessary to operate the Service. See Section 2. We do not sell or rent your email address, and we do not send marketing or newsletter email.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at contact@ripandhold.com.

Rip & Hold LLC · ripandhold.com