Privacy Policy

Version 2026-08-01

What we collect

Your email address, and a shipping address if you ask us to send you a card. If you sign in with Google or Apple we receive an identifier from them and, where you allow it, your email — we never receive your password. We also keep a record of your play: packs opened, cards held, credit movements, and the seeds that make each outcome verifiable.

What we never see

Your card number.Payments run through Stripe’s own checkout; the card details are entered on Stripe’s systems and never touch ours. We receive only a payment confirmation and the last four digits Stripe chooses to show us.

Why we keep it

To run your account, send you cards you have asked for, keep the books, meet tax and anti-fraud obligations, and enforce the limits and self-exclusions you set. We do not sell your data, and we do not share it for advertising.

Cookies

One session cookie, which holds a random token — not your identity, and not anything readable. It is what keeps you signed in. There are no advertising or tracking cookies.

How long

Account and transaction records are kept for as long as your account is open and then for the period tax and anti-money-laundering rules require, typically seven years. Records of self-exclusion are kept indefinitely, because their whole purpose is to survive an account being deleted and remade.

Your rights

Ask us for a copy of your data or for your account to be deleted, at support@ripsmith.com. We will respond within 30 days. Deletion removes your personal details; anonymised transaction records are retained where the law requires us to keep them.

Contact

Ripsmith, Inc. — support@ripsmith.com