Privacy Policy
This policy explains what Rip Packs City collects, why, where it's stored, and what choices you have. Plain English. If anything here is unclear, email rippackscity@gmail.com or reach out at @RipPacksCity on X.
What we collect
If you sign in, we receive your email address from Supabase's magic-link authentication so we can identify your saved profile across devices. If you add a wallet address or a marketplace username to your profile, we store that public identifier and read publicly available on-chain and marketplace data about it. Rip Packs City is read-only: there is no wallet connection anywhere on the site, and RPC never moves, sells or spends anything on your behalf. If you use the AI concierge, your messages and our responses are processed by Anthropic's Claude API to generate replies, and we store the conversation (your messages, our replies, the page you were on, and your account email if you were signed in) for 90 days so we can debug the assistant and act on feedback; feedback you explicitly submit through it is kept until it has been addressed. Our team reads those transcripts. You can delete your own chat history from the chat menu at any time. If you save wallets, pin trophy moments, or fill out your bio, that information is stored against your user account. If you redeem a physical reward, we collect the shipping address you give us for that delivery only. Page views, clicks on marketplace links, and browser error reports (the error message, a stack trace, the page path, and a truncated browser type) are recorded with your browser's user agent and the referring page, and are used only to debug errors and understand which features are used. Where we rate-limit anonymous requests we keep a one-way hash of the IP address, never the address itself.
What we do not collect
We do not collect payment information. Rip Packs City does not process purchases at all — there is no cart, no checkout and no in-app buying. Listing links take you out to the collection's own marketplace, where any transaction happens entirely on their infrastructure; your card or crypto details never touch our servers. We do not collect, sell, or rent your personal data to advertisers. We do not run third-party advertising trackers. We do not collect data on minors and the platform is not directed at users under 18.
Where it's stored
User accounts and saved data live in Supabase (a managed Postgres database hosted in US-East). The platform is served by Vercel, whose Analytics and Speed Insights measure page performance without cookies or cross-site identifiers. Error telemetry is first-party: browser errors are posted to our own endpoint and stored in Supabase with the rest of your data, and no third-party error collector runs. AI concierge messages route through Anthropic. Email (sign-in links, verification, alerts and digests you opt into) is sent through Resend, which receives your address and the message. Alerts you choose to receive on Telegram are delivered by Telegram. Cloudflare Workers proxy a small number of public marketplace API calls. None of these vendors receive more than the data necessary to perform their function, and none sells it. Retention: feature-usage events 31 days; concierge transcripts 90 days; anonymous page-view telemetry 180 days; daily holdings snapshots 90 days; events and records tied to your account for as long as the account exists.
How we use it
Your email is used to log you in and, if you opt in, to send occasional product updates. Your saved wallets are used to render your private dashboard and your public profile (if you choose to make one public). Your AI concierge inputs are used in real time to generate responses; we don't train any model on your messages. Aggregate, anonymized usage data is used to improve the platform.
Your choices
You can remove your saved wallets, your bio, your pinned trophies and your concierge chat history yourself at any time, from the Profile page and the chat menu. You can also delete your account and everything stored against it from the Profile page (Edit profile → Delete account); it takes effect immediately. If you would rather we do it, email rippackscity@gmail.com, message us at @RipPacksCity on X, or ask the concierge to pass the request to the team; we complete those within 30 days and confirm when done. Aggregate counts that no longer identify you may persist. You can opt out of product emails at any time via the unsubscribe link in any email we send. We honor Global Privacy Control and Do Not Track signals (see Cookies below). We do not sell or share personal information for advertising, and we have no financial incentive tied to your data.
Cookies and storage
We use a Supabase auth cookie to keep you signed in, and a short-lived (60-second) cookie that caches the result of your sign-in check so we don't re-run it on every request; it holds your email address and an expiry and nothing else. We use localStorage on your device to remember UI preferences (like dismissing the welcome modal) — those never leave your browser. To understand how the site is used, we also keep two random, first-party identifiers that are sent with our own page-view and usage events: a per-visit id (cleared when you close the tab) and a visitor id in localStorage that lets us count a returning browser as one visitor. Neither is derived from your device, shared with anyone, or used for advertising. If your browser sends Global Privacy Control or Do Not Track, we don't create or send the visitor id; clearing your site data removes both. We do not use third-party tracking cookies.
Children
Rip Packs City is intended for users 18 and older. We do not knowingly collect data from children under 13.
Changes
We'll update this policy as the platform evolves. Material changes will be flagged on the home page or via email if we have one for you.
Contact
Questions, access or deletion requests: email rippackscity@gmail.com or reach out at @RipPacksCity on X. The platform is operated by Rip Packs City LLC, an Oregon limited liability company.
Last updated: October 2026.