Privacy Policy

Last updated 17 October 2026

This Privacy Policy explains what personal information ripz.one collects, why, what we do with it, and the choices you have. If anything is unclear, email privacy@ripz.one and we'll explain.

Who we are

ripz.one is operated by VRFID Pty Ltd (ABN 85 678 882 758), based in New South Wales, Australia. We are responsible for your personal information (the "controller" under EU and UK law). Contact: privacy@ripz.one.

The short version

We build your portfolio views from public blockchain data, information that's already public on the Panini ledger.
We hold the account details needed to sign you in and keep your data yours.
Payments are handled by Link (Stripe). We never see your full card number.
We do not sell your data. We don't post, trade, or act on your behalf. We don't take custody of your cards or funds.
You can ask to see, correct, or delete your data, or close your account, at any time.

What we collect and why

Account details. Your username, and either a password (stored only in protected, non-readable form) or your Discord sign-in. We use these to give you secure access to your own views.

Discord. If you sign in with Discord or link it, Discord gives us your Discord user ID and username. With your permission on Discord's screen, Discord also lets us check whether you belong to particular Discord servers. We use this only to decide whether you can sign up while sign-ups are limited to invited communities. We use your Discord ID to sign you in, to give or remove your plan role (and a "Verified holder" role, if you verify) in the ripz.one Discord. Other members of the ripz.one Discord can see those roles. You can unlink Discord at any time.

Joining the ripz.one Discord. When you sign in with Discord or link it, Discord's screen also asks whether we may add you to servers. If you agree, we add you to the ripz.one Discord with your plan role, so you don't need a separate invite. We don't add you to any other server. You can leave the ripz.one Discord at any time.

Partner communities. Some Discord communities partner with ripz.one. If you join through a partner, we check that you're a member of its server, and we may check your public Panini holdings to see whether you qualify for a place the partner has paid for. Our bot in the partner's server can give you a role there that shows your ripz.one plan. That server's staff and members can see the role. We don't give partners your ripz.one account details, wallet or holdings. We may tell a partner how many of its places have been claimed.

Your Panini wallet. The Panini username or public wallet you give us. We use it to build your portfolio: holdings, costs, profit and market position. To verify that a wallet is yours, we look on the public blockchain for the activation card you transfer from that wallet to the ripz.one Panini account.

Activation cards. When you verify your account by transferring a card to us, that card becomes the property of VRFID Pty Ltd when it is transferred. We record the transfer from the public ledger and link it to your wallet to verify your account. We don't hold or manage any cards that stay in your own wallet.

Things you enter or upload. The costs, values and packs you enter yourself, and any Panini reports you upload (for example your pack purchase history). We use them to build your own views and, if a Spend Promo is running, to place you on it. Spend Promo leaderboards show other members your ripz.one name, your place and your estimated spend.

Payments. When you buy a paid plan, Link (a Stripe service, the merchant of record) collects your payment details, email address, billing address and location (for tax). Link handles these under its own privacy policy. Stripe tells us your plan, its status and renewal date, a customer reference, and payment events (paid, failed, refunded, disputed). We store those. If you ask Link to delete your data, Link cancels your subscription and your ripz.one account moves to Rookie. We may also use the email address Stripe holds for your subscription to send you notices about it, such as a price change. We don't copy it into our own systems.

Portfolio and usage data. The views, figures and history ripz.one produces for your account, plus basic technical logs needed to run, secure and improve the service, such as access times, error records, how often your account requests data, which kinds of links to Panini's marketplace are opened, with the sport and collection of the card (counted by page, never with your name), and the country and a scrambled code for the network you connect from (never your full internet address). We keep these usage records for 35 days.

Things you send us. Messages, feedback, suggested values and bug reports you share, for example by email or in our Discord.

Where your card data comes from

The values, holdings and history we show come from sales and transfers recorded on the Panini blockchain, a public ledger, together with corrections suggested by collectors that we have reviewed. We don't buy personal data, and we don't scrape private sources. ripz.one is not affiliated with Panini.

What we do NOT do

We do not sell, rent, or trade your personal information.
We do not use your data to post, buy, sell, or trade on your behalf.
We do not take custody or control of your cards, wallets, or funds.
We do not run advertising networks inside ripz.one or share your data with advertisers.

Who we share it with

Only what's needed to run ripz.one:

Service providers: Vercel (website hosting), Neon (database), DigitalOcean (servers), Stripe and Link (payments), Discord (sign-in and roles), ImprovMX (email forwarding) and Google (email inbox). They handle your information only to provide their service to us.
Community tools you choose to use: if you join our Discord, Discord handles your messages and profile under its own privacy policy.
Legal reasons: if the law requires it, or to protect the safety, rights or security of users and the service.

Where your data is stored

Our providers may store or process data outside Australia, mainly in the United States and Europe. We take reasonable steps to make sure your information is handled consistently with this policy and applicable privacy law.

Keeping your data secure

We take reasonable steps to protect your information from loss, misuse and unauthorised access. Your portfolio is served only to you through your signed-in account, and access to underlying data is restricted. No system is perfectly secure. If something goes wrong that affects you, we'll act promptly and tell you where we're required to.

How long we keep it

We keep your account and data while your account is open, including after you move to Rookie. When you ask us to close your account, we delete your data within a reasonable time, except records we must keep by law (for example, payment records for tax) or to resolve a dispute. Usage records are kept for 35 days.

Your choices and rights

You can ask us to see, correct, or delete the personal information we hold about you, close your account, or stop using your information for a particular purpose. Email privacy@ripz.one. We may need to confirm it's really you before acting.

If you're unhappy with how we've handled your data, please tell us first so we can fix it. You can also complain to the Office of the Australian Information Commissioner.

If you live in the EU or the UK

EU and UK data protection law (the GDPR and UK GDPR) gives you these rights too.

Why we use your information (legal bases): to provide the service you signed up for (your account, plan and portfolio); for our legitimate interests (keeping ripz.one secure, fair-use limits, and improving it); and to meet legal obligations (such as tax records).
Your rights: access, correction, deletion, restriction, data portability, and objecting to how we use your information. Where we rely on your consent, you can withdraw it at any time.
Transfers: your information is processed in Australia and by our providers, mainly in the United States, under safeguards such as standard contractual clauses.
Complaints: you can complain to your local data protection authority.

Children

ripz.one is for adult collectors and is not directed at children. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, email privacy@ripz.one and we'll delete it.

Changes to this policy

We'll update this policy as ripz.one changes. If we make a significant change, we'll tell you in ripz.one before it applies. The date at the top shows the current version.

Contact us

Privacy: privacy@ripz.one. Plans, payments and your account: support@ripz.one.