Privacy Policy

This Privacy Policy explains how RIPSY handles information when you use our website, mobile apps, multiplayer game servers, and related support services (together, the “Service”).

RIPSY is designed to work without a named account. We process only the information needed to operate and protect the game:

• Player and session data: an anonymous player identifier, session credential, and credential expiration time.
• Gameplay data: room membership, lineups, moves, battle choices, results, and game timing.
• Device and notification data: a Firebase installation identifier and push registration token when you enable notifications.
• Optional figure shop data: if you use the shop, your public Solana wallet address, purchase and mint transaction records, and an email address when you choose to sign in with email. RIPSY does not receive your wallet private key.
• Technical data: limited connection, request, protocol, and error diagnostics, plus network metadata routinely processed by our infrastructure providers.

We do not ask for your name, email address, wallet, payment details, contacts, precise location, or advertising identifier to play RIPSY. Email and wallet data are needed only if you voluntarily use the optional figure shop and its embedded-wallet sign-in.

We use information to authenticate game actions, synchronize multiplayer sessions, restore games after a reconnect, send opted-in game notifications, create and reconcile optional figure-shop purchases and mints, prevent abuse, maintain security, and troubleshoot reliability issues.

We do not use your information for targeted advertising, sell it, or use it to track you across apps or websites.

We disclose information only to service providers that help us host, store, secure, and deliver the Service, including Firebase for optional push notifications and our email sign-in provider for optional embedded-wallet authentication and signing. Public wallet addresses and transaction data submitted to Solana are publicly visible by design. Providers may process information only to provide their services to us.

We may also disclose information when required by law, to protect the rights and safety of users or the Service, or as part of a business transfer. We do not share information with advertising networks or data brokers.

Online game records expire from our active backend storage after seven days by default. Push registrations and figure-shop order recovery records expire after 90 days by default. Session credentials are valid for 30 days by default and may remain in your browser storage or device Keychain or Keystore until they expire or you remove the app data. Our email sign-in provider may retain the optional embedded-wallet account and email according to its service terms; confirmed Solana transactions remain on the public blockchain.

These periods may be shortened or extended when reasonably necessary for security, legal compliance, backups, or resolving a support request.

You can decline notifications or disable them at any time in your device settings. You can disconnect an optional wallet in RIPSY and clear locally stored identifiers by clearing site data or removing the app. Disconnecting does not erase public blockchain transactions or assets already minted to an address.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your information. Because RIPSY does not require a named account, we may need information such as your anonymous player identifier to locate a record, and in some cases we may not be able to link a record back to you.

RIPSY is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the Service, please contact us so we can review and delete it where appropriate.

We use reasonable technical and organizational safeguards designed to protect information. No online service can guarantee absolute security. Our providers may process information in countries other than your own, subject to the protections required by applicable law.

We may update this policy as the Service changes. We will post the revised policy here and change the effective date above. Material changes will receive additional notice when required by law.

For a privacy question or request, contact us through the RIPSY support tracker. Please do not include a session credential or other secret in a public issue.