Privacy policy

We don’t sell your personal information, we don’t share it for advertising, and we never see your card number. You can browse this entire site without telling us anything about yourself.

• When you buy something: your name, email, shipping address and what you ordered. Payment happens on Stripe’s own checkout — your card number goes to Stripe, never to us. We see the last four digits and whether it worked.
• When you write to us: the name, email, order number and message you put in the contact form, so we can answer you.
• Automatically: ordinary server logs — IP address, browser, the page requested, the time. Our host keeps these to run and secure the site. We also hold an IP address in memory briefly to rate-limit the contact form against spam; it isn’t written to disk and it isn’t linked to your order.

There are no accounts on this site, so there is no password to lose and no profile to build. Browsing the card database, the set pages and the shop collects nothing beyond those server logs.

• Taking, packing, shipping and refunding your order.
• Answering the question you asked us.
• Keeping the records tax and accounting law requires us to keep.
• Spotting fraud and stopping bulk-buying that breaks our order limits.

That’s the whole list. We don’t build advertising profiles, we don’t run retargeting pixels, and we don’t add you to a mailing list because you bought a hoodie. If we ever start a newsletter it will be one you deliberately sign up for.

Only the services that make the store work, and only with what they need to do their job:

• Stripe — payments, checkout and refunds. They take the card details directly and are the reason we never hold them.
• SendGrid — delivers contact-form messages and order email to us.
• Our hosting provider — serves the site and keeps the server logs described above.
• Shipping carriers — get your name and address, because a parcel needs somewhere to go.

We don’t sell or rent personal information to anybody, and we don’t share it with advertisers. We’ll hand over data if the law genuinely requires it, and we’ll tell you unless we’re forbidden to.

The site itself sets no advertising or analytics cookies. Stripe sets its own cookies on its checkout pages for fraud prevention, which is a condition of processing card payments safely.

Card prices shown across the site come from a public card-data API. Those requests are made by our server, not by your browser, so browsing prices doesn’t expose you to a third party.

• Order records: as long as tax and accounting rules require — generally seven years.
• Contact-form messages: as long as it takes to resolve the thing, plus a reasonable window in case you write back.
• Server logs: a short rolling window set by our host.

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to fix it, or ask us to delete it. Email support@ripemall.com and we’ll deal with it inside 30 days.

Deletion has one limit: we can’t erase an order record we’re legally required to keep. Everything outside that, we can.

California residents: we do not sell or share personal information as those terms are used in the CCPA, and we will never charge you differently for exercising a privacy right.

This is a Pokémon card store, so let’s be clear about it. The site isn’t directed at children under 13 and we don’t knowingly collect their personal information. Buying requires being 18 or older, or having a parent or guardian place the order for you.

If you’re a parent and you think your child sent us information, write to us and we’ll delete it.

The site is served over HTTPS, payment details never reach our servers, and access to order data is limited to the people who pack and support orders. No system is perfect; if something ever goes wrong, we’ll tell you promptly and plainly rather than bury it.

When this policy changes we update the date at the top. Material changes — new categories of data, a new processor, anything that would surprise you — get called out on the site rather than slipped in.

Questions about any of this go to support@ripemall.com.