Privacy Policy
[ENTITY NAME — set before launch] operates ripper.fun. This policy explains what we collect, what we deliberately do not, and who else processes it.
The short version
ripper.fun is a non-custodial trading terminal and token launchpad. We never hold your funds and we never take custody of your private keys. We do not ask for your name, your address, or your phone number, and our database has no column for any of them.
1. What we collect
Wallet address
When you sign in, we record your public wallet address. On a public blockchain this address is already public, and it is our only account identifier: there is no password and no email attached to it, so there is no account to steal. You may optionally set a display name, which is cosmetic and never used to identify you.
An anonymous site identifier
We set one cookie, rip_aid, containing a random value with no link to your identity. It exists so that a visitor sees a consistent version of the site while we test design changes, and so those tests count people rather than page views. It is HttpOnly, so scripts on the page cannot read it, and it expires after one year.
Sign-in identity, if you use a social login
If you sign in with Google, Apple, GitHub, or email, that identity is handled by our authentication provider (see section 3). They create a self-custodial wallet for you and tell us its address. We receive the wallet address, not your email address or social profile.
Ordinary technical data
Like any website we process IP addresses and request metadata to serve traffic, apply rate limits, and detect abuse. We use your IP for those purposes and to protect the service; we do not build advertising profiles from it.
2. What we deliberately do not collect
- No passwords. Authentication is a cryptographic signature.
- No email address in our database.
- No legal name, postal address, or phone number.
- No third-party advertising or analytics scripts. We run no external trackers, and our experiment measurement is self-hosted in our own database. This is a security decision as much as a privacy one: a third-party script would have full access to pages where you sign transactions.
3. Who else processes your data
We use a small number of providers to run the service. Each receives only what its job requires.
| Provider | Purpose | What it receives |
|---|---|---|
| Privy | Sign-in and embedded wallets | Your social or email identity, held by them |
| Supabase | Our database | Wallet address, display name, watchlists |
| Fly.io | Hosting | Request data, IP address |
| Cloudflare | CDN, DDoS and abuse protection | Request data, IP address |
| Market data providers | Prices, charts, routing | Token addresses you view. Not your identity |
| Blockchain RPC providers | Reading chain state, sending signed transactions | Wallet address, transaction data |
| Pinata / IPFS | Token images and metadata you upload | The files you choose to upload |
| Resend | Operational alerts to our own team | Nothing about you |
4. Two things that are permanent, and you should know before acting
Blockchain transactions are public and irreversible. Every trade and every token launch is written to a public ledger by the network, not by us. Anyone can read it, it is permanent, and neither we nor you can delete it. This is how public blockchains work and it is outside our control.
Files uploaded to IPFS cannot be unpublished. When you launch a token, its image and metadata are pinned to IPFS and the address of that content is written into the token itself, permanently. Do not upload anything you would ever need removed.
5. Keeping data
We keep account records while your wallet is in use and for a reasonable period afterwards. Market and chart data is kept as long as it is useful to the product. Onchain data is not ours to keep or delete, as above.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold, and to object to certain processing. Write to legal@ripper.fun and we will respond within the period the law requires.
One honest limit: we can delete what is in our database, and we can stop processing. We cannot delete anything from a public blockchain or from IPFS, because we do not control either.
7. Children
The service is not for anyone under 18. We do not knowingly collect data from children, and we will delete any we discover.
8. Changes
If this policy changes materially we will update the date below and, for significant changes, say so in the product.
9. Contact
[ENTITY NAME — set before launch]
[REGISTERED ADDRESS — set before launch]
legal@ripper.fun