Legal
Privacy
RipRef collects as little as it can. Here is what we keep, why, where it lives, and how to get rid of it.
Last updated
The short version
- We ask for an email address and a username. Nothing else about you.
- No passwords, no tracking cookies, no ads, and we never sell your personal data.
- Your data is stored in the EU.
- Deleting your account deletes everything – your ratings, reviews and video links included.
Who is responsible
RipRef is run by Mattias Hedström in Sweden, who is the controller of your personal data. Contact: theripref@gmail.com.
What we collect and why
| What | Why | Who can see it |
|---|---|---|
| Your email address | To send you sign-in links and codes, and to tell you about important changes to the Terms or this policy. No newsletters or marketing unless you ask for them. | Only you |
| Your username | So other collectors can see who rated what. | Everyone |
| Your ratings, review text and YouTube links | This is what RipRef is: the community's ratings. | Everyone, on the box and on your profile |
| Your "Want to open" list | So you can keep track of boxes you're interested in. | Only you |
| The date you joined, and your rank and badges | Worked out from your ratings and shown on your profile. | Everyone |
We use this data because you asked for an account (to provide the service you signed up for), and to keep RipRef secure and working.
Statistics without tracking
- Searches: we save what is searched for, the filters, how many results came back and when – never who searched. We use it to find boxes missing from the catalog. Search records are deleted after 12 months.
- Visits: we count page visits with Umami, a privacy-friendly analytics tool that stores its data in the EU and sets no cookies. It sees which pages are visited, which site you came from, your browser and device type, and your rough location (country and city) – worked out from your IP address, which is not stored. It knows whether a visitor is signed in, never who they are.
Cookies
RipRef only uses cookies that are needed for the site to work:
- Sign-in cookies keep you signed in. They are removed when you sign out.
- A sign-in step cookie remembers the email address between "Send code" and "Sign in". It lasts at most 15 minutes and is deleted when you're signed in.
No advertising, tracking or analytics cookies – so there's no cookie banner to click away.
YouTube videos
A YouTube video on RipRef doesn't load until you press play. It then loads from youtube-nocookie.com, and from that moment YouTube (Google) handles the data under its own privacy policy.
Where your data lives
| Service | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in | EU (Ireland) |
| Vercel | Runs the website | EU (Dublin) |
| Resend | Delivers sign-in emails | EU (Ireland) |
| Umami | Visit statistics without personal data | EU |
We never sell your personal data, and we only share it with the services above, to run RipRef.
We may share statistics that can't identify anyone – for example which boxes are searched for or rated most – with others, such as card manufacturers or stores. They never include email addresses, usernames linked to activity, or anything else that points to a person.
How long we keep it
- Your account and everything in it: until you delete your account. Deletion is immediate and removes your email, username, ratings, reviews, video links and lists. Calls your ratings helped make are recalculated.
- Backups kept by our database provider are overwritten within a short period after deletion.
- Search records: 12 months.
Your rights
You can at any time:
- See your data – most of it is on your profile and account page. For a full copy, write to us.
- Correct it – your username is permanent, but write to us if something is wrong.
- Delete it – on your account page, under Delete account.
- Object or complain – write to us first. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Age
RipRef is for people 18 and older.
Changes
If we change how we handle your data, we update this page and the date at the top. For important changes we email you at least 30 days before they take effect, so you can delete your account first if you don't agree.
If RipRef changes hands
If RipRef is ever sold or handed over to someone else, your data can only move with it under this policy. We'll email you before that happens, so you can delete your account first.