Policies

Privacy Policy

Effective date: 2026-10-08 · Last updated: 2026-10-08

1. Scope

This policy explains how Pixelrip ("Pixelrip") collects, uses and shares personal information when you use the Pixelrip app and website.

2. Adults only

Pixelrip is for adults 18 and over. We do not knowingly collect information from anyone under 18 and close any such account we find.

3. What we collect

Account: an account identifier created on your device, and an email address and password if you link one (the password is held by our login provider; we never see it).
Phone number: the U.S. mobile number you verify, which is how you get back into your account. We store it only as a keyed hash plus its last four digits, so our staff never see the full number. The text code itself is sent by our SMS provider.
Device: a hashed identifier of your phone (from our device-check provider, FingerprintJS, or a random ID stored on your phone), used to keep one account per person, to keep a self-exclusion or age block in place on a new account, and to protect accounts from takeover. We never show it and never use it for advertising. [COUNSEL REVIEW: device and biometric consent wording and retention, inside the one wording pass.]
Identity verification: your name, date of birth, address and Social Security number, government ID images, a live selfie and the result. These are collected and processed by our identity-verification provider; we receive only the result and a reference to your record with the provider. We use that reference to keep a self-exclusion in place and to hold for review an ID that is already verified on another account (that check keeps references only as hashes). We do not receive your ID images, selfie or raw biometric data.
Age confirmation: the date of birth you enter before your first purchase, deposit, cash-out or free-pack claim.
Location: your phone's GPS position before your first free pack and when you open packs, add funds, claim a free pack, cash out or ship, checked against the location of your IP address (from our IP-location provider). We keep the resulting state and a rough accuracy band, and our security log keeps your position rounded to about 1 km; we never keep your exact coordinates.
IP address: the internet address your phone connects from. We use it to check your location (above) and to limit abuse, and we store it with your date-of-birth confirmation. Our IP-location provider and our device-check provider see it when they check your connection or device.
Payment and payout details: handled by our payment and payout partners. We see only limited details: a card's last four digits and its first digits that identify the issuing bank (BIN), a token and a short label (such as "Bank •1234") for your payout account, and which card each deposit came from (to correct a billing error and to fight fraud).
Notifications: your phone's push token, your time zone (for quiet hours) and your notification settings; the in-app inbox of messages we have sent you; and the email address we send money, shipping and safety emails to.
Activity: packs bought, cards owned, sell-backs, shipments, cash-outs, limits you set and support messages.
Shipping: the name and U.S. address you ship cards to. We save the last address you entered so you do not have to retype it; you can change it each time you ship, and remove it by emailing us (see Your choices and rights) or by deleting your account.
Technical: app version, device type, and crash and error reports. Error reports come from our servers and from the app on your phone (a crash report from the app can carry a random identifier for that app install), and are scrubbed before they are sent: no names, emails, phone numbers, addresses, tokens or payment, ID or bank details.

4. How we use it

To provide the service: sell packs, hold and ship cards, process sell-backs and cash-outs, and correct billing errors.
To keep one account per person, verify age, identity and location, protect accounts from takeover, and prevent fraud and money laundering.
To meet legal duties, including tax reporting.
To apply the limits, breaks and self-exclusion you set, including on any new account we can match to you.
To send you the notifications and emails described below, and to support you and improve the app.

We do not sell your personal information. Nothing we know about you or your account is ever used to give you worse odds than the published ones.

Only service providers that help run Pixelrip, under contract, for the purposes above:

identity verification (Footprint);
device check (FingerprintJS);
card payments and payouts (our payment partner);
text-message codes (Twilio);
email delivery (Resend);
push notifications (Google Firebase Cloud Messaging, and Apple on iPhone);
IP location (IPinfo);
error and crash reporting (Sentry);
hosting and database (Supabase and our hosting provider);
shipping carriers, tax-form filing and customer support.

We also share information when required by law, to protect rights and safety, or in a business transfer.

6. Biometric information

The live selfie is compared to your ID photo by our verification provider to confirm it is you. It is used only for identity verification and fraud prevention, is not used for any other purpose, and is deleted by the provider under its retention schedule [and no later than X]. Where the law requires, we ask for your consent before this check.

7. Notifications and messages

In the app: every notification also lands in your in-app inbox.
Push: we ask before turning push on, never on first launch. Messages about your money, shipments and account safety are always on in the app (you can still turn push off in your phone's settings). Free-pack and new-pack notifications are off until you turn them on, and are capped at one a day and three a week. Pushes are held during quiet hours, 9pm to 9am your time. None are sent during a break or self-exclusion except money, shipping and safety messages. Pushes never contain dollar amounts.
Email: only for money, shipping and account-safety messages, with the same quiet hours. No marketing email is sent today; if we add it, it will need your consent and carry an unsubscribe link.
[SMS: used only for your verification codes. SMS terms to be added if we send any other text messages.]

8. Website cookies

The Pixelrip website uses no advertising or tracking cookies. [Update this section if analytics or marketing cookies are added.]

9. How long we keep it

[COUNSEL REVIEW + CPA: the retention periods below, inside the one wording pass.] We keep information while your account is open and afterwards as long as needed for legal, tax, anti-money-laundering and dispute purposes, then delete or anonymise it:

Transaction, ledger, cash-out and tax records: [5–7] years after the transaction.
Identity-verification result and ID reference: [5] years after the account closes. ID images and selfie: held by our provider under its own schedule [and no later than X].
Phone-number hash and device identifier: while the account is open and [X] years after it closes, so a closed, self-excluded or under-18 account stays blocked.
Location results: [X] months. Push tokens: until you sign out, the token stops working or you delete the account. Notification inbox: [X] months, or until you delete the account.
Error reports: [90] days. Support messages: [X] years.
Your saved shipping address is deleted when you ask us to remove it or delete your account; the delivery address on each completed shipment is kept with that shipment's transaction record for the period above.

10. Your choices and rights

You can access, correct or delete your information, subject to records we must keep by law. Residents of California and other states with privacy laws have additional rights, including to know what we collect, to correct it, to delete it, and to opt out of sale or sharing (we do not sell or share personal information for cross-context advertising). To make a request, email privacy@pixelrip.com. We verify requests before acting on them, and you may use an authorised agent. We will not discriminate against you for exercising your rights.

11. Deleting your account

Delete your account in the app, under Profile › Delete account. Cash out and ship or sell back your cards first: anything left on the account is forfeited (see Closing an account). When you delete, we sign you out on every phone and delete the personal information we do not need: your saved shipping address, push tokens, notification email and in-app inbox, and the last four digits of your phone number. Because a deleted account can be reopened through support, we keep your sign-in record with our login provider, and we keep the records the law requires (transaction, ledger, cash-out and tax records, the identity-verification result and reference, support messages and location results) and the phone-number hash and device identifier, so a closed, self-excluded or under-18 account stays blocked, for the periods in How long we keep it, and then delete them. To have your sign-in record erased as well (which means the account can no longer be reopened), email help@pixelrip.com.

12. Security

We use encryption in transit, access controls and vetted providers. No system is perfectly secure; tell us right away if you think your account has been compromised.

Found a security problem? Email security@pixelrip.com and give us a reasonable time to fix it before you publish anything. Our contact and policy for researchers are published at /.well-known/security.txt. We do not run a bug bounty; we do say thank you.

13. Changes and contact

We will post updates here with a new "Last updated" date. Questions: privacy@pixelrip.com, Pixelrip, 1146 6th Avenue, Office #1, Oakland, California 94606.