Privacy Policy

Riplytics is a trading-card catalog and collection tracker operated by John Lord (Washington, USA). You can reach a real person at contact@riplytics.com.

Account information.If you sign in, we receive your name, email address, and profile image from the provider you signed in with. We store an authentication token so we can keep you signed in. We never see or store your password — we don’t handle passwords at all.

Your collection. The cards you mark as owned or wanted, and anything you choose to add about them: quantity, condition, grade, what you paid, and your own notes. You typed it in; you own it.

A session cookie. One cookie, used only to keep you signed in. We do not use cookies for advertising, tracking, or profiling, because we do not do advertising, tracking, or profiling.

Standard server logs. Our hosting provider records requests — IP address, timestamp, page requested — as any web server does. We use these only to keep the site running and secure.

As of the date above, Riplytics runs no analytics, no tracking pixels, no advertising SDKs, and no third-party scripts. We are not measuring your scroll depth, building a profile of you, or selling anyone access to your behaviour.

If that ever changes, this page changes with it, and we will say so clearly rather than quietly widening a definition.

When you mark a card as “wanted”, that’s a signal about demand. We intend to aggregate those signals across all users to produce statistics like:

“340 collectors are hunting this card. Zero were listed for sale this month.”

That kind of statistic is genuinely useful — nobody in this hobby publishes what people are looking for and cannot find — and we may publish it, or license it, as part of how Riplytics sustains itself.

It is always anonymous and aggregated. Never you want this card. Only this many people want this card. Your individual collection is never published, sold, or shared, and no aggregate figure is ever produced in a way that could identify you.

We are telling you this before we have a single user, rather than adding it quietly once we have thousands. If you’re not comfortable with it, don’t use the want-list — everything else on the site works without it.

We do not sell your personal information. We share it only with the services required to run the site:

• Vercel — hosting. Serves the site and keeps standard server logs.
• Neon — the database where your account and collection are stored.
• Your sign-in provider — if you sign in with a third-party account, they tell us who you are. We tell them nothing about what you do here.

We may also disclose information if we are legally required to. If that ever happens and we are permitted to tell you, we will.

Riplytics may earn a commission when you follow a link from our site to a marketplace and make a purchase. Where we do, it will be disclosed on the page itself.

Affiliate revenue never influences what we show you. A card’s data, its rarity, or its ranking is not for sale, and no merchant can pay to change what Riplytics says about a card. If that ever stops being true, this site is worth nothing and we’ll have failed at the only thing we set out to do.

You can see everything we hold about you — it’s on your collection page. Email contact@riplytics.com and we will export it for you, correct it, or delete your account and everything in it. No retention games, no dark patterns, no three-week cooling-off period.

Depending on where you live — the EU, the UK, California, and others — you may have additional statutory rights over your data. We honour them for everyone, regardless of where you are, because maintaining two standards of decency seemed like the wrong idea.

We keep your account and collection for as long as your account exists. Delete your account and we delete them. Backups may persist for a short period before rotating out.

Data is encrypted in transit and at rest by our hosting and database providers. No system is perfectly secure, and anyone who tells you otherwise is selling something. If we ever suffer a breach affecting your data, we will tell you promptly and plainly.

Riplytics is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us data, email us and we will remove it.

If we change this policy in a way that materially affects you — particularly anything that widens what we collect or what we do with it — we will say so clearly and date it. We will not do it quietly.

Questions: contact@riplytics.com. See also our Terms of Use.