Privacy Policy

Last updated September 23, 2026

RasslinRips is operated by ONE MORE TIME LLC in the United States. This policy explains what we collect, why, who handles it for us, and the choices you have. The service is for adults 18 and over; we do not knowingly collect information from anyone younger.

What we collect

• Account: email address, a hash of your password (never the password itself), date of birth for age verification, display name, US state, and your feed anonymity choice. If you sign in with Google or Apple, we receive your name and email address from them and nothing else.
• Phone number: verified once by a text-message code before you can purchase, and used for account security. Codes are sent and checked by Twilio.
• Transactions: deposits, purchases, rips, sell-backs, withdrawals and shipments, kept on a permanent double-entry ledger.
• Payments: handled by Stripe. RasslinRips never sees or stores full card numbers; we keep only what Stripe returns (the last four digits, card brand, and the outcome of each payment).
• Identity verification: before your first withdrawal you verify your identity with Stripe Identity, which collects a photo of a government ID and a selfie and checks them. Those images stay with Stripe. We store only the result (verified or not, and the reason if not) and the date.
• Payout details: to receive withdrawals you link a bank account through Stripe Financial Connections. Stripe holds the account details and the account holder name and address used to confirm the account is yours. We store only Stripe's reference to your payout account and whether it is ready. We never pull money from your bank, and we do not read balances or transactions.
• Shipping: the name and address you give for a shipment, shared with the shipping provider and carrier that deliver it.
• Security records: the date, IP address and browser of each sign-in and purchase, for fraud prevention, chargeback disputes and to detect a sign-in from a browser your account has not used. If you turn on two-factor sign-in, we store your authenticator secret in encrypted form and one-way hashes of your backup codes.
• Support and correspondence: what you send us when you contact us.

What we use it for

Running the service; fulfilling shipments; receipts, verification codes and service email; preventing fraud and disputing chargebacks; verifying age, state eligibility and identity as the law and our payment partners require; paying you out; keeping the public live feed (your display name or an anonymous ring name, your choice in settings, never your email); and improving the service from aggregate usage. We do not use your data for advertising and we do not sell personal information.

Cookies and similar storage

We use cookies only to run the service: a sign-in session cookie; a cookie that remembers a browser you have verified so we do not ask for a code every time; a short-lived cookie that carries an invite or referral code through sign-up; and, for staff, an admin access cookie. Preferences such as sound and reveal settings are kept in your browser's local storage. We do not use advertising or cross-site tracking cookies. Cloudflare Turnstile may set its own cookie on the sign-up form to tell people from bots.

Who handles data for us

Service providers acting on our instructions, and only what each needs: Stripe (payments, identity verification, payouts and sales tax), Twilio (phone verification and text messages), Resend (email), DigitalOcean (hosting, database and image storage in the United States), Cloudflare (bot protection on sign-up), Sentry (error reports, which may include your account ID), our shipping provider and carriers (name and address for deliveries), and Anthropic (identifying cards from photographs of the cards themselves; no personal data). We share information otherwise only when the law requires it, to protect our rights or users, or in a merger or sale of the business, in which case this policy continues to apply.

Retention

Financial records, including the ledger, deposits, withdrawals, identity-verification results and tax records, are kept as long as the law requires, generally seven years. Sign-in security records are kept for twelve months. Everything else is kept while your account is open and deleted or anonymised after it closes, except what those retention rules require us to keep.

Your choices and rights

You can change your display name, feed anonymity, sound and reveal preferences, and two-factor settings any time in Settings. You can ask us to see, correct or delete your personal information, or to close your account, by emailing admin@rasslinrips.com or using the data deletion page; we verify the request, act on it within 45 days, and keep only the records we are required to keep. We do not sell or share personal information for advertising, so there is nothing to opt out of on that front. Residents of California and other states with privacy laws have these rights under those laws, and we honour them for everyone.

Security

All traffic is encrypted in transit. Passwords are hashed, authenticator secrets are encrypted at rest, card and bank details never touch our servers, and access to our systems is limited to the people who run the service. No system is perfect; if we learn of a breach affecting your information we will tell you without undue delay.

Changes and contact

We will post any material change here with a new date and, for significant changes, tell you by email. Questions: admin@rasslinrips.com.