Privacy Policy
Who is responsible
Vice Rips is run by [legal entity name and address: TBD by legal], the controller of the personal data described here. This policy goes with our Terms and Conditions.
What we store
- Your Privy user id (a code like
did:privy:…) that links everything below to your account. - Your username, and the time you confirmed you are 18 or older.
- Which version of the Terms and Privacy Policy you accepted, and when.
- Your Vice Rips wallet address (your Solana wallet) and its USDC account.
- Your gems: when you agreed to turn USDC into gems, and which version of that consent you agreed to; each deposit we saw arrive in your Vice Rips wallet (its Solana transaction, amount and time); each move of USDC from your wallet to Vice Rips (its Solana transaction); and your gem balance with a record of every gem added, spent or given back.
- Your purchases: each pack order (creator, price, time, status) and any refund. For packs paid in USDC before gems, also the payment transaction on Solana.
- Your pulls: which photos and videos came out of each pack, so we can show them in My vault and avoid repeats.
- Referrals and the deposit match: whose invite link you signed up from (their username) and when; who signed up from yours; for each of them, whether they deposited, how much, and the bonus gems you got for it; and your own deposit match. [retention period: TBD by legal]
- A device id and a hashed IP address, to stop one person collecting referral rewards for themselves. The device id is a random code your browser makes once and keeps on your device (in local storage and a first-party cookie named
vice_dev); it is sent with your requests to us when you are signed in and when you sign up. We store a one-way hash of it and of your IP address (never the id or the address themselves) when you sign up and, from time to time, when you use the site signed in (for example when your gem balance is checked), and compare them with your referrer's. The device id identifies a browser, not you, and clearing your browser's site data makes a new one. [legal basis wording, cookie consent requirements per market, hashing method and retention period: TBD by legal] - Technical logs kept by our hosting provider for a short time (such as IP address, browser and errors). [retention period: TBD]
We do not store card or bank details: we do not take cards. We do not store your email address, phone number or social sign-in details ourselves; Privy holds whatever you used to sign in (see below). We never hold your wallet's private keys.
Your browser also keeps a few settings on your device (for example that you passed the 18+ screen, sound on or off, your pinned creators, and a purchase that is still opening). If you opened someone's invite link, it also keeps their username for 30 days (local storage and a first-party cookie named vice_ref), so the referral counts when you sign up. They stay on your device and you can clear them in your browser.
What is public
USDC transfers on Solana are public by nature: anyone can see transfers to and from a Solana address, with their amount and time. That includes deposits to your Vice Rips wallet and our moving them to Vice Rips. We cannot hide or delete that. Your gem balance, and the packs you buy with gems, are kept in our own records, not on Solana. Your username may be shown to other users in future (for example next to a pull). So may your ranks, which we work out from the packs you have bought; we never show what you spent. You can hide yourself from leaderboards under Top fans.
Referrals. If you join from someone's invite link, that person can see your username, when you joined, whether you have deposited and how much, and the bonus gems they got for it. [whether to show deposit amounts to referrers at all, or only "deposited yes/no": TBD by legal]
Why we use it
- To run your account, see your deposits arrive, turn them into gems, sell you packs, deliver and show your pulls (needed for our contract with you).
- To keep a record that you confirmed you are 18+, accepted the Terms and agreed to turn USDC into gems (our legal obligations and legitimate interests).
- To prevent fraud and abuse, including abuse of the network fees we pay and of the deposit match and referral rewards (the device id and hashed IP address above) (legitimate interests).
- To run the deposit match and referrals: to know who referred you, add bonus gems and show your referrals (needed for our contract with you).
- To keep accounting and tax records [as required by law: TBD by legal].
We do not sell your data and do not use it for advertising.
Who we share it with
- Privy provides sign-in and your self-custody wallet, and processes your sign-in details for us as a processor. [link to Privy's privacy policy and our data processing terms: TBD]
- Supabase stores our database and the content files (servers in the UK, London region).
- Vercel hosts the site and its server functions.
- Helius (helius.dev) watches the Solana wallet addresses of buyers who turned gems on, and tells us when a deposit arrives. To do that it sees those wallet addresses and their transactions. [link to Helius's privacy policy and our data processing terms: TBD]
- Solana RPC providers that we use to read the network and send transactions, such as moving your USDC to Vice Rips. [provider names: TBD]
- Authorities, if the law requires it.
Some of these providers may process data outside your country. [international transfer safeguards: TBD by legal]
How long we keep it
We keep your account data while your account is open, and purchase, payment and gem records (deposits, moves to Vice Rips and your gem balance and its history) while your account is open and then for as long as the law requires for accounting. [retention periods: TBD by legal]
Your rights
Depending on where you live, you can ask to see, correct or delete your data, to receive a copy, or to object to how we use it, and you can complain to your data protection authority. Some records (for example payments) we must keep by law, and data on the Solana network cannot be deleted by anyone. [rights wording per market: TBD by legal]
Children
Vice Rips is for adults only. We do not knowingly collect data from anyone under 18 and close such accounts when we find them.
Changes
When this policy changes in a way that matters, we will ask you to accept the new version before your next pack.
Contact
Privacy questions and requests: [privacy contact email: TBD].