← Back to GoodRips

Privacy Policy

Effective date: April 13, 2026

GoodRips (goodrips.com) is operated by GoodRips LLC, a Pennsylvania limited liability company ("we," "us," or "our"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

We believe in keeping things simple: we collect only what we need to run the app, we don't sell your data, and we don't track you with analytics cookies.

1. What We Collect

Account information

When you sign up we collect your email address and display name. If you sign in with Google, we receive your email and name from Google OAuth. We do not store your Google password.

Session and pull data

When you use the app you create session data including pack openings, card pulls, and associated card pricing information. This data is stored so you can track your history, stats, and trends over time.

Simulated rip data

GoodRips includes a pack-opening simulator. Simulated sessions and simulated pulls are stored in your account alongside your real data but are clearly flagged as simulated. They are never mixed with your real collection for purposes outside the app and have no monetary value.

Export logs

When you export your data we log that an export occurred (date and format) for troubleshooting purposes.

Payment information

If you subscribe to GoodRips Pro, payment details are collected and processed entirely by Stripe. We do not store your credit card number. We receive from Stripe your subscription status, plan type, and billing dates.

Waitlist emails

If you submit your email on our landing page before signing up, we store that email address to notify you when the app launches. You can request removal at any time.

2. How We Use Your Data

We use your data to:

  • Provide, maintain, and improve GoodRips
  • Authenticate your identity and secure your account
  • Process Pro subscription payments
  • Display your session history, stats, and pull data
  • Send transactional emails (e.g., password resets)
  • Respond to support requests

Community feed. GoodRips displays an anonymous community feed of recent notable pulls. This feed shows only card information (card name, set, rarity, price, and card image) and does not include your username, email, or any other personally identifiable information. Participation is controlled by your notification and privacy preferences in your profile; you can opt out at any time and past pulls will no longer be eligible for the feed going forward.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate GoodRips. Each has its own privacy policy:

Supabase

We use Supabase for authentication and database hosting. Your account data, session data, and pull data are stored in Supabase-managed infrastructure.

Stripe

Stripe processes all payments for GoodRips Pro. When you subscribe, Stripe collects and stores your payment information. We never see or store your full card number.

Vercel

The app is hosted on Vercel. Vercel may collect standard server logs (IP addresses, request timestamps) as part of normal infrastructure operations.

Card pricing APIs

We fetch card pricing data from third-party APIs including the Pokemon TCG API, Scryfall, and TCGPlayer. These requests are made server-side and do not expose your personal information to those services.

4. Cookies

GoodRips uses cookies only for authentication. When you sign in, Supabase sets session cookies to keep you logged in. These are essential functional cookies required for the app to work.

We do not use any analytics, advertising, or tracking cookies. There are no third-party trackers on GoodRips.

5. Data Retention & Deletion

We retain your data for as long as your account is active. If you delete your account from your profile page, we permanently delete all of your data, including:

  • Your account and profile information
  • All session and pull data (real and simulated)
  • Export logs
  • Any subscription records on our side (Stripe may retain billing records per their own policy)

Deletion is permanent and cannot be undone. We aim to process all deletions immediately.

6. Children's Privacy

GoodRips is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@goodrips.com and we will promptly delete the data.

7. Your Rights

You have the right to:

  • Accessyour data — all of your session and pull data is visible in the app
  • Exportyour data — you can export your session data from within the app
  • Deleteyour data — you can delete your entire account and all associated data from your profile page
  • Correctyour data — you can update your display name from your profile page. To change your email address, contact us at support@goodrips.com

If you need help exercising any of these rights, email us at support@goodrips.com.

8. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the following rights:

  • Right to know what personal information we collect, use, and share
  • Right to delete your personal information
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of your personal information
  • Right to non-discrimination for exercising these rights

We do not sell your personal information and we do not share it with third parties for cross-context behavioral advertising. To exercise any of the above rights, use the tools in your profile (export, delete, update display name) or email support@goodrips.com. We will verify your identity through your account email before processing a request.

9. International Users & GDPR

GoodRips is operated from the United States. If you access the app from outside the United States, your data will be transferred to and processed in the U.S.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal basis for processing: we process your data to perform the contract you enter into when you create an account (Art. 6(1)(b) GDPR) and, for optional features like the community feed, based on your consent (Art. 6(1)(a) GDPR).
  • Data portability: you can export your data from within the app.
  • Right to object or restrict: you may object to or restrict certain processing by contacting us.
  • Right to lodge a complaint with your local data protection authority.

For GDPR or other regional privacy questions, email support@goodrips.com.

10. Security

We take reasonable measures to protect your data, including using HTTPS for all connections, secure authentication via Supabase, and encrypted payment processing via Stripe. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top and may notify you via email or an in-app notice. We encourage you to review this page periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, contact GoodRips LLC at support@goodrips.com.