Effective Date: February 17, 2026

Privacy Policy

This Privacy Policy ("Policy") describes how RIP973 ("RIP973," "we," "us," or "our"), a company organized and operating under the laws of the State of California, United States of America, collects, uses, discloses, and protects information in connection with the RIP Wallet application (the "App") and services provided through RIP973.COM (collectively, the "Services"). This Policy is designed to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), and all other applicable federal and state privacy laws.

1. Constitutional Privacy Principles

RIP973 respects the privacy rights recognized under the United States Constitution, including the Fourth Amendment's protection against unreasonable searches and seizures. Our data practices are designed to uphold the principles of individual privacy, limited data collection, and user autonomy. We operate in accordance with all applicable federal and California state privacy laws and regulations.

2. Information We Do NOT Collect

RIP Wallet is a self-custody wallet. By design, we do not collect or have access to the following:

Your wallet secret key (seed phrase/recovery phrase). Your secret key is generated and stored exclusively on your local device and is never transmitted to or stored on our servers.
Your private keys or wallet passwords.
Your PIN or other local authentication credentials. PINs are stored exclusively on your device.
Your personal identity information (name, email, phone number, address, Social Security number, or government-issued identification).
Your financial account information (bank accounts, credit card numbers).

We do not require account registration, identity verification, or any form of Know Your Customer (KYC) process to use the App.

3. Information We May Collect

In the course of providing the Services, we may process the following categories of information:

3.1 Blockchain Data (Publicly Available)

When you use the App to interact with the XRPL, we process your publicly available blockchain data, including your XRPL wallet address, transaction hashes, amounts, timestamps, destination tags, and memo fields. This information is inherently public on the XRPL and is not considered private or confidential.

3.2 Technical and Usage Data

We may collect technical data automatically when you interact with our backend API, including:

IP address (for rate limiting and security purposes).
Device type, operating system, and browser type.
API request metadata (endpoint accessed, response codes, timestamps).
Error logs and diagnostic information for troubleshooting purposes.

This data is collected to maintain the security, stability, and performance of the Services and is not used for marketing, profiling, or behavioral tracking.

3.3 Price and Market Data

The App fetches XRP price data from third-party market data providers (such as CoinGecko). We do not share any user data with these providers; we only retrieve publicly available price information.

4. How We Use Information

We use the information described above for the following purposes:

To provide, operate, and maintain the Services, including processing your interactions with the XRPL.
To enforce rate limiting and protect against abuse, denial-of-service attacks, and other malicious activity.
To monitor and improve the performance, security, and reliability of the App.
To comply with applicable legal obligations, including responding to lawful requests from government authorities.
To enforce our Terms of Service and protect the rights, property, and safety of RIP973, its users, and the public.

5. How We Share Information

RIP973 does not sell, rent, or trade your personal information. We may share information only in the following circumstances:

XRPL Network: Transaction data you submit through the App is broadcast to the XRPL, a public decentralized ledger. This data is publicly visible and cannot be deleted or modified by RIP973.
Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request, including requests from law enforcement agencies, pursuant to a valid subpoena, court order, or other lawful process consistent with constitutional protections.
Protection of Rights: We may disclose information to protect the rights, property, or safety of RIP973, our users, or the public as required or permitted by law.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, user data may be transferred as part of that transaction. We will notify users of any such transfer and any changes to this Privacy Policy.

6. California Consumer Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

Right to Know: You have the right to request that we disclose what categories of personal information we have collected, used, disclosed, or sold about you in the preceding 12 months.
Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions provided by law.
Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Opt-Out of Sale/Sharing: RIP973 does not sell or share personal information as defined under the CCPA/CPRA. Therefore, there is no need to opt out.
Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us using the information provided in Section 14 of this Policy. We will verify your identity before processing your request to protect against unauthorized access. We will respond to verifiable consumer requests within 45 days of receipt, as required by law.

7. Data Retention

We retain technical and usage data (such as server logs and API request logs) only for as long as necessary to fulfill the purposes described in this Policy, typically no longer than 90 days, unless a longer retention period is required by law. Blockchain data submitted to the XRPL is permanently recorded on the public ledger and cannot be deleted by RIP973 or any party. Wallet data stored locally on your device (including your secret key and PIN) remains on your device until you delete it. RIP973 has no ability to access or delete locally stored data.

8. Data Security

We implement industry-standard security measures to protect the information processed through our Services, including:

HTTPS/TLS encryption for all data transmitted between the App and our servers.
Security headers (via Helmet.js) to protect against common web vulnerabilities including cross-site scripting (XSS), clickjacking, and MIME-type sniffing.
Rate limiting to prevent abuse and brute-force attacks (60 requests per minute for general API access; 10 requests per minute for sensitive operations).
Input validation and sanitization on all API endpoints to prevent injection attacks.
CORS restrictions to prevent unauthorized cross-origin requests.
Automatic sanitization of sensitive data (such as seeds and secret keys) from server logs.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Services at your own risk.

9. Children's Privacy

The Services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age. If we become aware that we have inadvertently collected personal information from a child under 18, we will take reasonable steps to delete such information promptly. If you believe that a child under 18 has provided us with personal information, please contact us immediately using the information in Section 14.

10. Do Not Track Signals

The App does not track users across third-party websites or services. We do not use cookies, web beacons, or similar tracking technologies in the mobile application. We honor Do Not Track ("DNT") signals transmitted by web browsers, though as noted, we do not engage in tracking activities that DNT is designed to prevent.

11. International Users

The Services are operated from the United States. If you access the Services from outside the United States, you acknowledge and consent that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to such transfer and processing.

12. Third-Party Services and Links

The App may contain links to or integrations with third-party services, including decentralized exchange applications listed in the DEX directory. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your information or connecting your wallet.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through the App or on the RIP973.COM website. The "Effective Date" at the top of this Policy indicates when the most recent revisions were made. Your continued use of the Services after the posting of a revised Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your privacy rights, please contact us at:

RIP973
Website: RIP973.COM
Jurisdiction: State of California, United States of America

For CCPA/CPRA requests, you may also submit a verifiable consumer request through our website. We will respond within 45 days as required by law.