Privacy Policy

This policy explains what information RIP GamerTag actually collects, where it goes, and how long it's kept. The data controller is [[NEEDS OWNER INPUT: registered legal entity name and registered address]].

What we collect

• Memorial content you submit — the gamertag, dates, cause of death, final words, and the display name you attach to it.
• Your email address, if you start a checkout. It is stored on your memorial and used for your receipt and management link.
• The PayPal payer email address returned to us when a payment completes, stored alongside the payment record. We never receive or store your card number, bank details, or PayPal password.
• A random visitor id — a UUID we generate and store in an httpOnly cookie (bme_visitor). It is not derived from your device, browser, or IP, and it identifies nothing about you outside this site.
• One database row per page view (memorial, visitor id, timestamp), and one row per share event (memorial, platform, timestamp). These are individual event records, not just aggregate counters, even though we only ever display them as totals.
• One row per reaction (memorial, visitor id, reaction type) — this is what stops the same visitor reacting twice.
• Reports — the reason, any details you type, and your email address if you choose to provide one (it is optional).
• Your IP address, used transiently for rate limiting abusive traffic. It is held in server memory only for the length of the rate-limit window and is not written to our database. Our hosting provider keeps its own request logs, which include IP addresses, under its own retention schedule.

What we don't collect

We do not use advertising or analytics trackers, do not build cross-site tracking or fingerprinting profiles, do not sell or share your data with advertisers, and do not require an account, real name, or phone number to use the service.

How it's used

To publish and host your memorial, take payment, send transactional email (receipt and management link), prevent abuse (duplicate reactions and views, repeat reports, spam), run moderation, and show view/reaction/share counts on memorial pages.

Who processes it

• Supabase — hosted Postgres database where memorials, payments, reports, reactions, views, and share events are stored.
• Vercel — application hosting; processes requests and keeps operational request logs.
• PayPal — payment processing. PayPal is an independent controller of the payment data it collects from you and handles it under its own privacy policy.
• Resend — delivery of transactional email (receipts, management links, moderation notices).

These providers may store or process data outside your country, including in the United States. We do not send your data to anyone else except where we are legally required to.

How long we keep it

Published memorials, and the view, reaction, and share rows attached to them, are kept for as long as the memorial is published — the product you bought is permanent hosting. Deleting a memorial from your management link removes it from public view immediately by marking it deleted; the underlying row and its attached event rows remain in our database until they are erased on request or purged. Payment records are kept for as long as we need them for accounting, tax, and chargeback purposes. Reports and their moderation history are kept as a record of enforcement. Rate-limit data disappears when the window expires or the server restarts.

Your choices and how to request deletion

You can change a memorial's privacy setting or delete it at any time from the management link in your receipt email. For anything beyond that — permanent erasure of a memorial and its event rows, erasure of your email address from our records, or a copy of the data we hold about you — email hello@ripgamertags.com from the address you used at checkout, or include your memorial URL. We aim to respond within 30 days. Depending on where you live you may also have rights to correct, restrict, or object to our processing, and to complain to your local data protection authority. Note that we may keep payment records after erasure where the law requires it.

Public memorials

Content you choose to make Public or Unlisted is visible to anyone with the URL (or, for Public memorials, anyone browsing the graveyard) and may be indexed by search engines or copied by others while it is live. Do not include private personal information in a memorial.

Children

This service is not directed to children and we do not knowingly collect data from anyone under 13. If you believe a child has submitted content, email us and we will remove it.

Contact

Privacy questions: hello@ripgamertags.com, or write to [[NEEDS OWNER INPUT: registered legal entity name and registered address]].