Privacy Policy

Introduction

Digital Apes GmbH (“Company,” “we,” “us,” or “our”) operates 2rips.com and is the controller responsible for the personal data processing described in this Privacy Policy. The Company is incorporated in Austria and registered in the Austrian Commercial Register under number FN 593236g.

This Privacy Policy covers our handling of personal data when you browse 2rips.com, create or manage an account, purchase or open collectible products, request a buyback, use the marketplace, arrange storage or shipping, or communicate with our team. These website features and related services are referred to as the “Platform.”

The Policy describes the personal data we process, our reasons for processing it, the recipients of that data, our retention practices, and your rights and choices.

Our registered address is:

Digital Apes GmbH Spaces Square One Leopold-Ungar-Platz 2/1. Stock/Stiege 2 1190 Wien, Austria

For privacy enquiries or requests concerning your personal data, contact ceo@digitalapes.at.

For customer support, contact support@digitalapes.at.

This Policy provides information about our data processing practices. Where your consent is required for a particular processing activity, we will request it separately.

1. Scope and Application

This Privacy Policy applies to personal information we collect in connection with:

your access to and use of the Platform;
account registration, administration, and security;
purchases, sales, listings, bids, offers, redemptions, vaulting, storage, shipping, authentication, grading facilitation, and marketplace activity;
communications with our customer support, trust and safety, compliance, legal, finance, and operations teams;
participation in promotions, waitlists, surveys, reviews, referrals, loyalty programs, events, or similar activities;
interactions with our emails, SMS, advertising, social media pages, and other communications; and
any other online or offline interaction where this Privacy Policy is linked, posted, or otherwise provided.

This Privacy Policy does not apply to:

information processed solely on behalf of third-party sellers, service providers, or business customers where we act only as a processor, service provider, or similar intermediary;
websites, apps, services, wallets, social platforms, payment services, grading companies, authentication providers, logistics providers, or other third parties not controlled by us;
employment, contractor, or applicant data, unless specifically stated.

Third parties may maintain their own privacy notices and practices. We are not responsible for those third-party practices and encourage you to review their policies.

2. Categories of Personal Information We Collect

Depending on how you interact with the Platform, we may collect the following categories of personal information.

2.1 Identifiers and Contact Information

name, display name, username, alias, or account handle;
email address, phone number, billing address, shipping address, and country or region;
account ID, customer number, seller ID, consignor ID, or similar internal identifiers.

2.2 Account and Profile Information

account credentials, password hashes, security settings, login history, multi-factor authentication settings, and account recovery information;
profile details, avatar, biography, collection preferences, saved items, watchlists, wishlists, favorites, and communication preferences.

2.3 Transaction and Commercial Information

product purchases, sales, listings, bids, offers, redemptions, refunds, cancellations, order history, shipment history, marketplace activity, vault requests, storage elections, and buyback activity;
information relating to Collectables, including item descriptions, serial numbers, grading details, authentication information, provenance details, condition notes, images, and collection data;
records relating to rewards, promotional credits, referral activity, discount usage, loyalty benefits, store credits, or other customer incentives.

2.4 Payment and Financial Information

payment method information, transaction confirmations, billing records, limited payment card details, payout details, bank account information where needed for payouts, tax forms, and related financial administration data;
fraud-screening outputs, payment risk indicators, chargeback history, settlement information, and processor response data.

We generally rely on third-party payment processors and financial partners to process full payment card information, although we may receive limited payment-related details and transaction metadata.

2.5 Identity Verification and Compliance Information

date of birth;
government-issued identification details, copies of identification documents, selfie or liveness-check results, proof of address, taxpayer identification information, and similar verification materials;
sanctions screening data, watchlist results, source-of-funds information, source-of-wealth information, beneficial ownership data, business ownership information, resale or tax exemption data, and records needed for fraud prevention, anti-money laundering, export control, customs, tax, sanctions, or other legal compliance;
documentation submitted in connection with disputes, suspicious activity reviews, enhanced due diligence, account restrictions, or trust and safety investigations.

2.6 Customer Support and Communications Information

emails, chat logs, recorded calls where permitted by law, support tickets, complaint submissions, dispute materials, fraud reports, trust and safety submissions, and other communications with us;
attachments, photographs, videos, affidavits, receipts, screenshots, device information, shipping documentation, unboxing footage, and other evidence you provide in connection with claims, disputes, returns, delays, authenticity concerns, or legal requests.

2.7 Device, Network, and Technical Information

IP address, browser type, operating system, device identifiers, hardware model, app version, language settings, time zone, network information, general location derived from IP, mobile carrier, and referring URLs;
session data, log files, timestamps, crash reports, event logs, and performance diagnostics;
information regarding how your device interacts with the Platform and our communications.

2.8 Usage and Behavioral Information

pages viewed, links clicked, products viewed, time spent, searches performed, features used, search queries, queue participation, marketplace interactions, email open and click data, and interactions with drops, reveals, openings, storage flows, and redemption workflows;
inferred preferences, likely interests, engagement profiles, audience segments, and similar analytics-based inferences derived from your interactions.

2.9 Marketing and Advertising Information

your subscription status for newsletters, SMS, or promotional communications;
advertising IDs, campaign identifiers, attribution data, conversion data, cookie IDs, pixel tags, SDK outputs, and similar data used to measure, target, suppress, and optimize campaigns;
social media interactions, ad engagement, and information received from advertising and analytics partners.

2.10 User Content and Community Information

reviews, comments, posts, messages, images, videos, collection showcases, seller listings, marketplace descriptions, and other content you choose to provide or publish on or through the Platform.

2.11 Information from Third Parties

We may receive personal information from third parties, including:

payment processors, financial institutions, fraud prevention vendors, and chargeback providers;
identity verification, sanctions screening, and compliance vendors;
grading, authentication, warehousing, vaulting, customs, insurance, shipping, and logistics providers;
data analytics, attribution, communications, support, and advertising vendors;
affiliates, referral partners, business partners, licensors, marketplace counterparties, and service providers;
social networks or third-party login providers, where you choose to connect them;
public records, law enforcement, regulators, and rights holders.

2.12 Wallet, Blockchain, or Token-Linked Information

If the Platform includes wallet, token, or blockchain-linked features, we may collect public wallet addresses, on-chain transaction information, asset IDs, token identifiers, and related metadata associated with your use of those features.

Blockchain data may be public, immutable, and not fully erasable.

3. Sensitive Personal Information

In limited circumstances, we may collect information considered sensitive under some privacy laws, such as:

government-issued identification numbers or documents;
financial account details used for payouts or compliance;
date of birth and age verification information;
account log-in credentials;
sanctions, watchlist, source-of-funds, or source-of-wealth data; and
biometric-adjacent verification inputs supplied to our verification vendors, such as selfie or liveness data, where applicable.

We do not use sensitive personal information to infer characteristics about you except as permitted by law and reasonably necessary for verification, fraud prevention, security, contract performance, customer support, legal compliance, or other legitimate operational purposes.

4. Cookies and Similar Technologies

We and our vendors may use cookies, pixels, tags, web beacons, SDKs, local storage, session replay tools, device fingerprints, and similar technologies (collectively, “Cookies and Similar Technologies”) to collect information automatically.

We may use Cookies and Similar Technologies to:

operate, secure, authenticate, and maintain the Platform;
remember preferences and settings;
analyze traffic, conversion, performance, and engagement;
understand browsing, shopping, and transaction behavior;
detect fraud, bots, abuse, or suspicious activity;
personalize product recommendations, content, and offers; and
deliver, target, or optimize advertisements where permitted by law.

Depending on your jurisdiction, you may be able to manage Cookies and Similar Technologies through a cookie banner, preference center, browser settings, device settings, or other controls. Blocking some Cookies and Similar Technologies may affect Platform functionality.

5. How We Use Personal Information

We use personal information for the following purposes, as permitted by Applicable Law.

5.1 To Provide the Platform and Perform Contractual Obligations

create, administer, and secure Accounts;
process purchases, sales, listings, bids, offers, redemptions, refunds, cancellations, payouts, and marketplace transactions;
facilitate authentication, grading, vaulting, warehousing, customs handling, insurance coordination, shipping, and fulfillment;
provide customer support, resolve disputes, and respond to inquiries;
maintain records of transactions, ownership, storage elections, and account history.

5.2 To Operate, Improve, and Develop the Platform

analyze demand, trends, market activity, and product performance;
conduct research, testing, quality assurance, debugging, and internal analytics;
improve site functionality, search, recommendations, fraud controls, shipping flows, marketplace tools, and user experience;
develop new products, services, promotions, loyalty features, storage products, resale tools, and operational capabilities.

5.3 To Protect the Platform, Users, and Third Parties

verify identities, payment methods, ownership rights, and account integrity;
detect, investigate, prevent, and respond to fraud, bots, account abuse, counterfeit items, manipulation, chargebacks, theft, hacking, policy violations, or unlawful conduct;
monitor for suspicious transactions, device risks, sanctions exposure, compliance concerns, and trust and safety issues;
enforce our Terms and Conditions, marketplace rules, seller standards, storage terms, and other agreements.

5.4 To Communicate with You

send transactional and service-related messages, including receipts, shipping updates, redemption notices, fraud alerts, account confirmations, policy updates, and customer support responses;
send marketing emails, SMS, push notifications, and promotional communications where permitted by law;
conduct surveys, seek feedback, manage waitlists, and administer promotions or referral programs.

5.5 To Comply with Legal Obligations and Protect Rights

comply with Applicable Law, tax obligations, sanctions requirements, customs obligations, court orders, government requests, and regulatory expectations;
establish, exercise, investigate, or defend legal claims;
protect our rights, property, operations, personnel, users, service providers, and the public.

5.6 For Corporate Transactions and Business Administration

support audits, accounting, financial reporting, risk management, insurance, corporate governance, and internal administration;
facilitate or evaluate mergers, acquisitions, financings, restructurings, asset sales, insolvency events, or other corporate transactions.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients, subject to Applicable Law.

6.1 Service Providers and Vendors

We may disclose personal information to vendors and service providers that perform services on our behalf, including providers of:

hosting, cloud storage, infrastructure, and security;
payment processing, fraud prevention, and financial administration;
identity verification, compliance, and sanctions screening;
customer service, communications, and CRM systems;
analytics, attribution, marketing, and advertising;
shipping, customs, warehousing, vaulting, grading, authentication, insurance, and logistics;
software development, bug tracking, productivity, and internal support tools.

6.2 Business Partners and Counterparties

We may disclose personal information to:

marketplace counterparties where needed to facilitate a transaction;
referral partners, promotional partners, licensors, or co-branded partners where relevant to the applicable service or campaign;
insurers, financing providers, or commercial partners involved in transaction support or operational delivery.

6.3 Affiliates and Corporate Group Members

We may disclose personal information to our affiliates, parent companies, subsidiaries, or related entities for purposes consistent with this Privacy Policy.

6.4 Professional Advisers and Corporate Transaction Parties

We may disclose personal information to lawyers, auditors, consultants, accountants, bankers, insurers, lenders, investors, acquirers, and counterparties in actual or potential corporate transactions.

6.5 Regulators, Authorities, and Law Enforcement

We may disclose personal information where we believe disclosure is necessary or appropriate to:

comply with Applicable Law, regulation, legal process, or government request;
respond to subpoenas, court orders, or regulatory inquiries;
cooperate with law enforcement, customs authorities, tax authorities, consumer protection authorities, or sanctions authorities;
protect against fraud, abuse, illegal activity, or threats to safety.

6.6 Rights Holders and Affected Third Parties

We may disclose personal information where reasonably necessary to investigate or respond to alleged infringement, counterfeit activity, theft, chargeback fraud, or other disputes affecting rights holders, sellers, buyers, carriers, insurers, or other affected parties.

6.7 At Your Direction or With Your Consent

We may disclose personal information where you direct us to do so or where you otherwise consent.

7. Sales, Sharing, and Targeted Advertising

Depending on your jurisdiction and how our advertising and analytics activities are configured, some disclosures involving cookie-based advertising, cross-context behavioral advertising, audience matching, or similar activities may be considered a “sale,” “sharing,” or use of personal information for targeted advertising under certain privacy laws.

We do not sell personal information for money in the ordinary sense. However, we may allow advertising, analytics, or social media partners to collect or receive certain identifiers, device information, usage data, and similar information for campaign measurement, attribution, audience creation, or advertising optimization.

Where required by Applicable Law, we will provide appropriate notice and opt-out rights relating to those activities.

8. Analytics and Advertising Partners

We may work with third-party analytics and advertising providers that use cookies, pixels, SDKs, and similar tools to collect or receive information from the Platform and elsewhere over time in order to:

understand how users discover and interact with the Platform;
measure conversions, campaign performance, and attribution;
prevent duplicate or irrelevant advertising;
deliver more relevant advertising and content; and
improve our marketing and product strategy.

These partners may combine data collected through the Platform with data they collect from other sources, subject to their own privacy practices.

9. Public, Social, and Community Features

If you use marketplace, review, comment, community, collection showcase, social, or similar features, information you choose to submit may be visible to other users or to the public. This may include usernames, profile information, listings, comments, ratings, images, transaction-related content, and similar materials.

Please use caution when deciding what information to share publicly or with other users.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

maintain your Account and provide requested services;
complete transactions and associated operational processes;
comply with tax, accounting, customs, shipping, legal, regulatory, anti-fraud, dispute-resolution, and recordkeeping obligations;
investigate incidents, enforce agreements, and preserve evidence relevant to actual or potential claims; and
support legitimate business operations, audits, security, and corporate recordkeeping.

Retention periods vary depending on the nature of the information, the sensitivity of the information, the context in which it was collected, whether the information is needed to provide services, and any legal or operational retention requirements.

When personal information is no longer reasonably required, we may delete it, de-identify it, aggregate it, or retain it only as necessary to comply with law, resolve disputes, enforce agreements, or maintain appropriate records.

11. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, and other unlawful or accidental processing.

However, no system, network, device, or method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your login credentials, devices, and communications with us.

12. International Data Transfers

We and our service providers may process personal information in the United States and other countries where we or our vendors operate. These jurisdictions may have data protection laws different from those in your country of residence.

Where required by law, we will implement appropriate safeguards for cross-border transfers, which may include contractual protections, adequacy mechanisms, or other legally recognized transfer tools.

13. Children and Age Restrictions

The Platform is not directed to children under eighteen (18), and we do not knowingly collect personal information from children under eighteen (18).

In addition, the Platform is intended only for users who meet the minimum age stated in our Terms and Conditions. If we learn that we collected personal information from a child in violation of Applicable Law, we may delete that information and take steps to disable the relevant account.

If you believe a child has provided personal information to us unlawfully, please contact us using the details below.

14. Your Choices and Controls

Subject to Applicable Law and technical availability, you may have the following choices and controls:

access, update, or correct certain account information through your account settings;
opt out of marketing emails by using the unsubscribe link in those emails;
manage SMS preferences by following the instructions in the message or contacting us;
manage cookie preferences through applicable consent tools, browser settings, device settings, or privacy controls;
disable certain push notifications through your device or app settings; and
close your account by contacting us, subject to any outstanding legal, compliance, storage, payment, or transactional obligations.

Even if you opt out of marketing communications, we may still send you transactional or service-related messages.

15. U.S. State Privacy Rights

Depending on your state of residence, you may have rights under Applicable Law relating to personal information we process about you. Subject to legal exceptions, verification requirements, and any limitations under applicable law, those rights may include the right to:

confirm whether we process your personal information;
access personal information;
correct inaccuracies in personal information;
delete personal information;
obtain a portable copy of certain personal information;
opt out of the sale of personal information, sharing of personal information, targeted advertising, certain profiling, or certain sensitive data uses where applicable; and
appeal a decision we make regarding a privacy request.

We will not unlawfully discriminate against you for exercising privacy rights.

To exercise privacy rights, please contact us at ceo@digitalapes.at. We may need to verify your identity before processing your request. Where permitted by law, you may designate an authorized agent to submit a request on your behalf.

15.1 Categories, Purposes, and Recipients

For purposes of certain U.S. state privacy laws, the categories of personal information we collect, the purposes for collection and use, and the categories of recipients to whom we disclose personal information are described in Sections 2, 5, and 6 above.

15.2 California-Specific Notice

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and opt out of certain disclosures or uses of personal information.

We may collect, use, retain, and disclose the categories of personal information described in this Privacy Policy for the business and commercial purposes described above. We may also use or disclose sensitive personal information for limited purposes permitted by California law, such as performing services, verifying identity, preventing fraud, securing systems, processing transactions, complying with legal obligations, and maintaining appropriate records.

If our practices constitute “selling” or “sharing” personal information under California law, we will provide a method for California residents to opt out, such as a “Do Not Sell or Share My Personal Information” link, consent management tool, or equivalent legally recognized mechanism.

15.3 Appeals

If you are entitled to appeal a denial of a privacy request under applicable state law, you may do so by contacting us at ceo@digitalapes.at with the subject line “Privacy Rights Appeal.”

17. EEA, UK, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection rights, and the applicable law applies to our processing, the following additional disclosures apply.

17.1 Lawful Bases

We may process personal data on one or more of the following legal bases:

performance of a contract or to take steps at your request before entering into a contract;
compliance with legal obligations;
our legitimate interests or the legitimate interests of third parties, provided those interests are not overridden by your rights and freedoms;
your consent, where required; and
establishment, exercise, or defense of legal claims.

17.2 Additional Rights

Subject to applicable law, you may have rights to:

request access to personal data;
request rectification of inaccurate personal data;
request erasure of personal data;
request restriction of processing;
object to certain processing, including processing based on legitimate interests and certain direct marketing;
request portability of certain personal data; and
withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

You may also have the right to lodge a complaint with a supervisory authority in your place of residence, work, or where an alleged infringement occurred.

17.3 International Transfers

Where required, international transfers of personal data outside the EEA or UK will be subject to appropriate safeguards recognized by applicable law.

18. Do Not Track and Global Privacy Control

Some browsers offer “Do Not Track” settings, and some jurisdictions recognize browser-based privacy preference signals such as Global Privacy Control. We respond to such signals where and to the extent required by Applicable Law.

19. De-Identified and Aggregated Data

We may create, use, disclose, and retain de-identified, anonymized, or aggregated information that does not reasonably identify you, subject to Applicable Law. We may use such information for analytics, operational improvement, product development, benchmarking, commercial analysis, fraud prevention, and other lawful purposes.

20. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, services, technologies, legal obligations, or business operations. If we make material changes, we may notify you by posting the updated policy, updating the effective date, emailing you, or using other reasonable means, as required by law.

Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes acknowledgment of the updated Privacy Policy to the extent permitted by law.

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise privacy rights, please contact us at:

Digital Apes GmbH

Legal Enquiries: ceo@digitalapes.at

Support Enquiries: support@digitalapes.at