This Privacy Policy explains:
We are Hanul Industries LLC (“we” or “us”), and we operate REVARIXX. This Privacy Policy applies to REVARIXX, including revarixx.com and its subdomains, such as app.revarixx.com (we’ll refer to all of this as the “Service”).
This Privacy Policy, together with our Terms of Service, describes how we handle your personal data. Please read the Terms of Service as well, for general guidance about your use of the Service.
We collect and process different types of personal data depending on how you interact with our Service. Here’s an overview of the information we collect:
Information that you provide to us when using the Service:
Information that is automatically collected as a part of the service:
From our payment processor:
We do not use third-party advertising cookies.
When you interact with us (such as when you give feedback, report an issue, or ask for support), we collect certain contact information such as your email address and your messages that you choose to send to us.
When you create or update an account with us, we collect certain information to manage your account, including information shared with us through an oAuth provider, account creation date, account preferences, avatar and profile details, date of birth, display name/profile name, email address, login history, password (hashed), two-factor authentication data, and username.
We use this information to authenticate identity and secure access, create and manage your user account, enable account features (recovery, personalization, preferences), enable social features, enforce platform rules and security measures, track game progress, and track purchases.
As you use our Service, we automatically collect information about your interactions, including gameplay related information detailed above, as well as Service customization settings, actions taken within the Service, content interaction history, login times and frequency, service settings, and user preferences.
We use this information to maintain the service, manage user preferences and settings, provide core functionality, save and sync progress across devices, and track gameplay statistics, progress, and history.
We automatically collect certain technical and analytic information from you and your device when you use our Service, including your device specifications (device type, model, OS, browser), network data (IP address, connection info), performance metrics (crashes, errors, load times), and system information (performance, language, timezone).
We use this information to ensure Service compatibility and performance, monitor system stability and performance, prevent fraud and abuse, and troubleshoot technical issues.
We may collect information about your location when you use our Service, including your IP-based location, country, and time zone. We don’t collect precise location, such as GPS.
We use this information to decide whether you can make purchases (purchases are available only in the United States), block access from restricted locations, comply with regional requirements, customize for timezone, and detect suspicious activity.
When you make purchases or other transactions through our Service, we collect certain payment and transaction information, including your running monthly spending total, billing history, the country where your card was issued, purchase history, refund history, transaction amounts, and transaction dates. Please note that we do not handle or store complete payment card information - this is handled by our secure payment processors.
We use this information to enforce spending limits, comply with financial regulations, handle purchases, maintain purchase records, manage refunds and disputes, prevent fraudulent activity, and process transactions.
If you choose to use communication or content sharing features on the Service, we may collect any abuse or moderation reports submitted through the “Report” tool within the service, feedback submissions, support tickets, and user-generated content that you transmit to us or other users through the Service.
We use this information to investigate reported violations, maintain community standards, moderate user-generated content, and store permitted communication history.
We collect error and crash reports through our monitoring provider, Sentry, and our servers keep normal logs. These can include your IP address and technical details about your device and browser, and they can be linked to your account. We remove login tokens from error reports before they’re stored.
We use this information to find and fix problems and keep the Service secure, based on our legitimate interest in running a working, secure service. We don’t use it for advertising or to build a profile of you.
We limit this information to what these purposes need, secure it, and keep it only as long as described in “How long do we keep your data?”
Some information is public on the Service: your @handle, display name, avatar, title, collector profile, and Top 10 showcase. Serialized cards appear on the public Registry under your @handle unless you set them to show as “Anonymous.” Only signed-in users can see the Registry. We never show your email address or real name to other users.
We send service emails, such as email verification, password resets, and security alerts, through ZeptoMail. Stripe sends your purchase receipts. We send marketing email, such as newsletters and news about card drops, only to people who sign up for it, through MailerLite. Every marketing email has an unsubscribe link. Unsubscribing doesn’t stop service emails about your account.
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, receipts, tax, and fraud screening. Stripe stores your card only if you choose to save your payment details. |
| Supabase | Database management, authentication, storage of gameplay information |
| Cloudflare | Hosting and content delivery network, geographic access control, general security |
| Railway | Application and API hosting |
| Sentry | Error and performance monitoring, including crash and diagnostic telemetry which may include IP addresses and technical information. |
| ZeptoMail (Zoho) | Service emails, such as email verification, password resets, and security alerts |
| Zoho Mail | Support email |
| MailerLite | Waitlist and newsletter emails, if you sign up |
| Google Fonts | Delivers the fonts the Service uses. Your browser connects to Google’s servers, which receive your IP address. |
| Adobe Fonts | Delivers some of the fonts the Service uses. Your browser connects to Adobe’s servers, which receive your IP address. |
| Discord or other oAuth login providers | Optional login, if you choose to use it. |
| Cloudflare Turnstile | Bot/abuse prevention during the signup process |
We keep personal data only as long as we need it for the purposes in this Privacy Policy, or longer where the law requires. Here’s how long we keep each category:
You can delete your account yourself in the Service. To confirm, you’ll enter your password or your exact @handle, plus your two-factor code if you’ve turned that on.
Please note that we may retain some data, if necessary to:
Our Service is not directed to children under 18, and we do not knowingly permit children under 18 to use it or knowingly collect their personal data. We collect your date of birth at sign-up to confirm you’re 18 or older. If we learn we have collected personal data from anyone under 18, we delete it and close the account. If you believe a child has provided personal data, contact us at [email protected].
We don’t set our own cookies. We use your browser’s local storage, and Stripe and Cloudflare may set cookies for security and fraud prevention. To find out more, see our Cookie Policy, which is posted on the Service.
We believe in giving users control over their personal data. This section outlines your rights (some of which may be based on where you reside) and how to exercise them.
Regardless of your location, you have the right to:
If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.
Your rights depend on where you live, and we honor them where your state’s law provides them and applies to us. Not every right exists in every state (for example, Iowa and Utah provide neither a correction right nor a profiling opt-out).
We do not sell or share your personal data as those terms are defined under US state privacy laws, and we do not process it for cross-context behavioral advertising.
California residents also have the right to know the specific pieces of personal data we hold, the right to opt out of the sale or sharing described above, and rights under California’s “Shine the Light” law. Because we use any sensitive personal information only for purposes permitted by the CCPA, the “right to limit” the use of sensitive personal information is not triggered.
Our headquarters is in the United States.
No matter where you live, by using the Service your personal data may be processed in the United States.
If you would like more information, please contact us (see “How to contact us” below).
We have taken steps and put security measures in place to prevent the accidental loss or misuse of personal data.
For example, we limit access to those who have a genuine business need. Those processing your information will do so only in an authorized manner.
We use other security measures, as well:
Lastly, we have procedures in place to deal with any suspected data security breach. We’ll notify you and any applicable regulator of a suspected data security breach when legally required.
We hope that we can resolve any questions or concerns you raise about our use of your personal data.
Please contact us at [email protected] to let us know if you have questions or concerns. We will do our best to resolve the issue.
For EU residents, the GDPR also gives you right to lodge a complaint with a supervisory authority. You may do this in the EEA state where you live, work, or where any alleged infringement occurred.
We last updated this Privacy Policy on October 13, 2026.
We may make further updates from time to time, which will be reflected in the latest version posted on the Service. For material changes, if we have your email address on file we will inform you via email; otherwise, we will post a message on the Service about the change. For material changes to processing that relies on your consent, we will obtain fresh consent where required; we do not treat continued use as agreement to materially new processing.
More than one document may apply to your use of the Service: our Terms of Service, our Cookie Policy, and this Privacy Policy. Our Terms of Service don’t displace the statutory privacy rights and disclosures in this policy.
Please contact us if you have any questions about this Privacy Policy or your personal data.
You can do so by sending us an email at [email protected]. You can also write to us at Hanul Industries LLC, 1401 21st Street, Suite R, Sacramento, CA 95811.