Privacy Policy.
What we collect on oripaos.com and when you open a store, and what we do with it. Last updated November 11, 2026.
1. Who we are and what this covers
OripaOS is run by Moonhop Limited, a company incorporated in Hong Kong (“we”, “us”). This policy covers oripaos.com, the forms on it, the setup fee checkout and the setup service we run for shop owners.
It doesn’t cover the stores built on OripaOS. Each store is run by an independent shop owner, who decides what it collects from players and publishes its own privacy policy. If you’re a player, contact the store you bought from.
2. What we collect
When you fill in a form on oripaos.com
- Apply for a store: your email, what describes you (for example, card shop) and your card sales range last month.
- Free guide: your email.
- Waitlist: your email and your country.
Each form is sent to our inbox as an email. If our form service is down, the page opens your own email app instead, and nothing reaches us until you send it.
To stop the same address or network from asking for the guide over and over, we keep a one-way hash of your email and IP address for 24 hours. The hash can’t be turned back into the address.
When you pay a setup fee
Your email, the store ID you choose and, if you enter it, your business name. Card details go straight to our payment processor on its checkout page; we never see your full card number. Our payment processor saves your card so we can charge monthly fees you owe.
While your store is set up and running
- Your store ID, business name, email, store web address and domain, and the progress of each setup step.
- The IDs of your customer record with our payment processor and of your connected payment account, and a record of the fees we take on your sales.
- The access we need to your hosting account, stored encrypted. The email sending key you paste, stored encrypted and deleted when email setup is done or after 7 days.
- Payment events from your payment account, which we pass on to your store. These can include a player’s name, email and the amount paid.
When you visit oripaos.com
Our host keeps standard server logs, such as IP address, browser and the page requested. Pages load their fonts from Google Fonts, so your browser sends your IP address to Google. We don’t use cookies, analytics or advertising trackers on oripaos.com.
3. How we use it
- To reply to you, send the guide you asked for and tell you when stores open.
- To take your setup fee, set up your store, deploy updates and send you setup and account emails.
- To work out and collect our monthly fee.
- To pass your store’s payment events on to your store so its orders update.
- To stop abuse, keep the service secure and meet our legal, tax and accounting duties.
We don’t sell personal information, and we don’t share it for advertising. We don’t add you to a marketing list: the guide email is sent once.
5. How long we keep it
- Form emails: up to 2 years after we last hear from you, then deleted.
- Email and IP hashes: 24 hours.
- Email sending key: until email setup is done, and no more than 7 days.
- Payment events passed to your store: 30 days after they’re delivered.
- Account, fee and payment records: 7 years after your store closes, for accounting and tax. Other store records are deleted within 90 days of closing.
6. Your choices
Email cs@oripaos.com to ask what we hold about you, to correct it or to delete it. We’ll reply within 30 days. We may need to confirm it’s you, and we keep what the law requires us to keep.
Depending on where you live, including California and the European Union, you may have further rights, such as to object to how we use your information or to complain to your local data protection authority. We treat every request the same way, wherever you live.
7. More details
Where it’s stored. We’re based in Hong Kong, and our providers store data in the United States and other countries. By using OripaOS, your information is transferred there.
Security. Our services use HTTPS, keys and access tokens are stored encrypted, and staff access is limited to what the work needs. No system is perfectly secure; if a breach affects you, we’ll tell you.
Age. oripaos.com and OripaOS are for business owners aged 18 or older. We don’t knowingly collect information from children.
Changes. We’ll change the date at the top of this page when we update it, and email store owners about changes that affect them.
8. Contact
Moonhop Limited, Hong Kong. Email cs@oripaos.com. See also our Terms of Service.