Privacy Policy

Tiruk is an online oripa and trading-card experience. You can sign in, deposit funds, open digital envelopes, collect cards, and request physical delivery of cards you own.

Account information. If you sign in with email, we store your email address and a hashed password. If you sign in with Google or Facebook, we receive the account identifier those services provide, and we may also receive your name, profile photo, and email address when the provider shares them.

Wallet and payments. We create a deposit address for your account and keep records of USDT deposits, GCash or bank-transfer submissions, uploaded payment proofs, balances, and related review notes.

Collection and delivery. We store the cards you pull, your collection, shipping addresses you submit, and delivery or waybill details needed to fulfill physical shipments.

Usage and technical data. We collect information needed to operate the Service, such as session tokens, security logs, device or browser data, and approximate location derived from your IP address.

We use this information to create and secure your account, process deposits and withdrawals of in-app balance, open envelopes, fulfill deliveries, prevent fraud or abuse, provide customer support, and improve the Service.

We do not sell your personal information.

Service providers. We use hosting, storage, authentication, and infrastructure providers (including Google, Meta/Facebook, and our hosting and file-storage vendors) to operate the Service.

Payments and blockchain. USDT transfers on the Tron network are public by design. Wallet addresses and on-chain amounts can be viewed by anyone. Fiat payment proofs are reviewed by authorized Tiruk staff.

Legal requests. We may disclose information if required by law, to protect our rights, or to investigate fraud or security issues.

We use cookies and similar technologies to keep you signed in, remember your language preference, and protect the Service. You can block cookies in your browser, but some features may not work.

We keep account, collection, deposit, and delivery records for as long as needed to operate the Service, meet legal or accounting requirements, and resolve disputes. You may ask us to delete your account, subject to records we must retain.

You can update shipping details in your account, sign out at any time, and disconnect Google or Facebook access from those providers’ settings. You may request access to or deletion of your personal information by contacting us.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may process information in countries other than where you live. Those countries may have different data-protection laws. We take reasonable steps to protect information when it is transferred.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or your data, contact us through the Tiruk website or the support channel listed on the Service.