Privacy Policy

Effective October 7, 2026

This policy covers the COSMIC RIOT website at thecosmicriot.com (the "site"). The site is run by Shills, an individual creator in the United States who makes art as VEXA ("we", "us"). Questions? Email shillsshils@gmail.com.

The short version

• There are no accounts, forms, comments or newsletters here, so we don't ask for your name, email or wallet.
• Google Analytics and Google Ads only run if you say yes, and you can change your mind any time.
• We don't sell your personal information for money. If advertising cookies are ever on, you can opt out of "sharing" with one click, and we honor Global Privacy Control.
• The site is not made for children under 13, and we don't knowingly collect their information.

What we collect

Server logs

Our host, Netlify, automatically receives the technical details every website gets: your IP address, browser type, the page you asked for, the referring page and the time. Netlify uses this to deliver the site, keep it secure and fix problems. See Netlify's privacy policy ↗.

Analytics and advertising (only with your OK)

If you choose "Accept" in the privacy banner, we load Google Analytics, and Google Ads if we run ads. These set cookies and collect things like pages viewed, time on page, approximate location (from your IP address), device and browser, and how you arrived. We turn off Google signals and ad personalization in Analytics. Google processes this under its privacy policy ↗; see also how Google uses data from sites that use its services ↗. If you choose "Reject", or never choose, no Google script loads at all.

Saved on your device

We store your privacy choice in your browser's local storage so we don't ask again. Clearing your browser data removes it.

What we don't collect

Buying, opening and trading packs happens on vibe.market and Robinhood Chain, not here. We never see your wallet's keys or recovery phrase. Public blockchain activity is visible to anyone and is governed by those services, not this policy. The live pack numbers on our pages come from vibe.market through our own server, so viewing them doesn't send your information to vibe.market.

Links to other sites

Our buttons link to YouTube, vibe.market, OpenSea, Substack and others. We don't embed their players or trackers on this site. Once you click through, their own privacy policies apply.

Your privacy choices

Open your privacy choices to turn analytics or advertising cookies on or off at any time. This is also our "Do Not Sell or Share My Personal Information" link. Turning off advertising opts you out of any "sale" or "sharing" of personal information for targeted (cross-context behavioral) advertising, as those words are used in California and other state privacy laws.

Global Privacy Control: if your browser sends a GPC signal, we treat it as a request to opt out of sale and sharing, and advertising cookies stay off for that browser.

You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on ↗.

Your state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Kentucky and other states with privacy laws), you may have the right to know what personal information we hold about you, get a copy, correct it, delete it, and opt out of its sale, sharing or use for targeted advertising. We don't use personal information for profiling that has legal or similarly significant effects. We will not treat you differently for using any of these rights.

To make a request, email shillsshils@gmail.com with "Privacy request" in the subject. Because we don't keep accounts, we may hold little or nothing that can be tied to you; we will tell you what we find. We may ask for information to confirm the request is yours. An authorized agent may ask for you with your written permission. If we turn down a request, you can appeal by replying to our answer with "Appeal" in the subject.

Categories, for California residents. In the last 12 months, only if you accepted cookies: identifiers (IP address, cookie IDs), internet activity (pages viewed and interactions) and approximate geolocation, collected from your browser for analytics and, if ads are on, advertising measurement, and disclosed to Google as our service provider or, for advertising, as a third party. No sensitive personal information is collected. Google Analytics is set to keep this data for 2 months, its shortest setting.

Do Not Track. Browsers' old "Do Not Track" setting has no agreed meaning, so we rely on your choices above and on Global Privacy Control instead.

Children

COSMIC RIOT is made for everyone. Like most websites, this one is not directed to children under 13, and buying packs is for adults 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we will delete it.

Security and storage

The site is served over HTTPS. Information is processed in the United States. No method of sending or storing data is perfectly secure.

Changes

If we change this policy, we'll update the date at the top. If a change means collecting new kinds of information, we'll ask through the privacy banner first.