Privacy Policy

Last updated: October 3, 2026

ApeMerch.com ("we", "us", "our") is an independent, community-run archive of Bored Ape Yacht Club merchandise. This policy explains what information we collect, how we use it, and the third-party services that may set cookies on your device.

---

1. Information We Collect

a. Information you provide via X (Twitter)

When you sign in with X, we receive your public profile data (X user ID, username, display name, profile image) via X's OAuth flow. We use this to identify your account, populate your closet and wishlist, and verify your follow status with gate accounts. We do not receive your X password.

b. Information you submit on the site

Items you add to your closet or wishlist, collector notes you publish, and anything else you submit while signed in are stored in our database and associated with your account.

c. Server logs

Our web server logs standard request data (IP address, user agent, referrer, requested URL, timestamp) for security, debugging, and abuse prevention. Logs are retained for a limited period and are not sold or shared with third parties except as required by law.

2. Cookies and Similar Technologies

We use a small number of cookies:

• Session cookie (PHPSESSID or similar) – keeps you logged in during your visit.
• Remember-me cookie (apemerch_remember) – optional, lets you stay signed in across visits. Issued only if you choose to log in.

You can clear or block cookies in your browser settings; doing so may sign you out and disable some features.

3. Third-Party Services

• X (Twitter) – authentication and follow-gate verification. Subject to X's Privacy Policy.
• StockX – product data and sales comparables are referenced from StockX. Subject to StockX's Privacy Policy.
• Cloudflare – CDN, image resizing, and DDoS protection. Subject to Cloudflare's Privacy Policy.

4. How We Use Your Information

• To operate and maintain your account and closet.
• To verify follow-gate access where required.
• To detect and prevent fraud, abuse, and scraping.
• To improve the site based on aggregate usage patterns.

We do not sell or rent your personal data to third parties. We do not run display ads or behavioural ad networks.

5. Your Rights

You may request deletion of your account and associated data at any time by contacting us via the X account linked in the footer. If you are in a jurisdiction with applicable data protection laws (e.g. GDPR, CCPA), you may have additional rights to access, correct, or port your data.

6. Children

ApeMerch.com is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on the homepage or via a site banner.

8. Contact

Questions about this policy? Reach out to @KaijuTheApe on X.