Privacy Policy

RiftMeta is an independent community tournament tracker for the Riftbound TCG. We are not affiliated with Riot Games or UVS Games. This Privacy Policy explains what information we collect when you use riftmeta.gg, how we use it, and your rights regarding your data.

1. Information We Collect

Account information: When you create an account, we collect your name and email address. If you sign in with Discord, we receive your Discord username, avatar, and email from Discord's OAuth API.

Tournament data: We aggregate publicly available tournament data (standings, match results, decklists) from the UVS Games API. This data includes player names and tournament performance as published by event organizers.

Usage data: We use Vercel Analytics and Vercel Speed Insights to collect anonymous usage metrics such as page views, load times, and browser type. These tools do not use cookies and do not track individual users across sites.

Session data: When you sign in, we store a session cookie in your browser to keep you authenticated. This cookie is essential for the Service to function and cannot be disabled while signed in.

2. How We Use Your Information

• Account management: To create and maintain your account, authenticate your sessions, and communicate with you about the Service
• Service delivery: To display tournament statistics, standings, matchups, and card analytics
• Service improvement: To understand how the Service is used and identify performance issues (via anonymous analytics)
• Security: To detect and prevent abuse, fraud, and unauthorized access

3. Third-Party Services

We share limited data with the following third-party services:

• Discord — OAuth authentication. Discord receives confirmation that you authorized the connection. See Discord's Privacy Policy.
• Vercel — Hosting, analytics, and speed insights. Vercel processes anonymous usage data. See Vercel's Privacy Policy.
• Neon — Database hosting. Your account data is stored in a Neon PostgreSQL database. See Neon's Privacy Policy.
• Resend — Transactional email delivery (password resets, email verification). See Resend's Privacy Policy.
• Polar — Subscription billing and payment processing for paid tiers. See Polar's Privacy Policy.

We do not sell your personal information to third parties.

4. Cookies

We use a single essential session cookie for authentication. We do not use advertising cookies or third-party tracking cookies. Vercel Analytics is cookie-free.

5. Data Retention

Account data is retained as long as your account is active. Session data expires automatically. Anonymous analytics data is retained by Vercel per their data retention policies. If you delete your account, your personal data will be removed within 30 days.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, contact us at support@riftmeta.gg. We will respond within 30 days.

For European users (GDPR): If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation, including:

• The right to access the personal data we hold about you
• The right to rectification of inaccurate personal data
• The right to erasure (the "right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to lodge a complaint with a supervisory authority

We process your personal data based on your consent, our legitimate interests in operating the Service, or to fulfill our contract with you.

For California residents (CCPA/CPRA): The California Consumer Privacy Act provides specific rights to California residents, including:

• The right to know what personal information we collect, use, and disclose
• The right to delete personal information we have collected
• The right to opt-out of the sale of personal information (we do not sell your data)
• The right to correct inaccurate personal information
• The right to non-discrimination for exercising your privacy rights

7. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. or other countries where our service providers operate. We use service providers that maintain appropriate safeguards consistent with applicable data-protection laws.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure session management. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

The Service is not directed at children under 13. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us at support@riftmeta.gg and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions about this Privacy Policy? Contact us at support@riftmeta.gg.

Disclaimer.RiftMeta is an independent fan project, created under Riot Games' "Legal Jibber Jabber" policy using assets owned by Riot Games. Not affiliated with, endorsed by, or sponsored by Riot Games, Inc. or UVS Games. Riftbound and all related trademarks and copyrights are the property of their respective owners.