Privacy Policy

About this policy

This policy explains what Riftbound.org learns about you when you visit and what happens to that information.

Riftbound.org is a fan project. It is not run by Riot Games or UVS Games, and neither of them receives data from us.

What the site receives

You can browse the whole site without telling us who you are. An account is optional, and what it stores is described below.

Like every website, the site receives some technical data each time your browser asks for a page:

• your IP address,
• the date and time of the request,
• the page you asked for and the page that linked you to it,
• the type and version of your browser and operating system.

The server can keep this data in its log files. The site also stores a random session identifier in a cookie. While you are signed in, that identifier is tied to your account. Otherwise it is tied to nothing.

When you write to us

The contact form asks for your name, your email address, a subject and your message. The site sends these to our mailbox by email. It does not keep a copy in a database of its own.

If you write to [email protected] instead, we receive your email address and what you wrote.

The feedback bar above the footer of every page opens a form that asks what you want to tell us and, only if you would like an answer, your email address. You can add a screenshot of the page as it is shown in your browser. Your browser makes that screenshot itself, and it is only sent when the box for it is ticked. The site keeps feedback in a database of its own and mails a copy to our mailbox. With it, the site records the address of the page, the size of your browser window and the type of browser you use, so that we can find the cause of what you report.

We use these details to answer you and to deal with what you wrote about, and for nothing else. Messages and feedback are deleted once they are no longer needed for that.

When you make an account

An account is made on the sign-up page with a username, an email address and a password. The site stores the username and the address, the password in a hashed form that cannot be read back, the day the address was verified, and the dates the account was made and last changed. When you tick the box to stay signed in, it also stores a random token that matches the cookie in your browser.

The address is used for two mails only: the one that asks you to verify it and, when you ask for it, the one with the link to choose a new password. There is no newsletter. The username is shown on the site as the name of your account, and it will be shown with anything you share on the site once that is possible.

The sign-in page counts wrong passwords per account and per IP address, so that guessing a password gets slow after a few tries. That count is kept for a minute.

Your account stays until you have it removed. There is no button for that yet. Write to us and it is done by hand, together with everything stored under the account.

What the site does not do

• It does not use analytics or visitor statistics.
• It does not show advertising.
• It does not follow you across other websites or build a profile of you.
• It does not sell or trade data about visitors.

Why the data is used

The technical data is used to send you the pages you ask for, to keep the site secure and to find the cause of errors. Under the GDPR and the UK GDPR the legal basis is our legitimate interest in running a working and safe website, Article 6(1)(f). Messages and feedback are handled on the same basis, our interest being to answer the people who write to us and to fix what they report. The data of an account is handled to provide the account you asked for, Article 6(1)(b).

Others who receive data

Riot Games

Card images are stored on this site where possible. Other images, and the icons for domains, rarities and rules text, load straight from image servers run by Riot Games at rgpub.io. To fetch them your browser connects to those servers. Riot then sees your IP address and the type of browser you use, the same as when you visit the official Riftbound site. The privacy notice of Riot Games covers what happens to that data.

Cloudflare

To keep automated senders out, the contact form, the feedback form and the sign-up form run a check called Turnstile, a service of Cloudflare. It loads from Cloudflare when you open one of those pages or the feedback form, and not before. Cloudflare receives your IP address and technical details of your browser, and tells the site whether the check passed. It does not receive your message, your feedback or the details of your account. The privacy policy of Cloudflare covers that data.

Hosting and mail

The company that hosts the site handles the technical data on our behalf in order to deliver the pages. Messages from the contact form, copies of feedback and the mails about your account travel through the mail service the site uses.

Fonts

The fonts are served by the site itself. No font service is contacted.

Links

Websites we link to, such as the official Riftbound site and the Riot store, have privacy policies of their own.

How long data is kept

Session data expires after 2 hours without activity and is then removed. Log files are kept only for as long as they are needed to deal with faults and misuse. An account is kept until you have it removed.

Your rights

Depending on where you live, the law gives you rights over data about you. These can include the right to see that data, to have it corrected or deleted, to limit or object to its use, and to complain to the data protection authority of your country.

Without an account, the site does not know who its visitors are. To find technical data about you we usually need the IP address and the time of your visit. A message or feedback can be found by the email address that was sent with it, and an account by its username or email address.

Children

The site is meant for a general audience and does not knowingly collect personal data from children.

Changes

If the site starts to handle data differently, this page is updated first. The date at the top shows when it last changed.

Contact

Do you have a question about this policy, or do you want to use one of your rights? Use the contact form or write to [email protected].