RiftHub
RiftHub is a fan-made companion app for the Riftbound trading card game. This policy explains what data the app collects, why it is collected, who it is shared with, and the choices you have. It applies to the RiftHub iOS app and to rifthub.uk.
Data we collect
Account data
You sign in with Google or Apple. We receive a verified identifier for your account, and, depending on the provider and what you choose to share, your email address and display name. We do not receive or store your password. If you use Apple's private email relay, we only ever see the relay address.
Profile and game data
Everything you create in the app is stored on our servers so it is available across your devices: your display name and avatar, your card collection and wishlist, decks, trade listings and offers, tournament entries and results, feedback you send us, and your in-app settings.
Messages
Messages you exchange with other players are stored on our servers so they can be delivered and shown in your conversation history. They are not end-to-end encrypted, and they may be reviewed when a player reports abuse.
Location
If you enable location-based market features, we store the approximate area you choose so nearby listings can be shown to you and yours to others. Location is optional, you are asked for permission first, and you can turn it off at any time in the app or in iOS Settings.
When you are not signed in, the events list shows the events of the approximate city of your connection. Our traffic delivery provider gives us this city, and we do not store it.
Camera
Card scanning uses your camera and runs entirely on your device. Camera images are not uploaded or stored; only the cards you decide to add reach our servers.
Diagnostics and usage
We collect crash reports and basic usage events (which screens and features are used, on which app version and device model) to find bugs and understand which parts of the app matter. We also keep short-lived server logs, including IP addresses, to keep the service running and protect it from abuse.
How we use it
- To provide the app: signing you in, syncing your collection and decks, delivering messages, running trades and tournaments.
- To keep the service safe: rate limiting, blocking, moderation of reported content, and preventing abuse.
- To send notifications you asked for, such as messages and trade activity.
- To fix crashes and improve features based on aggregated usage.
We do not sell your data, and we do not use it for advertising or for building advertising profiles.
What other players can see
Your display name, avatar and public profile, including the parts of your collection, wishlist, decks and listings you choose to publish, are visible to other players. Privacy settings in the app let you control who can message you and whether your online status is shown. Your email address is never shown to other players.
Service providers
We share data only with the providers needed to run RiftHub:
- Google (Firebase): crash reporting, analytics, push notifications and remote configuration.
- Google and Apple: sign-in, which verifies your identity when you log in.
- Our hosting provider: the servers and database running the service, located in the European Union.
- Our traffic delivery provider: delivery and protection in front of those servers.
- Our error reporting provider: server-side errors, so we can fix them.
We may also disclose data where we are legally required to do so.
Retention
Account, profile and game data is kept while your account exists. When you delete your account, that data is removed from our systems, except where we must keep something for legal reasons or to prevent abuse; messages may remain visible to the other participant in a conversation. Diagnostic logs are kept for a short period and then deleted.
Your rights
You can access and change your profile data in the app, control who can reach you in privacy settings, and delete your account, which deletes your data, from the app or by writing to us: Deleting your account sets out both routes and lists what is removed and what is kept. If you are in the EEA or UK, you also have the right to request access, correction, deletion, restriction, portability, and to object to processing. We rely on the contract with you to provide the app, on your consent for optional features such as location and notifications, and on our legitimate interest in keeping the service safe and working.
Children
RiftHub is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Changes
If this policy changes, the new version is published on this page with an updated date. Significant changes will also be announced in the app.
Contact
Questions about privacy, or a request about your data? Email [email protected], or send feedback from inside the app.