Riftr is built to collect as little as possible. Without an account, your collection never leaves your browser. This policy explains what changes when you sign in.
1. Scope and who we are
This policy explains how Riftr (“Riftr”, “we”, “us”) handles personal information when you use riftr.xyz (the “Service”). It doesn’t cover the marketplaces and other sites Riftr links to; they have their own policies. For any privacy question, contact us at legal@riftr.xyz.
2. Information we collect
Riftr collects as little as it can. What we handle depends on whether you sign in:
- Without an account
- Your collection, watchlist, binders, value history and preferences are stored only in your browser’s local storage. They are not sent to us.
- Account details
- When you sign in, our sign-in provider Privy gives us a unique account ID. The email address or linked social account you sign in with is held by Privy and shown to you in your account menu.
- Username
- The username you choose for your account.
- Saved collection
- Signed in, your collection, watchlist, binders, value history and display preferences are saved to your account so they’re available on your other devices.
- Technical data
- Like any website, our hosting provider receives your IP address, browser type and the pages requested, and keeps short-lived server logs for security and troubleshooting.
- Camera
- The card scanner uses your camera only while it is open. Images are processed on your device to recognise cards and are never uploaded or stored by us.
We don’t use analytics, advertising or tracking tools, and we don’t collect payment details.
3. How we use information
- to sign you in and keep your account secure;
- to save your collection and settings and sync them between your devices;
- to show your username in your account;
- to run, protect and fix the Service, including preventing abuse;
- to reply when you contact us, and to meet legal obligations.
4. Legal bases for processing
Where data protection laws such as the GDPR apply, we rely on:
- Contract: providing the account and saved collection you asked for.
- Legitimate interests: keeping the Service secure and working, in ways you would reasonably expect.
- Legal obligation: where the law requires us to keep or disclose information.
6. What other people can see
Nothing you store on Riftr is public. Your collection and username are visible only to you when signed in.
8. Retention
- Account details, your username and saved collection are kept until you delete your account.
- Server logs are kept for a short period by our hosting provider, then deleted.
- Data stored in your browser stays there until you clear it, sign out, or clear your browser data.
9. Security
Connections to Riftr are encrypted, account requests are checked against a signed sign-in token, and access to our systems is restricted. No service can be perfectly secure, so keep your sign-in method safe and tell us at legal@riftr.xyz if you notice anything wrong.
10. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, and to complain to your local data protection authority.
- You can change your username in Settings, and export your collection as CSV at any time.
- To delete your account and everything saved to it, or to make any other request, email legal@riftr.xyz from the address you sign in with. We’ll reply within 30 days.
- We won’t treat you differently for using your rights.
11. California notice
In the last 12 months we have collected identifiers (account ID, username, IP address) and the collection data you chose to save, for the purposes described above. We do not sell or share personal information for cross-context behavioral advertising. California residents can use the rights above by emailing legal@riftr.xyz.
12. International transfers
Our service providers may process information in countries other than yours, including the United States. Where required, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.
13. Children
Accounts are not meant for children under 13, or under the age of digital consent where they live. If you believe a child has created an account, contact us and we’ll delete it.
14. Changes and contact
We’ll update this policy when our practices change; the date at the top shows the latest version, and we’ll give notice on the site for significant changes. Questions: legal@riftr.xyz.