Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains how Rift Command ("we", "us", "our") collects and uses personal data when you play the game or use the website at rift-command.com (the "Service"). We take your privacy seriously and only process the data we need to run and improve the game.

1. Who is responsible

The controller responsible for your personal data is the Rift Command team. If you have any questions about this policy or how your data is handled, you can reach us at [email protected].

2. What data we collect

• Account data — if you create an account, the identifier and credentials you provide (such as an email address or sign-in identifier).
• Gameplay data — your in-game progress, choices, settings, and saved state, so the game can continue where you left off.
• Technical data — information your browser sends automatically, such as IP address, device and browser type, and timestamps, used to deliver the Service and keep it secure.
• Analytics data — anonymised or pseudonymised information about how the Service is used (see the Analytics section below).

We do not sell your personal data.

3. How we use your data

We use your data to:

• run the game and save your progress;
• keep the Service secure and prevent abuse and cheating;
• understand how the game is used so we can improve it;
• respond to your questions and support requests.

4. Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to provide the game and your account.
• Legitimate interests (Art. 6(1)(f)) — to keep the Service secure, prevent abuse, and improve the game, balanced against your rights.
• Consent (Art. 6(1)(a)) — where required, for example for non-essential analytics; you may withdraw consent at any time.

5. Analytics

We use PostHog to understand how players use the game so we can improve it. PostHog helps us see aggregated usage such as which screens are visited and which features are used. We configure analytics to minimise personal data, and where required we ask for your consent before non-essential analytics are enabled. You can learn more at posthog.com/privacy.

6. Cookies and local storage

The Service uses cookies and browser local storage for essential purposes such as keeping you signed in and remembering your preferences (for example, your light or dark theme). Non-essential cookies, such as those used for analytics, are only set where permitted. You can control cookies through your browser settings, though disabling essential storage may stop parts of the game from working.

7. Embedded videos (YouTube)

The Service links to and embeds gameplay videos hosted on YouTube, a service provided by Google. When you play an embedded video, Google may receive data including your IP address and set cookies. Where possible we use YouTube's privacy-enhanced mode to reduce tracking, but Google's own Privacy Policy applies to your use of YouTube.

8. Hosting and where your data is stored

• Cloudflare provides website hosting and content delivery through a global edge network.
• Convex provides backend and database services; its cloud infrastructure is located in the United States.
• Hetzner and Netcup provide server infrastructure located in Germany.

Because some providers process data in the United States, your data may be transferred outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

9. How long we keep your data

We keep personal data only for as long as we need it: account and gameplay data for as long as your account is active, and technical and analytics data for a limited period. When data is no longer needed, we delete or anonymise it. You can ask us to delete your account and associated data at any time.

10. Your rights

Where the GDPR applies, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that already took place.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Children

The Service is not directed at children under the age required to consent to data processing where they live. We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Please review this page periodically.

13. Contact

For any privacy questions or requests, contact us at [email protected].