Privacy Policy

Account Information

When you create an account, we collect:

• Email address
• Display name (if provided)
• Profile picture (if provided via Google OAuth)
• Authentication credentials (securely managed by Firebase Authentication)

User-Generated Content

When you use our platform, we store:

• Deck lists and deck names you create
• Card collection data you manage
• Images you upload for AI card scanning
• User preferences and settings

Important: Only upload images of Riftbound cards. Do not upload images containing faces of identifiable people or any biometric data. We are not responsible for processing biometric data that you upload in violation of these terms.

Usage Information

We automatically collect certain information about your device and how you interact with our platform:

• IP address and general location
• Browser type and version
• Device information
• Pages visited and features used
• Date and time of access

What Are Cookies?

Cookies are small text files stored on your device that help websites function properly and provide information to website owners.

Cookies We Use

Riftbinder currently uses only strictly necessary cookies required for the platform to function. These cookies cannot be disabled without preventing the platform from working properly.

These cookies are stored for varying periods depending on their purpose: security cookies expire within a short timeframe, while authentication and preference cookies may persist for longer periods to maintain your session and remember your choices.

Analytics and Tracking

With your explicit consent, we use Firebase Analytics (provided by Google) to understand how users interact with Riftbinder and improve the platform.

You have full control: When you first visit Riftbinder, you'll see a cookie consent banner where you can choose to accept or reject analytics cookies. If you reject, no analytics data will be collected. Your choice is remembered for one year.

Managing Cookies

Firebase (Google Cloud Platform)

We use Firebase services for authentication, database, storage, and hosting. Firebase may collect and process data according to Google's Privacy Policy.

Stripe

We use Stripe for payment processing. Stripe collects and processes payment information according to their privacy policy. We do not store your full payment card details.

Resend (Email Service)

We use Resend for sending transactional emails (account notifications, subscription confirmations, password resets). Resend processes your email address according to their privacy policy. We do not use Resend for marketing emails without your explicit consent.

Google Cloud Vision AI and Gemini Models

We use Google Cloud Vision AI and Gemini models to power our AI Card Scanner feature. When you upload or capture images of Riftbound cards:

• What we extract: Card ID, card name, and confidence scores for identification purposes only
• Processing: Images are processed in real-time using Google's AI services and immediately deleted after analysis
• No storage: We do not store your uploaded images—they are discarded as soon as card data is extracted
• No training: Your images are not used for AI model training by Google or Riftbinder
• Security: All processing is subject to Google Cloud's enterprise-grade privacy and security standards

Legal Basis (GDPR Article 6): We process images based on your consent and as necessary to fulfill our contract to provide the AI scanning service you requested.

Riot Games API

We retrieve card data and assets from Riot Games' official API. We do not share your personal information with Riot Games unless you explicitly connect your Riot account (Riot Sign-On feature, planned for future releases).

Access and Portability

You have the right to access the personal data we hold about you and request a copy in a portable format.

Correction

You can update your account information at any time through your profile settings.

Deletion

You have the right to request deletion of your account and associated data. Note that we may retain certain information as required by law or for legitimate business purposes.

Objection and Restriction

You may object to certain types of processing or request that we restrict how we use your data.

Your California Privacy Rights

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes for collection, and third parties with whom we share information.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties. If this changes in the future, we will provide you with notice and the ability to opt-out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those permitted by law.

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (email address, username, IP address)
• Commercial information (subscription tier, payment history)
• Internet or network activity (pages visited, features used)
• User-generated content (decks, collections, uploaded images)

How to Exercise Your Rights

To exercise your California privacy rights, please contact us at info@riftbinder.com with the subject line "California Privacy Request". We will verify your identity before processing your request and respond within 45 days.