Privacy Policy

RiftIndex is a fan-made directory of Riftbound TCG organized play, run as a personal hobby project from Greece. For any privacy question, write to riftindex@gmail.com.

Nothing directly. RiftIndexhas no accounts, no login, no contact forms, no newsletter, and no tracking cookies. We use Vercel Web Analytics for anonymous, aggregate page-view counts only (see "Analytics" below). We do not ask for, store, or sell any personal data about visitors.

The site is hosted on Vercel and reads event data from a Supabase database. When you load a page, both services briefly see the technical metadata any web request carries (your IP address, browser user-agent, requested URL) so they can deliver the response. We do not log, retain, or aggregate that metadata ourselves. Both providers act as data processors under their own privacy terms (Vercel, Supabase).

The Stores filter defaults to your country to save you a click. The country code is derived from a header Vercel attaches at the network edge based on your IP. The IP itself never reaches RiftIndex, never reaches a third-party geolocation service, and is never stored. If your country guesses wrong, change the dropdown and the choice sticks for that session.

We self-host our fonts and country-flag images so your browser does not make third-party requests on our behalf. Event and store data is fetched server-side from the official Riftbound locator API and from our own database; nothing client-side calls a third party.

RiftIndex uses Vercel Web Analytics, a cookieless, privacy-friendly analytics service from our hosting provider. It records aggregate page views and approximate geography (country / region level) so we can see which parts of the site are useful. It does not set tracking cookies, does not store IP addresses, does not build a cross-site profile of you, and does not sell data. We do not use Google Analytics or any consent-banner-tier tracker.

You have the right to access, correct, or delete any personal data we hold about you, and to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). Because we hold no personal data on visitors, most of these are no-ops in practice — but the address to ask is riftindex@gmail.com.

If anything changes about what data we touch, we will update this page and bump the "Last updated" date above. There is no mailing list, so the page itself is the record.