Privacy Policy

RiftIndex is a fan-made directory of Riftbound TCG organized play, run as a personal hobby project from Greece. For any privacy question, write to riftindex@gmail.com.

Nothing directly. RiftIndexhas no accounts, no login, no contact forms, no newsletter, and no tracking cookies. We use Vercel Web Analytics for anonymous, aggregate page-view counts only (see "Analytics" below). We do not ask for, store, or sell any personal data about visitors. If you save stores to a shortlist, that list stays in your browser and never reaches us (see "Stores you save" below).

The site is hosted on Vercel and reads event data from a Supabase database. When you load a page, both services briefly see the technical metadata any web request carries (your IP address, browser user-agent, requested URL) so they can deliver the response. We do not log, retain, or aggregate that metadata ourselves. Both providers act as data processors under their own privacy terms (Vercel, Supabase).

Two pages default to your approximate region to save you a click: the Stores filter defaults to your country, and the "Stores Near You" page also pre-loads top stores in your country (and for US visitors, your state). The country and state codes come from headers Vercel attaches at the network edge based on your IP. The IP itself never reaches RiftIndex, never reaches a third-party geolocation service, and is never stored. If the guess is wrong, change the dropdown or share your precise location to override.

The dedicated /riftbound-stores-near-me page has an optional button that asks your browser for your coordinates through the standard navigator.geolocation API — the browser handles the permission prompt; RiftIndexonly receives coordinates if you grant permission. The coordinates are used only to center the map, drop a "you are here" marker, and sort the nearby-store list by distance. They live in your browser tab's memory only, are never sent to RiftIndex's servers, never stored, and never shared with any third party. Deny the prompt or close the tab and the location is gone.

Each store row on that page has a Get directionslink that opens Google Maps in a new tab. That click is a normal outbound link — Google Maps receives the store's destination coordinates in the URL, plus whatever standard request headers your browser sends them. If you have granted RiftIndexaccess to your precise location, your coordinates are also included in that URL as the route's origin so Google Maps routes from where you actually are instead of guessing. If you have not granted access, no coordinates of yours are added — Google Maps will use its own location guess (typically from your IP). RiftIndexdoes not proxy or log that click. Use the link, or don't.

If you tap the star to save a store, RiftIndexkeeps a small list of those stores in your browser's local storage so you can find them again without searching. This is functional storage you turned on by saving, not a tracking cookie. The list holds only public store details (name, address, event counts), never anything personal, never leaves your device, and is never sent to us or any third party. Clear it anytime by un-saving each store or clearing your browser's site data. No consent banner is required because this storage exists only to provide the save feature you explicitly asked for.

We self-host our fonts and country-flag images so your browser does not make third-party requests on our behalf when a page loads. Event and store data is fetched server-side from the official Riftbound locator API and from our own database; nothing on a normal page render calls a third party from your browser. The only exception is when you click an explicit outbound link we offer — store websites, Google Maps directions, social-media icons — which open in a new tab and are governed by that destination's own privacy policy. We do not log or proxy those clicks.

RiftIndex uses Vercel Web Analytics, a cookieless, privacy-friendly analytics service from our hosting provider. It records aggregate page views and approximate geography (country / region level) so we can see which parts of the site are useful. It does not set tracking cookies, does not store IP addresses, does not build a cross-site profile of you, and does not sell data. We do not use Google Analytics or any consent-banner-tier tracker.

You have the right to access, correct, or delete any personal data we hold about you, and to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). Because we hold no personal data on visitors, most of these are no-ops in practice — but the address to ask is riftindex@gmail.com.

If anything changes about what data we touch, we will update this page and bump the "Last updated" date above. There is no mailing list, so the page itself is the record.