Privacy Policy

Your account

You can use most of Rifted without an account. If you create one, we store your email address, display name, password (hashed, never in plain text), when you signed up, your time zone, your email-verification and two-step verification status, and when you last changed your password.

Sign in with Apple or Google

If you sign in with Apple or Google, we receive the name and email address you choose to share (with Apple this can be a private relay address) and an identifier for that account. We use them only to sign you in.

Sign-ins and app use

• Your IP address, platform (iOS or Android) and sign-in times, including past sign-ins.
• App sessions: when a session starts and ends, how long it lasts, and periodic heartbeats while the app is open, plus your approximate country, worked out from your IP address. Before you sign in, sessions use an anonymous identifier.

What you do in the app

• Your votes on items, your reminders and your bookmarks.
• Giveaways: your entries, daily claims and streak. If you win, the contact handle you give us so we can send your prize code.
• If you allow notifications, a push token so we can send them.

Security

A log of account actions such as signing in and out and changing your password or two-step verification, IP addresses linked to bans for abuse, and one-time codes for email verification and password resets, which are removed after use or expiry.

We don't collect your precise location.

Linking Epic is optional. You sign in on Epic's own website, so we never see your Epic password. The tokens that keep you linked, your Epic avatar and your account summary (such as your V-Bucks balance and gifts left today) are stored only on your device. The app talks to Epic directly to show your friends, buy items and send gifts; our servers don't receive or store your Epic account data. Unlinking Epic or deleting your Rifted account removes this data from your device. Epic's privacy policy covers your Epic account itself.

Rifted shows rewarded ads from Google AdMob only when you choose to watch one, for example for an extra giveaway entry. Where the law requires it we ask for your consent first, and on iOS we ask for permission to track through App Tracking Transparency. Depending on your choices, AdMob may use your device's advertising identifier to show and measure ads. When you finish a rewarded ad, we send your Rifted user ID to AdMob so the reward reaches your account.

We use Sentry to find and fix problems. When the app hits an error, Sentry receives a report with technical details about your device and the app and, if you're signed in, your email address and username so we can follow up. A report can include a short replay of the screen around the error.

To run and secure Rifted, operate your account (sign-in, password resets, notifications), run giveaways and deliver prizes, understand how the app is used, fix bugs, and meet legal obligations. We may email you about your account and, where allowed, about Rifted; you can opt out of non-essential emails. We don't sell your personal data.

These services handle data for us under their own privacy policies:

• Apple: Sign in with Apple
• Google: Google Sign-In and AdMob
• Epic Games: account linking, purchases and gifts
• Apple Push Notification service: push notifications
• Firebase Cloud Messaging by Google: push notifications
• Sentry: crash and error reports
• Expo: app updates
• DeepL: translating our own content, such as news text. None of your personal data is sent to DeepL.

We may also disclose information when the law requires it, when we believe in good faith that it's needed to protect rights, safety or to investigate fraud, or to service providers who work for us under these same rules.

We keep your data while your account exists. You can delete your account in the app at any time: open the side menu, go to Settings and tap Delete Account. Deletion is immediate and permanent. It removes your account, bookmarks, reminders, votes, sign-in history, sessions, giveaway entries and push registration, and revokes Sign in with Apple. You can also email [email protected] and we'll do it for you. Error reports already sent to Sentry expire on its retention schedule.

How account deletion works

Rifted isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, email [email protected] and we'll delete it.

We use physical, electronic and procedural safeguards to protect the information we process. No system is perfectly secure, so please use a strong, unique password.

We may update this policy. The new version will be posted on this page with a new date at the top.

Email [email protected] with any question about this policy or your data.