TRANSPARENCY AND CONTROL
Privacy at RIFTWAY
Last updated: August 27, 2026. This page explains what stays on your device, what reaches the cloud, and how deletion works.
Data kept on your device
Single-player careers, saves, preferences and exported files stay in your browser or in the file you choose to save. Offline play does not require an account. Clearing site data removes this local information, so export a save first if you wish to keep it.
Online account and universes
Online mode uses Supabase Auth. We may store your user ID, email and an optional name or profile image supplied by your provider. RIFTWAY never receives your Google password. Room membership, manager/team identity and shared game state are stored to run online universes.
Anonymous beta metrics
A random device code in the form d_xxxxxx records only first/last activity dates, active days, careers started, seasons completed and build version. It contains no name, email, team, save or typed text. Records inactive for 180 days are deleted.
Providers and purpose
Supabase provides authentication and online storage. Cloudflare Web Analytics measures site performance and audience; Cloudflare states that this product does not collect or use visitors' personal data. Google is involved only if you choose Google sign-in. Data is used to deliver and secure online rooms, troubleshoot failures and evaluate the beta with minimal metrics.
Retention, deletion and your rights
Account data remains until you request deletion. Universes are removed when no members remain. Use Request deletion in the online lobby; requests are processed within 30 days. You may also request access, correction or deletion at [email protected]. Account deletion does not erase browser saves under your control.
Security
RIFTWAY uses HTTPS, authentication and member-based database access rules. No system is infallible; relevant incidents will be handled and communicated as applicable.