Privacy

Last updated 26 July 2026. Short, because there is not much to say.

RIFTFALL has no accounts, no cookies, no third-party trackers and no ad networks. You can play a full match without telling us anything. This page describes the three things we do store, and how to get rid of them.

1. Playing the game

The first time you open the game your browser generates a random id and keeps it in localStorage. It is not derived from anything about you — it is 16 random bytes — and it exists so the server can recognise the same browser next time and give you back your level and your unlocks.

Stored on your device	A random player id, your callsign, your equipped cosmetics, your sound preference.
Stored on our server	That same random id, the callsign you typed, and your progression: XP, level, rounds, wins, knockouts, slams, best streak, and which days you played (so we can tell whether people come back).
Not stored	No password, no email, no IP address against your progression, no chat — the game has none.
How to erase it	Clear site data for this domain. The id is gone and so is the link to that record; you become a new player.

Because the id lives in your browser rather than behind a login, it is not an account and we make no claim that it is secure. It gates cosmetic progression and nothing else.

2. Measuring the website

We count visits with our own code on our own server. There is no Google Analytics, no Facebook pixel, no session recorder and nothing that follows you to other sites — which is also why you are not looking at a cookie banner.

What each event records	The event name (a page view, a click on a play button, how far down the page you scrolled, whether you reached the game), a random per-browser id, a random per-session id, a timestamp, a coarse device class (`mobile`/`desktop`), the address that referred you, and the campaign tag in the link you followed.
Your IP address	Used momentarily to rate-limit abuse, and not written to the analytics log.
Retention	Aggregates are computed over a rolling 14 days. Raw event logs are kept while they are useful and are not shared with anyone.
How to opt out	Any tracker blocker stops the beacon, and the game works identically without it. Sending Do Not Track is honoured as an opt-out.

3. The founders list

If you type your email into the founders form, we store the address so we can tell you when the game launches properly. That is the only reason it exists.

What we store	The address, when you signed up, which page and campaign sent you, your random browser id, and the IP the signup came from (for abuse only).
What we will send	Launch news, roughly never more than monthly. No sold lists, no partner mail, no third-party marketing — ever.
Unsubscribing	One click, from a link in every mail, with no login and no form. It works immediately and permanently, and every export excludes anyone who has opted out.
Getting it deleted	Unsubscribe suppresses you. If you want the row gone entirely, ask — see below — and we will remove it.

We keep the signup log append-only, because it is the record of who agreed to be emailed and when. Suppression is stored separately rather than by rewriting that history — so an opt-out is honoured everywhere while the evidence of consent stays intact.

4. Playing us somewhere else

If you found RIFTFALL embedded in another site — a games portal, for instance — then that site is running its own analytics and its own ads, which we neither control nor see. Browsers also isolate storage inside an embedded frame, so your progression there is separate from your progression here, and on some browsers it will not persist at all. Play on this domain if you want your level to stick.

5. Where it lives

On one server in AWS us-east-1, in the United States, in plain files that only we can read. Backups are encrypted, private, and expire after 90 days. If you are in the EU or UK, this means your data is transferred to the US; the lawful basis for the email list is your consent, and for the anonymous measurement it is our legitimate interest in knowing whether a free game is working.

6. Children

RIFTFALL is not directed at children under 13, and we deliberately collect no profile information from anyone. If you believe a child has given us an email address, tell us and we will delete it.

7. Asking us anything

Access, correction, deletion, or a question about any of the above: Press contact goes live with the domain — until then, reach out via the site.. A human answers, and deletion is a file edit rather than a process.

If this page ever changes in a way that matters, the date at the top changes with it.