Privacy Policy

This policy explains how Riftarc, operated by Ravenyx, handles personal data in its mobile applications and website at riftarc.gg. The same policy applies to web, iOS and Android. Public content pages can be used without an account and may display advertising. The mobile applications and signed-in web workspace remain ad-free. Signed-in features use essential authentication and security cookies; advertising cookies remain disabled unless valid consent or another applicable legal basis has been established.

• Account information: email address, display name, authentication provider and account ID. Secure, single-use confirmation or recovery credentials may be processed briefly when you follow an account email.
• Records you choose to save or share: collections, binders, decks, watches, trades, preferences, recent scanned-card identifiers and timestamps, public profile information and other community content. These features may synchronize their saved records with your Riftarc account. A card you deliberately add after scanning is a saved collection record; the scan image is not part of that record.
• Sale and trade records: the card printings, finishes and quantities in a transaction, proposed or actual prices and currency, agreement and completion dates, participant account identifiers and confirmations. We save these records to review requests, update inventory consistently and provide transaction history. Optional buyer notes and transaction notes are private to the owner who records them; they are not shown on public collections or activity.
• Completed sales and trades may appear in your public transaction activity, including card quantities and prices, according to your activity-privacy setting. You can make that activity private. Sharing a historical collection reference shows its card snapshot, not its private buyer notes, transaction notes or acquisition details.
• Notification and security information: device and browser details needed for notifications, compatibility, abuse prevention and diagnostics, including browser push details when you enable web notifications.
• Optional email updates: the email address you submit and your consent to receive waitlist or product messages. You can unsubscribe using the link in those messages.
• Legacy Patreon connection: user and member identifiers, campaign and tier identifiers, membership status and the time it was checked may remain from earlier clients for compatibility and ordinary account export and deletion. Riftarc does not request your Patreon email address for this connection or retain the Patreon OAuth access token. These records grant no badge, role, access, or other benefit.
• Voluntary Ko-fi support: the support link opens Ko-fi, where payments are handled under Ko-fi and its payment providers’ policies. Riftarc does not collect payment card details through this link or link your Ko-fi identity to your Riftarc account. Donations grant no badges, roles, private channels, priority access, or other benefits.
• Support messages and public content you choose to provide.

Regular scan images, camera frames and the temporary scanning workspace stay on your device or in your browser. The app uses camera access locally with your permission; Riftarc does not receive or retain those images or frames. A card you deliberately add to a collection is a separate saved card record that may synchronize with your account; the scan image is not part of that record.

Recent scanned-card identifiers and timestamps are account records that may synchronize with your Riftarc account. They do not contain camera frames or scan photos.

An administrator can separately approve a clearly identified model-training contribution in an operator workflow. That explicit contribution uploads the reviewed image and labels to private training storage and retains them for model development. It is not part of regular card scanning. Account deletion removes its account link where required; it does not erase an approved training contribution.

The mobile app stores its installed catalogue and local account records to support offline use. Browser storage keeps local preferences and account-separated synchronization records, including pending changes. Switching accounts does not expose another account’s records. Clearing app or browser data can remove local records and unsynchronized changes; local-only scan and personal-key AI data are not backed up by Riftarc.

Mobile guests can save collections, Wishlist entries, decks, binders, sealed-product inventory and scan batches on their device without signing in. These guest records are separate from account records and are not backed up by Riftarc. Signing in does not automatically upload or merge them. You can review and explicitly copy local cards, Wishlist entries, collection groups and decks into your account for synchronization; local originals remain on the device. Local binders and sealed-product quantities remain separate. Each record is copied once per account, and later edits to an already copied guest record remain local.

AI assistance is available in the mobile app with your own DeepSeek or OpenAI API key, including without a Riftarc account. The key stays in secure storage on your mobile device. Conversations stay locally on that device, in separate guest and account workspaces, and are not synchronized to Riftarc. Signing in does not copy guest keys or conversations to an account. Requests go directly from the mobile app to the provider you select. Riftarc does not receive or store your key, prompts, conversation history or provider responses from these AI requests. The website does not offer AI requests or personal-key storage.

Your selected AI provider receives the question and any card, deck, collection or conversation context included in the request. Its privacy policy, retention practices, account quotas and charges apply. Local storage in Riftarc does not mean that the provider processes AI requests locally. You can remove your key and delete local conversations through the AI controls. Do not submit sensitive personal information.

Riftarc does not supply free provider messages, deck generations or a managed AI service. Manual deck building and deterministic legality checks remain free. Using a personal key is optional; provider charges are separate from Riftarc tools.

If you choose to save a generated deck, it becomes an ordinary saved deck in the current guest or account workspace. Guest decks remain on the device; account decks may synchronize with your account. A saved deck does not include your API key or chat transcript.

AI records saved to your Riftarc account by previous versions remain subject to ordinary account export, retention and deletion controls. This version stores no new AI keys, conversations or provider responses on Riftarc. Retiring earlier services does not automatically delete historical account data.

Riftarc uses account data to authenticate users, synchronize saved records, provide community features, deliver requested notifications and email updates, prevent abuse, diagnose failures, answer support requests and meet legal obligations. We do not sell personal data.

Where the GDPR or similar law applies, processing is based on performance of the service contract, legitimate interests in security and product operation, consent for optional processing, or compliance with law. You may withdraw consent without affecting earlier lawful processing.

Riftarc may use Supabase for authentication and account storage, Cloudflare for application delivery, Ko-fi for voluntary donations and Patreon for retained legacy connection compatibility, Brevo and other email or push providers for requested messages, error monitoring and approved marketplace sources. Mobile personal-key AI communicates directly with your selected DeepSeek or OpenAI account. Providers receive the data needed for their role. Data may also be disclosed when required by law.

Public content pages may use Google AdSense and a Google-certified consent management platform. Google and its partners may process cookies or similar identifiers, IP address, device and browser information, and ad impressions or interactions to serve and limit ads, measure performance, prevent fraud, and personalize ads where you permit it. You can manage these choices through the consent controls on those pages.

Saved account records are retained while needed to provide the features you use, until you delete them or complete account deletion. Account deletion has a seven-day cancellation period. Limited records may remain afterward where needed for security, fraud prevention, recovery, legal obligations or legal claims, for no longer than necessary for that purpose. Transaction records follow the history and deletion controls below and applicable legal retention requirements; Riftarc does not offer tool subscriptions or AI credit purchases.

Deleting a collection or deck does not delete its completed transaction history. Marking a history entry as archived does not erase it. Transaction records remain available for account history and export while your account is active; account deletion and privacy-rights requests follow the controls described in this policy. A transaction also belongs to its other participant’s history, so deleting your source collection does not erase that participant’s record.

Email-update contact data is kept until you unsubscribe or request removal; a minimal suppression record may remain to honor that choice. Local scan workspaces are under your device or browser storage controls. Personal-key AI is under the mobile device’s storage controls. Approved operator training contributions are retained as described in section 3.

Riftarc uses encrypted transport, access controls, account isolation, restricted administrative access and request limits. No system can guarantee absolute security.

You may update settings, disable notifications, unsubscribe from optional emails, manage advertising consent, remove a personal AI key, delete conversations, clear local storage, and export or delete account data where provided. Withdrawing marketing consent does not affect essential account or security messages.

Where applicable, you may request access, correction, deletion, restriction, portability or objection and complain to your local data-protection authority. Start account deletion in Settings or use the instructions below. Send rights requests to privacy@riftarc.gg.

Riftarc is not directed to children below the digital-consent age in their country. Providers may process data outside your country; applicable data-transfer safeguards are required where the law calls for them. We will post material changes here and, when appropriate, notify users in the app.

Privacy questions and rights requests can be sent to privacy@riftarc.gg. Do not include passwords, API keys, payment details or other unnecessary sensitive information.