Privacy Policy

Last updated: August 2026

RiftBot respects the privacy of all users. We collect only the minimum data necessary to provide the service. We do not sell, share, or monetize any personal data.

1. Discord Bot Data

When you interact with RiftBot on Discord, the bot temporarily receives:

  • Commands you send (e.g., /cards, /compare)
  • Card names and search filters you provide
  • Your Discord username and user ID (required by Discord)
  • The server ID where the command is executed

This data is processed in-memory only and is not stored or logged.

2. Rift Deck Builder (Web App)

If you sign in to the Rift Deck Builder via Google OAuth, we store:

  • Google email address — used solely to identify your account
  • Display name — shown on your public decks
  • Profile picture URL — displayed in the app interface

We do not access your Google contacts, calendar, files, or any other Google services. We do not read or store your Google password.

Your deck data (deck names, card lists, visibility settings) is stored in our database to provide the deck builder functionality.

3. What We Do NOT Collect

  • No message logs or chat history
  • No private messages
  • No browsing or tracking data
  • No payment or financial information
  • No cookies for advertising or analytics

4. Aggregated Technical Data

RiftBot tracks simple, non-personal counters:

  • Total number of commands used
  • Number of unique servers and users (count only, no IDs stored)
  • Bot uptime and health metrics

5. Data Retention & Deletion

Discord bot interaction data is not retained — it is processed in real-time and discarded. Deck Builder account data (email, decks) is retained while your account is active. You may request full deletion of your account data at any time by contacting us.

6. Rifty AI Assistant

Rifty is an optional AI assistant available on the Card Atlas and Collection pages. When you send Rifty a message, we send the following to our third-party AI inference provider (Hugging Face) to generate a reply:

  • The text of your message, and recent messages from the current Rifty conversation (for context)
  • A small amount of Riftbound context added on our server (card, keyword and price data relevant to your question)
  • On the Collection page only: summary numbers about your own collection (for example its total value and card counts). We do not send your card-by-card list or your private notes.

We do not send your name, email, Discord ID, IP address, or any account identifier to the AI provider. Your Rifty messages are not stored or logged on our servers, and we do not use them to train models. Rifty is rate-limited and read-only: it can never modify or delete your data. Rifty's answers are AI-generated and may be inaccurate, so please verify important information.

7. Third-Party Services

  • Discord API — used for bot functionality (governed by Discord's Privacy Policy)
  • Google OAuth — used for Deck Builder sign-in only (governed by Google's Privacy Policy)
  • Hugging Face — hosts the AI model that powers Rifty; your message and the context above are processed there to generate a reply (governed by Hugging Face's Privacy Policy)
  • CardMarket — card price data is fetched from public CardMarket sources; no user data is shared with CardMarket

8. Contact

For any privacy-related questions, concerns, or data deletion requests, contact:
johnniy5@protonmail.com

← Back to Home