Privacy Policy

What we collect

• Account identity— when you sign in with Discord (web or App API), we store your Discord user id, display name, and avatar URL from Discord OAuth. Sign in with Apple, when enabled, stores Apple's opaque subject identifier and any name you choose to share on first authorization. We do not require an email address for core Ask/Search use.
• Questions and community content — questions you Ask, AI-generated answers, citations, votes, comments, flags/reports, and related moderation records.
• Usage and security logs — timestamps, approximate request metadata, and error diagnostics needed to operate the service and investigate abuse. We do not intentionally log access tokens or session secrets.
• Billing (optional) — if you subscribe, Stripe processes payment details. RiftJudge stores subscription status and Stripe customer/subscription identifiers, not full card numbers.

Public posting

Accepted Ask questions and their answers are published on RiftJudge so other players can search them. Your display name (and avatar, when shown) may appear with questions, comments, votes, and leaderboard stats. Do not include personal information you would not want public in a question or comment.

AI processing

To retrieve rules context and generate answers, RiftJudge sends question text and related retrieval context to third-party AI providers (embeddings and language models). Providers may process that content to return an answer. We do not sell your questions. We configure providers under standard commercial API terms; we do not opt in to using your Ask content to train provider foundation models when a disable/opt-out control is available.

A more detailed subprocessor inventory (providers, regions, retention) will be kept aligned with our App Store privacy labels. Contact Support if you need current provider names for a specific request.

How we use data

When automated moderation is enabled, reported text and relevant public discussion context may be sent to OpenAI for safety checks and the configured AI provider for a context check. Reporter identities and account credentials are not included. Clear violations can be hidden automatically; uncertain reports leave the content visible. Moderation records identify the decision and policy without keeping another copy of the submitted text. Contact Support to appeal a removal.

• Authenticate you and maintain sessions
• Generate, store, and display rules answers
• Run community verification, reputation, and moderation
• Enforce quotas, bans, and abuse prevention
• Provide optional paid features via Stripe
• Respond to support and App Review requests

Sharing

We share data with processors that help run the product: Discord (sign-in), AI API vendors (Ask/search embeddings and generation), Stripe (billing), and infrastructure/logging providers. We do not sell personal information. We may disclose information if required by law or to protect users and the service.

Sponsors and referrals

The website currently shows no ads or sponsor slots. We do not sell personal data for advertising.

Analytics

The website uses Umami, a cookieless analytics tool that we host ourselves (analytics.riftjudge.com). It counts page views and sponsor or referral impressions and clicks so we can see what gets used. It does not set cookies, does not build cross-site profiles, and the data is not shared with third parties. The website uses no advertising networks or advertising cookies.

Retention

Public questions and community contributions remain available while the service operates, unless removed for moderation or after account deletion processing below. Deleted submitted text is erased from the active database by default. A specific legal obligation can authorize a private copy of a specific record with a documented expiry; these copies are never published. Expired copies are removed by the maintenance worker. Database backups expire after seven days, with cleanup at the next maintenance pass. Restores reapply deletion records before serving data. Provider processing and billing records follow the providers' terms and applicable legal requirements.

Account deletion

You can delete your account at app.riftjudge.com/account/delete (sign-in required), or from Account in the iOS app. Deletion completes when the service confirms the request. If confirmation is interrupted, the app can retry the original deletion receipt within 24 hours. When it completes:

• Your account credentials and sessions are revoked (web cookie and App API access/refresh tokens). Apple authorization revocation is queued durably and retried until Apple confirms it; the required credential is erased after confirmation.
• Your questions, comments, proposals, and chats are removed. Shared rulings remain with your attribution removed. Private copies of removed personal text require the specific, expiring legal exception described above. Linkable sign-in identity and private conversation history are removed from the account.
• A body-free deletion journal contains opaque account and record IDs for eight days so seven-day backups cannot restore deleted content. Recovery receipt hashes expire after 24 hours. An incomplete deletion intent stays restricted until recovery completes. Account tombstones prevent an old identity from being reused. Restricted billing and Apple-revocation records are retained only for their remaining purpose.

Exceptional cases that cannot use self-serve deletion: contact RiftJudge support via Support.

Children

RiftJudge is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Contact

Privacy questions, incidents, and deletion follow-ups: see Support (RiftJudge support).