Privacy

We don't have accounts, we don't take payments, and we don't run analytics or advertising trackers on this site. There is no cookie banner because there is nothing to consent to: no marketing cookies, no profiling, no data sold to anyone. The only thing saved on your device is the list of tokens in your Token Bag.

When you add a token to your bag, we save it in your browser's local storage under the name rifttokens-bag so your selection is still there after a refresh or when you come back later. Each entry only holds which product, which pack size and how many — nothing about who you are.

This data never leaves your device: it is not sent to us, not readable from the outside, and not shared with any partner. To clear it, empty your bag in the shop, or delete it through your browser's site settings (under Privacy / Site data, look for this site and remove its stored data). Closing your browser tab does not clear it; deleting it does.

Both forms on this site are still part of a prototype. When you press send, the page thanks you, but no message and no email address is actually transmitted or stored anywhere — nothing is written down on our side. Please don't send anything sensitive through them yet.

Once real sign-up and contact handling goes live, this page will be updated first so the description matches what the site really does.

The typefaces on this site (Fredoka and Nunito) are loaded from Google's servers, so your browser opens a connection to Google when a page loads and Google can see your IP address as part of that request. We use this on the basis of our legitimate interest in presenting the site consistently, and it's the one third-party request this site makes.

The site is hosted for us, and like almost every website the hosting platform keeps short-lived technical logs of each visit — IP address, the page requested, the time of the request and the browser used. Those logs exist to keep the site online and to spot abuse, not to build profiles about visitors, and they are not combined with anything else we know.

Because the site is a prototype, we hold almost nothing about you — but your rights stand regardless. You can ask us what we know about you, ask us to correct or delete it, ask us to limit how it's used, object to processing based on legitimate interest, and ask for a copy of anything you gave us in a portable format. If you ever gave consent you can withdraw it again at any time.

If you think we handle your data wrongly, you can also lodge a complaint with the data protection authority in your own EU country. We'd rather you write to us first, though.

We don't sell, rent or trade personal data, and we don't pass it to advertisers. The only exception is if we're legally obliged to hand something over — and in that case we'd tell you unless we're not allowed to.

This site isn't aimed at children under 16 and we don't knowingly collect information from them. If you think a child has given us something they shouldn't have, tell us and we'll remove it.

If what we collect changes, we rewrite this page and move the "last updated" date above forward. Nothing here is designed to surprise you quietly.

Questions, a deletion request, or just a curious "why?" — email hello@rifttokens.nl or use the contact page. We answer as RiftTokens, the independent fan-made token project.