Privacy Policy

1. Who we are

RiftArmada is operated by Cindaris Studios (“we”, “us”). This policy explains what personal information we collect when you use the game and website, how we use it, and the choices you have. Questions: contact@riftarmada.com.

2. Information we collect

• Account: your email address and a securely hashed password.
• Age check: we ask for your date of birth when you register, use it to check the minimum age in section 8, and then do not keep it. What we store is that the check passed, when it passed, and which minimum age was applied. We never hold your birthday.
• Agreement record: which version of our Terms you accepted, and when.
• Gameplay: your callsign, faction, characters, progress, in-game currencies and items, and similar game state. Each character belongs to one world, and its currencies and progress belong to that world rather than to your account.
• Chat: the messages you send in game, with the callsign that sent them and the channel they were sent on.
• Clans: clan names, tags, descriptions and noticeboard posts, which are written by players and visible to others.
• Moderation: reports you file about other players and reports other players file about you, plus any mute or ban applied to your account, and the reason recorded for it.
• Technical: IP address, device and client information, and server and error logs, used to run and secure the service.
• Sign-in history: each time the game signs you in, the IP address it came from, your operating system and device model, and the game version, with when we first and last saw that combination. We also record when each play session starts and ends. Only our support and moderation staff can see it. We use it to secure accounts and to spot abuse, such as a banned player coming back on a new account or one person running several accounts to cheat. We never use it for advertising.
• Communications: messages you send us, such as support tickets or bug reports.
• Notifications: if you ask to be notified about the beta or launch, the email address you provide. We keep it until you unsubscribe or the campaign ends; it is managed through our email provider.

2a. Cookies and visit counts

To know how many people visit and what they look at, this website uses Cloudflare Web Analytics, run by Cloudflare, which already hosts the site. When a page loads, it records the page, the site that linked you here, your country, your browser and type of device, and how fast the page loaded. It does not use cookies or your browser’s storage to recognise you, it does not follow you to other sites, and it gives us totals only, never a record of an individual visitor.

Apart from that, the website runs no advertising tags and no other third-party trackers, and it stores nothing in your browser while you read it. That is why you are not being asked to accept anything.

The home page opens in the language your browser asks for. If you pick a language yourself with the language switcher, we remember that choice in one cookie that holds only the language code (for example tr) for a year, so the site keeps your pick over your browser’s. It is set only when you pick, it says nothing else about you, and deleting it simply lets your browser decide again. It is strictly necessary for the choice you made, so no consent is required.

The other exception is the help centre. When you sign in there to open or read a support ticket, we set two cookies that hold your sign-in session. They exist only so the page can tell it is you, they are readable by our server and not by scripts in the page, they expire after 7 days, and signing out removes them at once. They are strictly necessary for the feature you asked for, so no consent is required, and we use them for nothing else.

The game client and the launcher are separate from this site. They keep a sign-in token on your own device so you do not have to log in every time, which is part of running the service rather than tracking you.

3. How we use your information

• To provide, operate, and maintain the game and your account.
• To authenticate you and keep your account secure.
• To prevent cheating, fraud, and abuse, and to enforce our Terms.
• To provide support and send you service-related messages.
• To send the beta or launch updates you signed up for. You can unsubscribe at any time.
• To understand and improve gameplay, balance, and performance.

4. Legal bases

Where the GDPR or similar laws apply, we process your information to perform our contract with you (running the game), for our legitimate interests (security, anti-cheat, and improvement), to comply with legal obligations, and with your consent where required.

5. Sharing

We do not sell your personal information. We share it only with service providers who process it on our behalf (for example hosting, email delivery, and analytics; Cloudflare hosts this website and provides its visit counts) under appropriate agreements, or where required by law.

6. Retention

We keep your account and game state for as long as your account is active. Some data is deleted on a fixed schedule regardless of that, and these are the periods we actually run:

• Chat messages: 90 days, then deleted.
• Sign-in history and play sessions: 90 days after we last saw that address and device, or after the session started, then deleted. It is included in your data export and deleted at once if you delete your account.
• Password reset and email verification links: 30 days after they expire, kept that long so we can investigate a suspicious sign-in.
• Detailed gameplay events: 90 days. Aggregate figures that name nobody, such as daily totals for an economy, are kept for up to two years.
• Reports and moderation records: kept while they are needed to enforce our Terms. A ban that can be evaded by deleting the record is not a ban.

When you delete your account we remove or scramble the information that identifies you, rather than erasing every row. We keep a small amount that no longer names you: which version of the Terms was accepted, and the ledger entries behind in-game transactions, because those are records that an account existed and agreed to something, and we may need them to defend a claim.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

Two of those you can exercise yourself, without asking us. Delete your account from account settings in the game. Request a copy of your data from the same place (Settings, Account, Your data): we email you a link to a page on this website, and its Download my data button saves a JSON file. The link works once and expires after 48 hours, and it goes to your address rather than back to the game that asked, so a signed-in session somebody else is using cannot collect it.

The file holds your account (login name, email, language, sign-up, consent and age-check dates, and any linked sign-in), each of your pilots (world, callsign, faction, level, currencies, ships, items, skins, titles, clan and VIP), purchases made with real money, your wallet history, your chat messages, clan posts and support tickets, the reports you filed and those about you, any mute or ban, and your sign-in history and play sessions. It opens with why we keep your data, who we share it with, how long we keep it and your rights. It leaves out other players’ data, such as who reported you.

For anything else, or if a request needs a human, contact us at contact@riftarmada.com.

If you think we handle your data wrongly, you have the right to complain to a data protection authority. In Spain, where we operate, that is the Agencia Española de Protección de Datos (AEPD, www.aepd.es); you can also complain to the authority where you live. If you live in Türkiye, you can apply to the Personal Data Protection Board (KVKK, www.kvkk.gov.tr) after writing to us first.

8. Age

You must be at least 14 to register. We ask for your date of birth when you create an account and refuse registrations below that age. Fourteen is the age of digital consent in Spain, where we operate; if the minimum age where you live is higher, that higher age applies to you.

RiftArmada is not directed to children under that age and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will remove it.

9. Security

We protect your information with measures such as encryption in transit and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We may process and store information in countries other than your own. Where we do, we take steps to keep it protected consistent with this policy.

11. Changes

We may update this policy from time to time. We will post the new version here and, for material changes, provide a more prominent notice.

12. Contact

Questions about this policy or your information: contact@riftarmada.com.