Privacy Policy
Last updated 4 November 2026
RIFT CRAWL is run by Ben Kramer ("we"). This page says what this website and the game collect, why, who handles it, how long it's kept and how to delete it.
In short: we need your email address to sign you in. We also record how the game is played, so that we can improve it. We don't sell your data or show ads.
Contact
For anything about your data, write to privacy@riftcrawl.com.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Your email address | To send sign-in codes and identify your account. We don't send it to our analytics service. | Until you delete your account |
| Sign-in codes, and the address they were sent to, stored only in scrambled form | To check the code you enter | A code works for 10 minutes. The scrambled record stays until it's used or replaced, or until you delete your account, if it's tied to one |
| A scrambled form of your address, with counts of mail sent to it | To limit how much mail can be sent to an address | Not currently deleted automatically, and not removed when you delete your account. It can't be turned back into your address, though our secret key could confirm that it matches an address we were given |
| A session cookie, and the browser and operating system of each device you sign in on | To keep you signed in, and to list your devices in the account panel | Until you sign out, or after 90 days without use |
| Your heroes, their progress and items, and your voice mode and mute list | To run the game | Until you delete them or your account |
| Your IP address | To stop abuse through rate limits and a robot check, and to work out your approximate location for analytics. Our analytics service discards the address after that | Not kept by the game. See Cloudflare's terms for what it keeps |
| Which rooms your account created or joined | In our server logs, to deal with abuse | For as long as Cloudflare keeps these logs, which is a limited period |
| Analytics: see below | To understand how the game is played and find what's broken | Up to 7 years, unless you delete your account |
This website
You don't need an account to read riftcrawl.com, and it sets no cookies. We count visits with PostHog and Cloudflare Web Analytics. PostHog receives the page you're on, the site you came from, any campaign name in the link, your approximate location (as close as your city), whether you're on a phone or a computer, which sections of the page you reached, and whether you clicked to play. A random ID ties that together for one browser tab, and is forgotten when you close it, so nothing links one visit to the next or to an account. PostHog discards your IP address after working out the location, and keeps the rest for up to 7 years. Cloudflare Web Analytics records page views and how quickly the page loaded.
Analytics in the game
We use PostHog to record what happens in the game:
- Visits: pages and screens viewed, the site you came from, your approximate location (as close as your city), your time zone and language, and your browser, device type, screen size and operating system.
- Signing in: whether each step worked. Never the address or the code.
- Playing: how long you play, and what you do. That includes hero class and level, zones visited, bosses beaten, deaths, skills and stats chosen, gear equipped, and totals such as kills and chat messages sent. It also includes random IDs for your heroes, voice mode, frame rate, connection quality and errors.
This is linked to a random account ID, and to a random ID in your browser's storage from before you sign in. It starts when the site loads. It's kept in your browser's local storage, or in a cookie if local storage isn't available. We don't record your screen, your chat messages, your voice, your hero's name or room codes.
What other players see
Other players in a room see your hero's name, class and level, and whatever you say in chat or voice. Public rooms are listed with their name for anyone signed in. The game passes chat and voice to the other players, and doesn't save or record them.
Who handles your data
- Cloudflare hosts this website, the game and its data, counts visits to this website, sends sign-in emails, provides the robot check (Turnstile), and carries voice audio if you turn voice on. See Cloudflare's privacy policy.
- PostHog stores our analytics for this website and the game, on servers in the US. See PostHog's privacy policy.
Your data may be processed outside your country, including in the US. We share it with nobody else, unless the law requires us to.
Our legal basis
If laws such as the GDPR apply to you, we rely on the contract between us to provide your account and the game, and on our legitimate interests to prevent abuse and to understand and improve this website and the game.
Deleting your data, and your rights
To delete your account, sign in, then choose Account, then Delete account. This permanently removes your account, address, sessions and heroes straight away. It also asks PostHog to delete your analytics. PostHog does this in the background, so it can take some time to finish. Nobody can bring a deleted account back.
Depending on where you live, you may also have the right to see your data, correct it, object to how we use it, or receive a copy. Write to us at the address above to ask. You can also complain to your local data protection authority.
Age
You must be at least 16 to play RIFT CRAWL. If you believe someone younger has an account, tell us and we'll delete it.
Changes
If this policy changes, we'll update it here and change the date at the top.