Privacy Policy for Rift Mana
At RiftMana, accessible from RiftMana.com and the RiftMana mobile app, one of our main priorities is the privacy of our users. This Privacy Policy document contains types of information that is collected and recorded by Rift Mana and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
This Privacy Policy applies to our website and mobile application, and is valid for all users with regard to the information that they share and/or collect in Rift Mana.
Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.
Information We Collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.
How We Use Your Information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
Log Files
Rift Mana follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as part of hosting services’ analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
Cookies and Web Beacons
Like any other website, Rift Mana uses “cookies.” These cookies are used to store information including visitors’ preferences and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.
Google DoubleClick DART Cookie
Google is one of a third-party vendor on our site. It also uses cookies, known as DART cookies, to serve ads to our site visitors based upon their visit to www.riftmana.com and other sites on the internet. However, visitors may choose to decline the use of DART cookies by visiting the Google ad and content network Privacy Policy at the following URL:
https://policies.google.com/technologies/ads
Advertising Partners Privacy Policies
You may consult this list to find the Privacy Policy for each of the advertising partners of Rift Mana.
Third-party ad servers or ad networks may use technologies like cookies, JavaScript, or Web Beacons in their respective advertisements and links that appear on Rift Mana, which are sent directly to users’ browsers. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites you visit.
Note that Rift Mana has no access to or control over these cookies that are used by third-party advertisers.
Third Party Privacy Policies
Rift Mana’s Privacy Policy does not apply to other advertisers or websites. We advise you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
You can choose to disable cookies through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, California consumers have the right to:
- Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
- Request that a business delete any personal data about the consumer that a business has collected.
- Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Data Protection Rights
We would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
- The right to access – You have the right to request copies of your personal data.
- The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Rift Mana does not knowingly collect any Personally Identifiable Information from children under the age of 13. If you believe your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Image Disclaimer
All images featured on this website are not owned by Rift Mana. They are sourced from various platforms and belong to their respective owners. We do not claim ownership of these images unless explicitly stated. The images are used for informational and entertainment purposes only. If you are the owner of an image featured on this website and wish for it to be removed, please contact us, and we will promptly comply with your request.
Advertising.
This Site is affiliated with CMI Marketing, Inc., d/b/a Raptive (“Raptive”) for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive’s data usage, click here: https://raptive.com/creator-advertising-privacy-statement/
Mobile Application
The Riftmana mobile app is available as a companion to our website. This section covers data practices specific to the mobile app.
Account and Authentication
When you sign in to the Riftmana app using Google or Discord, we receive your email address, display name, and profile picture from the provider you choose. This information is used to create or link your Riftmana account. We do not receive or store your Google or Discord password.
Data We Store
When you use the app with a registered account, we store the following on our servers:
- Your account information (username, email, display name, avatar)
- Your card collection data
- Your deck lists and related content
- Your app usage preferences (such as price market selection)
Solid foundation — covers most of what Google wants. But it’s missing the specific thing that triggered your AAB warning: permission disclosures. The camera warning specifically needs the policy to say what the camera is used for.
What’s missing for Play Store
| Gap | Why it matters |
|---|---|
| Camera permission not mentioned | This is the exact thing the AAB warning flagged |
| Biometric/fingerprint not mentioned | Your app uses it for deck delete confirmation |
| Photo/media permissions not mentioned | READ_MEDIA_IMAGES etc. in your manifest need justification |
| Advertising section is website-only | Raptive/DART cookies don’t apply to the mobile app — should clarify |
| “We don’t sell data” not explicit for mobile | Google Play data safety form wants this stated clearly |
Paste this block into your privacy policy page
Add it under the existing “Mobile Application” heading, right before the “Contact Us” section. Replace/rename existing subsections as needed.
Permissions the Mobile App Requests
The Riftmana mobile app requests the following device permissions. Each is used only for the purpose described below, and no data collected through these permissions is sent to third-party advertisers.
Camera — Used on-device only when you open the card scanner to add cards to your collection. The camera feed is analysed locally on your device to identify the card. No photos, video, or raw camera frames are uploaded to our servers or shared with any third party. The only thing that leaves your device is the decoded card identifier (for example, “OGN-042”) when you choose to save a scanned card to your collection.
Photo and media access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO, READ_MEDIA_VISUAL_USER_SELECTED) — Requested only if you choose to upload media yourself (for example, a profile avatar). If you do not use these features, no media is accessed.
Biometric authentication (USE_BIOMETRIC, USE_FINGERPRINT) — Used locally to confirm destructive actions such as deleting a deck. Your biometric data never leaves your device and is handled entirely by the Android operating system. Riftmana does not see or store your fingerprint or face data.
Internet — Required to communicate with our servers for login, fetching card data, syncing collections, and saving decks. All network traffic is encrypted over HTTPS.
How Mobile App Data Is Shared
Data collected through the mobile app is used only to operate the Riftmana service. We do not sell your personal data, and we do not share collection or deck data with advertisers or data brokers. The Raptive/DART cookie advertising described above applies only to our website (riftmana.com) and not to the mobile app. The mobile app does not contain advertising.
Data Retention
We retain your account data and app content (collections, decks, wishlists, tradelists) for as long as your account is active. Upon account deletion (see below), all associated data is removed within 30 days.
Data Security
All data transmitted between the app and our servers is encrypted using HTTPS. Your authentication tokens are stored securely on your device using encrypted storage provided by the operating system.
Account Deletion
You may request deletion of your account and all associated data at any time by contacting us at the email address listed below. Upon receiving your request, we will delete your account, collection data, deck lists, and any associated personal information within 30 days.
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at:
📧 Email: [email protected]