Privacy policy
This notice explains which personal data we process, when, and why.
Controller
Dennis Halfen, Hahnenkamp 6, 24806 Hohn, Germany, info@rifthq.net is the controller responsible for data processing on this site under the GDPR.
Hosting
This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider; processing occurs solely for the purpose of operating this website.
What we process
On registration: email address, username, password (stored only as a hash), or via Google sign-in: name, email, and profile picture from your Google account. During onboarding: chosen TCG interests and optional content-creator details. While using the site: your collection, decks you create (incl. guides), comments and ratings, your trade list, who you follow and who follows you, and invite codes you create or redeem. If you use the report/feedback form: the category, subject, description and URL you provide, linked to your account. Technically: IP address and access time in server logs (security/error analysis).
Anonymous usage statistics
On registration, we record the referring hostname (e.g. "reddit.com" or "direct"); on Cardmarket link clicks, the affected card — both without any link to your account, solely to evaluate in aggregate which sources and cards are used often.
Purposes and legal basis
Processing is based on providing the account and community features (Art. 6(1)(b) GDPR, contract performance) and on securing operation of the service and anonymous usage evaluation (Art. 6(1)(f) GDPR, legitimate interest in secure operation and improving the service).
Visibility of your data
Your username, publicly shared decks (incl. guides), comments and ratings are visible to other logged-in users. Your collection and private decks are visible only to you. Who you follow is not publicly visible — it only affects your own view (e.g. a notice about new decks from users you follow). If you enable the public link to your trade list, it becomes visible to anyone with the link, even without an account.
Cookies and local storage
We use a technically necessary login-session cookie, plus local storage (localStorage/sessionStorage) for your cookie choice itself, for "no tips today" in the tooltip hint system, and to capture the referring page once during registration (see "Anonymous usage statistics") — all required for operation or the anonymous evaluation described above, and stored regardless of your cookie choice. We currently set no further cookies (e.g. advertising/tracking); should that change, they would only be activated after your consent via the cookie banner.
Retention
Account data is stored until you delete your account, after which it is deleted or anonymized unless legal retention obligations apply.
Your rights
You have the right to access, rectify, erase, restrict processing, data portability, and object, as well as the right to lodge a complaint with a data protection authority.
Browser extension
The separate "RiftHQ Tracking" browser extension (tcg-arena.fr) has its own privacy policy at rifthq.net/legal/extension-privacy, since it processes different data than this website.


