Privacy

The short version

There are no accounts, no sign-in and no newsletter. Browsing the site asks you for nothing, so we hold nothing about you. The one exception is the contact form: if you choose to write to us, we have what you typed into it.

What is stored on your device

Your watchlist is saved in your own browser using local storage. It stays on your device, it is never transmitted to us, and we cannot read it. Clearing your browser data removes it.

Search filters and view preferences are held in the page address, which is what makes a search shareable. Nothing about that is recorded on our side.

The only other thing kept is a note that you have seen the cookie notice, so it is not shown on every visit. That stays on your device too.

If you use the contact form

The form asks for a name, an email address and your message. They are sent to our own server, which hands them to Resend, our email provider, to deliver to our mailbox. Resend (Plus Five Five, Inc., United States) processes the message only to deliver it, under a data processing agreement, and keeps a short delivery log. Nothing goes into a mailing list.

We use what you send to answer you and nothing else. The message stays in the mailbox for as long as it is useful as a record of the exchange; ask us at any time and we will delete it. The legal basis is our legitimate interest in answering people who write to us.

The form sets no cookies and loads no third-party script. Your IP address is included in the message so we can recognise abuse of the form, and the server holds it in memory for an hour to rate-limit it.

Third parties

Card images are loaded directly from Riot Games' content delivery network. When your browser fetches an image, that provider necessarily sees your IP address and basic request information, as it would for any website embedding remote images.

Card data is fetched from the sources listed in the footer. Those requests are made when the site's data is rebuilt, not from your browser.

Card pages link to TCGplayer, Cardmarket and eBay. Following one takes you to that company's own site, under their privacy policy rather than ours. TCGplayer links pass through TCGplayer's partner network, Impact, which records that the visit came from here and may set cookies on its own domains. If you buy, we are told that a sale happened and what commission it earned, not your name or contact details. Cardmarket and eBay links carry no tracking from us, and we learn nothing about what happens there.

Page views are counted by Clicky, operated by Roxr Software Ltd in the United States, so your IP address and basic request details reach them. Clicky is set to anonymise IP addresses, and it runs cookie-free here, so no identifier follows you between visits and no profile is built. We rely on legitimate interest for this, we need to know which pages are worth writing, and you can object at any time using Clicky's permanent opt-out at clicky.com/optout.

Cookies and local storage

This site sets no cookies. It keeps two things in your browser's local storage: your watchlist, and a note that you have seen the cookie notice. Both exist only to do what you asked, stay on your device, and are never sent to us.

Analytics stores nothing on your device. We count page visits with Clicky in its cookie-free mode: no cookie is written, no identifier is kept, and nothing is read back on a later visit.

Affiliate tracking does not happen on this site. When you follow a TCGplayer link, TCGplayer's partner network records the referral on its own domains, under its own policy. Because this site does not set it, there is no switch for it here: if you would rather not be referred by us, use the Cardmarket or eBay link, or go to TCGplayer directly.

Because nothing on this site needs your permission, the notice you see on your first visit is there to tell you this, not to ask.

Removing what is stored

Clearing this site's data in your browser removes the watchlist and the notice record. The notice can be read again at any time from the link in the footer.

Cookies set by TCGplayer or Impact on their own domains can only be removed from your browser's settings, because a site cannot delete cookies set on another domain.

Selling data

We have no personal data to sell, and would not sell it if we did.

Who is responsible, and how to reach us

RiftCards.gg is operated by the abmonetize team, based in Romania. They act as the data controller for anything this site processes.

To ask what is held about you, to request deletion, or to raise any privacy concern, write to contact@abmonetize.com. Because the site holds no accounts and no personal data, most such requests will be answered by confirming exactly that.

If you are in the EU or UK you also have the right to complain to your national data protection authority.