Privacy Policy

Introduction

Ryft ("Ryft," "we," "us," or "our") is committed to protecting your privacy.

This Privacy Policy is designed to provide you with a comprehensive understanding of how we gather, utilize, disclose, and ensure the security of your personal information when you engage with our website and services. Your privacy matters to us, and we are committed to maintaining the highest standards of protection for your personal data.

Information We Collect

Personal Information: When you sign up for our services or interact with our website, we may collect personal information, such as your Discord identity (username, ID, avatar), a verified email address supplied by Discord when you authorize the Discord email OAuth scope, billing information, and other relevant details. We do not expose your email address through the normal Ryft panel API.

Usage Data: We may collect non-personal information, including your IP address, browser type, operating system, referring URLs, access times, and other usage data to improve our services and website.

Hosted Content and Custom-Domain Certificates: We process the files and configuration you place on hosted servers. If you enable a custom domain, we also process and store the certificate chain and private key you upload solely to validate and provide TLS for that hostname. Private keys are kept outside hosted server files, are not returned through the panel API, and are removed from active platform certificate storage when the custom domain is removed. Ryft does not generate or renew customer-domain certificates.

Cookies and Similar Technologies: We use required cookies and similar technologies for authentication, security, and core service functionality. We also store your optional analytics choice in your browser so we can remember whether you accepted or rejected analytics. Google Analytics runs in consent mode: its analytics cookies are not activated until you choose to accept them, but limited cookieless measurement signals may be sent while consent is denied or has not been selected.

Advertising Data: We may work with third-party advertising networks to display advertisements on our website. These partners may collect and process certain information about your browsing behavior and device to serve relevant ads. This may include:

• Device information (e.g., device type, operating system)
• Browser information (e.g., browser type, language)
• IP address (anonymized)
• Non-personal browsing behavior data
• Cookie identifiers

How We Use Your Information

Provide and Improve Services: We use your information to deliver the services you requested and to enhance their performance and features.

Communication: We use your verified Discord email address for account access, billing, security alerts, support, service updates, and notices of material changes to our Terms or Privacy Policy. These operational messages are part of providing the service. We do not send promotional email unless you separately opt in, and you may opt out of promotional messages at any time.

Billing and Transactions: We use your personal information to process payments and manage billing-related matters. Where a third-party payment processor is used, it receives the information needed to authorize and process the transaction under its own privacy terms. We may receive transaction details such as the amount, currency, payment status, transaction reference, and purchaser contact details made available by that processor or purchase channel. Ryft does not collect or store full payment-card numbers or payment account credentials.

Google Analytics 4: We use Google Analytics 4 with measurement ID G-RDM09Y8Z47 to understand visits and improve the public website. Google Analytics runs in Advanced Consent Mode with analytics and advertising storage denied by default. Before you accept analytics, or after you reject it, Google may receive limited cookieless measurement signals such as page-view events, consent state, referring information, and technical information needed for measurement; analytics cookies are not used in that state. If you accept analytics, Google may also use a first-party _gacookie and related Google Analytics cookies, and may collect page views, session statistics, approximate location, browser information, and device information. We do not send your Ryft account email, Discord identity, payment details, hosted files, or server secrets to Google Analytics. Advertising personalization and Google Signals are disabled in our tag configuration. You can change your choice at any time through the "Privacy choices" control.

Third-Party Advertising

We may partner with third-party advertising networks to display advertisements on our website. Where we do so, our partners follow industry standards for privacy and data protection.

Your Advertising Choices

• You can opt out of personalized advertising via industry tools such as the Digital Advertising Alliance's opt-out page
• You can manage your cookie preferences through your browser settings
• You can manage Google ad preferences through Google Ad Settings

Data Protection

• Our advertising partners implement appropriate security measures to protect your data
• They have strict data retention policies and delete data when no longer needed
• They do not sell your personal information to third parties

How We Share Your Information

Service Providers: We may share your information with third-party service providers who assist us in operating our website and providing services to you. These service providers are obligated to keep your information confidential.

Google Analytics: When you provide optional analytics consent, Google LLC processes the website measurement data described above under its own privacy terms. See Google's Privacy Policy for more information about Google's processing and choices.

Legal Requirements: We may disclose your information to comply with applicable laws, regulations, or legal processes, or respond to valid governmental requests.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

Data Security

Ryft employs industry-standard security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. Servers run in isolated containers with strict resource limits and authentication controls.

While we take every precaution, no method of data transmission over the internet can be guaranteed completely secure.

Your Rights

You have the right to access, correct, update, or delete your personal information. You may contact us through our Discord server to exercise these rights. You can withdraw optional analytics consent at any time by opening the "Privacy choices" control. Withdrawing consent does not affect required cookies needed for sign-in and security.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our data practices. Any modifications will be posted on this page with the revised date. It is your responsibility to review this policy periodically for any updates.

California Privacy Rights Act Notice

The California Privacy Rights Act ("CPRA") grants residents of the State of California certain rights regarding their Personal Information.

Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights.

How we use your personal information

• To fulfill requests, process transactions, and provide support.
• To personalize and develop our products, services, and platforms.
• To manage and secure your account, prevent fraud, and ensure safety.
• For testing, research, and product development.
• To respond to legal requirements and law enforcement requests.

Children's Privacy

Ryft is committed to protecting the privacy of children. Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

COPPA Compliance

• We comply with the Children's Online Privacy Protection Act (COPPA)
• We do not knowingly collect, use, or disclose personal information from children under 13
• If we learn that we have collected personal information from a child under 13, we will take steps to delete such information

Parental Rights

• Parents or legal guardians can review their child's personal information
• Parents can request deletion of their child's information
• Parents can refuse to permit further collection or use of their child's information

If you believe we might have any information from or about a child under 13, please contact us immediately through our Discord server.

Data Breach Notification

Ryft takes data security seriously and has implemented measures to prevent unauthorized access to your personal information. However, in the event of a data breach, we have established procedures to respond promptly and effectively.

Breach Response Procedures

• Immediate investigation of any suspected breach
• Assessment of the nature and scope of the breach
• Identification of affected individuals and data
• Implementation of measures to contain and mitigate the breach

Notification Process

• We will notify affected users without undue delay, typically within 72 hours of becoming aware of the breach
• Notifications will be sent via email to the primary email address associated with your account
• Where email notification is not possible, we may use alternative methods such as in-app notifications or website announcements

Notification Content

• Description of the nature of the breach
• Categories of personal data affected
• Likely consequences of the breach
• Measures taken or proposed to address the breach
• Recommendations for users to protect themselves

User Rights in Case of Breach

• Right to be informed about the breach
• Right to request additional information about the breach
• Right to request deletion of affected data
• Right to file a complaint with relevant data protection authorities

Selling Personal Information

We did not sell any personal information in the past twelve (12) months.