Privacy

Who is responsible

Riftora is run privately by an individual, who is the data controller for everything on this page. Contact: [email protected] — it reaches the operator directly. Payments are separate: Tebex Limited is the seller and is responsible for the payment data it holds.

The operator's full identity is held by Tebex, by our host and by the domain registrar, and is disclosed to a data protection authority, to a court, or to anyone with a genuine legal claim, on request.

What the game server stores

• Your Minecraft account: UUID and name — the only way to recognise you between sessions.
• Your progress: ranked ratings and tiers, match history, statistics, coins, market listings, homes, kits, cosmetics, quests, badges.
• Connection records: when you joined and left, which backend, play time. Your IP address appears in the server logs and is used to keep the network secure.
• Moderation: mutes, warnings, bans, and anti-cheat evidence when a check triggers.
• Chat is filtered and rate-limited; messages are not archived beyond the rolling server logs.

Legal basis: performing the service you asked for (playing), and our legitimate interest in a server that is fair and safe.

What the website stores

• A session cookie when you sign in with your Minecraft account, so the store knows who to deliver to. No advertising or tracking cookies.
• Technical logs at our hosting and CDN provider (Cloudflare), including IP addresses, kept for security and abuse protection.
• Aggregated page counts through Cloudflare Web Analytics, which does not use cookies and does not profile visitors.

Purchases

Payments are handled by Tebex Limited as merchant of record. Your payment details never reach our servers: we receive the fact of a purchase, the package bought, the transaction ID and the account to deliver to. Tebex's own privacy policy covers the payment data they hold.

Who else sees your data

Nobody buys it or receives it for their own use. It is processed for us by: our hosting provider (Oracle Cloud, Germany), Cloudflare (CDN and protection), Tebex (payments), and Discord if you choose to link your account there. Public leaderboards show your name, tier, rating and statistics — that is the point of a ladder; ask us if you want to be excluded.

How long

• Account and progress: as long as the account exists on the network, then two years of inactivity before deletion.
• Connection records and server logs: up to 90 days.
• Moderation and anti-cheat records: up to 2 years, or as long as a ban lasts.
• Purchase records: as long as accounting law requires (usually 10 years), at Tebex and in our delivery journal.
• Backups: world and database snapshots are kept 7 to 30 days and then overwritten.

Your rights

You can ask for a copy of your data, a correction, a deletion, or object to a processing. Write to [email protected] from an address we can tie to your account, or ask on Discord while logged into the game. We answer within a month. Deleting your data removes your progress, ranks and cosmetics — that cannot be undone. You may also complain to your national data protection authority.

Children

The network is not aimed at children under 13. Between 13 and 16 (15 in France), a parent or guardian must agree. Contact us and we delete a child account immediately on request.