Last updated: April 2, 2026

This Privacy Policy describes how Meta Machina LLC ("Company," "we," "us") collects, uses, and protects your information when you use Rift Wars and related services.

1. Information We Collect

Account Data: When you create an account via Google OAuth, we receive your display name and email address. When you connect a Solana wallet, we store your public wallet address. We never have access to your private keys or wallet seed phrases.

Gameplay Data: Match history, ELO rating, level, XP, card collection, deck configurations, clan membership, friends list, skill allocations, M-Credz balance, and tutorial progress.

Technical Data: IP address (for rate limiting and anti-abuse), browser/device type (from HTTP headers), and WebSocket connection metadata. We do not use Google Analytics or third-party tracking scripts.

Communications: In-game direct messages and clan chat messages are stored on our servers to provide the messaging service.

2. How We Use Your Data

Providing the game experience: matchmaking, leaderboards, social features, account management
Anti-cheat and abuse prevention (IP-based rate limiting, multi-account detection)
Game balance analysis using aggregated, anonymized gameplay statistics
Processing transactions (M-Credz, packs, battle passes) when applicable
Communicating service updates, security notices, or policy changes

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

Google OAuth: Used for account authentication. Subject to Google's Privacy Policy.
Amazon Web Services (AWS): Our servers, database (Aurora PostgreSQL), and cache (ElastiCache Redis) are hosted in the us-west-2 (Oregon) region.
Solana Blockchain: Wallet authentication and future NFT/token transactions occur on a public blockchain. On-chain transactions are publicly visible by nature.

4. Data Storage & Security

Data is stored on AWS infrastructure in the United States (us-west-2). All data transmission uses HTTPS/TLS 1.2+. Database credentials are stored in AWS Secrets Manager. We follow industry-standard security practices including CORS restrictions, rate limiting, input validation, and parameterized database queries.

5. Data Retention

Account data is retained for as long as your account is active. Guest accounts and their data are periodically purged. If you request account deletion, we will delete your personal data within 30 days. Anonymized, aggregated gameplay statistics may be retained indefinitely for game balance purposes. On-chain data (NFT ownership, blockchain transactions) cannot be deleted as it is part of the public blockchain record.

6. Your Rights

Depending on your location, you may have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and personal data
Portability: Request your data in a machine-readable format
Objection: Object to certain processing activities

California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

EEA Residents (GDPR): You have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected].

7. Children

The Service is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or our website.

9. Contact

Meta Machina LLC
Email: [email protected]
Discord: discord.gg/dNcvNkc33C