Privacy Policy
Last updated: June 2026
Who we are
The Perfect XI is operated by Riftova ("Riftova", "we", "us"). Riftova is the data controller responsible for the personal data processed through this service. You can reach us at support@perfectxi.app.
What we collect
Account data (email, optional display name, hashed password or OAuth identifier). Gameplay data (drafts, season records, daily scores, leaderboard entries). Technical data (device type, browser, IP address, crash diagnostics). Support correspondence you send us.
How we use it & legal basis
To provide and maintain the game and your account (performance of a contract). To run leaderboards, prevent cheating, and secure the service (legitimate interests). To process purchases via our payment provider (performance of a contract). To send service notices and respond to support (legitimate interests / legal obligation). For optional marketing emails, only with your consent.
Payments & Merchant of Record
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you make a purchase, Paddle collects and processes your billing details (name, billing address, payment method, transaction history) as an independent controller for payment, fraud-prevention, and tax-compliance purposes. See Paddle's Privacy Notice.
Other recipients
Hosting, database, and authentication: Supabase. Optional sign-in: Google. Analytics and crash reporting providers. Professional advisors and authorities where required by law. We do not sell personal data.
International transfers
Our providers may process data outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
Retention
Account and gameplay data are kept while your account is active and for up to 30 days after deletion (backups purged within 90 days). Purchase records are retained by Paddle and by us for up to 7 years to meet tax and accounting obligations. Crash logs are kept for up to 12 months.
Security
We use TLS in transit, encryption at rest, hashed credentials, role-based access controls, row-level security on our database, and regular review of access logs. No system is perfectly secure, but we take appropriate technical and organisational measures.
Your rights
Subject to local law, you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. You can export or delete your account from your profile, or email support@perfectxi.app. You may also complain to your local data-protection authority.
Cookies
We use strictly necessary cookies for authentication and session management, and limited analytics cookies to understand usage. You can control cookies through your browser settings.
Children
The Perfect XI is rated for ages 4+. We do not knowingly collect personal data from children under 13 (or the equivalent minimum age in your country).
Changes
We may update this notice; material changes will be announced in-app or by email.