Privacy Policy

This Privacy Policy explains how The Magma Chamber (“we”, “us”, “the Site”) processes personal data when you visit or use magmachamber-related deployments of this fan community hub for non-standard Riftbound formats.

We aim to comply with the EU General Data Protection Regulation (GDPR) and related EU/EEA privacy rules. This notice is informational and not legal advice.

1. Controller

The Magma Chamber is operated as a community project. For privacy requests, contact us via Discord or Metafy. If a formal legal entity / postal address is later designated, this page will be updated.

2. Data we process

• Account data (when you sign in): identity provider identifiers and email/profile fields supplied by Discord or Google through Supabase Auth, plus the username you claim on Magma Chamber. Auth is hosted on a Magma Chamber Supabase project in the EU (Frankfurt) when configured.
• Content you create: decklists, cubes, drafts, and similar user-generated content you choose to save or publish.
• Local device storage: drafts and preferences stored in your browser (for example local cubes/teams and cookie consent choice). This stays on your device unless/until you sync to an account.
• Usage analytics (optional): if you accept analytics, Vercel Web Analytics may process page views and related usage metrics. Vercel’s analytics product is designed to be cookieless and uses privacy-oriented hashing; it may still involve processing that can be personal data under GDPR.
• Technical logs: standard hosting/security logs from our providers (for example Vercel) that may include IP address, user agent, and request metadata for security and reliability.

3. Purposes and legal bases

• Provide the Site and accounts — contract / steps prior to contract (Art. 6(1)(b) GDPR).
• Security, fraud prevention, abuse handling — legitimate interests (Art. 6(1)(f)).
• Optional analytics — consent (Art. 6(1)(a)). You can withdraw consent anytime via Cookie settings in the footer.
• Legal obligations — where we must retain or disclose data (Art. 6(1)(c)).

4. Cookies and similar technologies

See the dedicated Cookie Policy. Essential storage may be required for authentication and remembering your consent choice. Analytics run only if you opt in.

5. Processors / recipients

• Vercel — hosting, edge delivery, and (if consented) Web Analytics.
• Supabase — authentication and database when Magma Chamber auth is configured (EU Frankfurt region intended).
• Identity providers — Discord and/or Google if you use those login buttons.

Some providers may process data in the United States or other countries outside the EEA. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.

6. Retention

Account and published content are kept while your account remains active and as needed to operate the Site. Local drafts remain until you clear site data. Analytics aggregates follow Vercel’s retention practices. Logs are kept only as long as needed for security and operations.

7. Your rights (EEA/UK)

Subject to applicable law, you may have rights to:

• access, rectify, or erase your personal data;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time (without affecting prior lawful processing);
• lodge a complaint with your local supervisory authority.

To exercise rights, contact us through Discord or Metafy and describe your request. We may need to verify your identity.

8. Children

The Site is not directed to children under 16. If you believe a child provided personal data, contact us so we can delete it.

9. Riot / third-party brands

Riftbound and related marks belong to Riot Games, Inc. Card data and imagery may come from community/catalog sources and Riot-hosted assets. Those parties have their own privacy practices.

10. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on the Site.

Related: Terms of Use · Cookie Policy · Disclaimer