Privacy Policy
RIFTER — Fantasy League League of Legends
Version 1.0 — Effective date: 26/03/2026
Publisher: RIFTER — Sole trader — SIRET: 91944844900018
Contact: support@rifterfantasy.com
Article 1 — Introduction
Protecting your personal data is a priority. This Privacy Policy informs you, as a user of the RIFTER website (hereinafter the "Site"), how your personal data are collected, used and protected, in accordance with Regulation (EU) 2016/679 (GDPR) and French data protection law.
The data controller is: RIFTER, support@rifterfantasy.com
Article 2 — Data collected
2.1 Data collected directly
When you use the Site, we collect the following data:
When creating an account:
- Email address
- Username (alias)
- Password (stored in encrypted/hashed form)
When making a purchase:
- Transaction data (amount, date, order reference)
- Payment data is processed exclusively by our providers Mollie, PayPal and Apple Pay — we do not store any bank card data
When using the game:
- Team line-ups and player picks
- Points and performance history
- Cards owned
2.2 Data collected automatically
When you browse the Site, we automatically collect:
- IP address
- Browser type and operating system
- Pages visited and time spent
- Cookie data (see Article 7)
Article 3 — Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract performance |
| Providing the fantasy league service | Contract performance |
| Processing payments | Contract performance |
| Sending transactional emails (order confirmation, password reset) | Contract performance |
| Marketing communications and newsletters | Consent |
| Improving the Site and audience analysis | Legitimate interest |
| Compliance with legal obligations (accounting, tax) | Legal obligation |
| Fraud prevention and security | Legitimate interest |
Article 4 — Data retention periods
| Data category | Retention period |
|---|---|
| Account data | Lifetime of the account + 3 years after deletion |
| Transaction data | 10 years (legal accounting obligation) |
| Browsing data and logs | 12 months |
| Marketing data (newsletters) | Until consent is withdrawn |
Article 5 — Recipients of data
Your personal data may be shared with the following third parties only to the extent necessary:
Payment providers:
- Mollie (privacy policy)
- PayPal (privacy policy)
Site hosting: IONOS — FRANCE
Audience analysis tools: IONOS
We never sell, rent or transfer your personal data to third parties for commercial purposes.
If data are transferred outside the European Union, we ensure appropriate safeguards (standard contractual clauses approved by the European Commission, or an adequacy decision).
Article 6 — Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: obtain a copy of the data we hold about you
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your data ("right to be forgotten"), subject to our legal retention obligations
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on our legitimate interest
- Right to restriction: request temporary suspension of processing
- Right to withdraw consent: withdraw consent at any time for processing based on consent (e.g. newsletters)
To exercise these rights, contact us at: support@rifterfantasy.com
We undertake to respond within one month of receipt. This period may be extended by two further months for complex requests, after informing you.
If you believe your rights are not respected, you may lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
Article 7 — Cookies
7.1 What is a cookie?
A cookie is a small text file placed on your device when you visit a website. It stores information about your browsing.
7.2 Cookies used on the Site
| Cookie type | Purpose | Duration | Consent required |
|---|---|---|---|
| Essential cookies | Site operation, user session, cart | Session / 12 months | No |
| Analytics cookies | Audience measurement, Site improvement | 13 months | Yes |
| Marketing cookies | Targeted advertising | 13 months | Yes |
7.3 Managing cookies
On your first visit, a banner informs you about cookies and collects your consent for non-essential cookies. You may change your preferences at any time.
You may also configure your browser to refuse cookies; some Site features may then be unavailable.
Article 8 — Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure, including:
- Password hashing
- Secure HTTPS connection
- Access to data restricted to authorised personnel only
- Regular backups
In the event of a personal data breach likely to affect your rights and freedoms, we undertake to notify the CNIL within 72 hours and to inform you without undue delay if the risk is high.
Article 9 — Children's data
The Site is accessible to minors.
If we learn that a minor has provided personal data without their legal representative's consent, we will take steps to delete such data as soon as possible.
Legal representatives wishing to exercise rights regarding a child's data may contact us at: support@rifterfantasy.com
Article 10 — Changes to this policy
We may amend this Privacy Policy at any time, in particular to comply with regulatory changes. Any material change will be brought to your attention via the Site or by email, with reasonable notice before it takes effect.
Article 11 — Contact and complaints
For any question about this Privacy Policy or to exercise your rights, contact us:
By email: support@rifterfantasy.com
For any unresolved complaint, you may contact the CNIL:
privacy.a11_cnil_online www.cnil.fr/fr/plaintes
By post: CNIL — 3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France