Privacy

• Authentication is handled by our backend authentication provider using email and password only. It stores your email address and a securely hashed password.
• RiftRush keeps a profile row containing your user ID, an optional display name, an optional Epic display name you type yourself, an optional avatar URL and timestamps.
• We never receive or store your Epic Games password. RiftRush does not connect to your Fortnite account.

Items you save — wanted cosmetics, owned cosmetics, Creative maps and generated loadouts — are stored against your user ID so they sync across devices. Row-level security means only your account can read or change your vault rows.

If you are signed out, the vault lives only in your browser’s local storage. When you later sign in, those local entries are copied into your account once.

RiftRush records a minimal, purpose-limited event log to run the platform:

• island searches, stored as a normalised, lowercase, 40-character-maximum keyword with e-mail-like text stripped out;
• island views (the public island code and title);
• cosmetic views (the public cosmetic ID and name).

We do not log full free-text you type elsewhere, message content, IP-based profiles, advertising identifiers, or anything from your Fortnite account. Events are used only for popularity ranking and operational health in the internal control room.

• An authentication session token in local storage, so you stay signed in.
• Your guest vault, in local storage, before you sign in.
• A single flag recording that you dismissed the install prompt.
• When installed as an app, a service worker cache holding pages, scripts, styles and images so RiftRush loads quickly and can show an offline notice. It is cleared when you uninstall or clear site data.

RiftRush does not use advertising or cross-site tracking cookies.

Fortnite Creative island data is read server-side from Epic’s public Fortnite Ecosystem API. Item Shop, cosmetics and news are read server-side from Fortnite-API.com. Cosmetic and news images are loaded directly from those services by your browser, so those providers can see standard request information such as your IP address and user agent.

You can remove vault items at any time from the Rift Vault, and you can clear the guest vault by clearing this site’s browser storage. Account deletion removes your profile row and every vault row tied to it. See the contact page for how deletion requests are handled; a monitored support address is published there once it is verified.