Legal

Privacy Policy

Last updated: October 17, 2026

The short version. We keep as little as we can: enough to sign you in, take payment and keep your license on your computers. No ads, no trackers, no analytics, and we never sell your data. The Ryft mod never sends your chat, your screen, your keystrokes or your files anywhere.

This policy covers ryftclient.com, the Ryft store and account system, and the Ryft Client mod ("Ryft", "we", "us"). Questions? Ask in our Discord.

1. Visiting the website

The website loads no analytics, ads or tracking scripts. Its fonts, pictures and scripts all come from ryftclient.com itself; the one exception is your Discord avatar on the account page, which your browser loads from Discord.

Our host (Cloudflare) receives your IP address, browser type and the pages you request, because that's how a page reaches you. These logs are used only to run and protect the site and are kept for no longer than 30 days.

2. Signing in with Discord

You sign in with Discord. We ask Discord only for the basic identify permission and keep:

your Discord user ID (a number that identifies your account),
your Discord display name,
your avatar's picture id, so we can show your avatar.

We never get your email address, password, servers, friends or messages, and we don't keep the access token Discord gives us. One cookie keeps you signed in for up to 30 days; it is strictly necessary for the account to work and is never used for tracking. We store only a scrambled (hashed) copy of it.

3. Payments

Payments are handled by Stripe. Your card number and payment details go straight to Stripe and never reach us. From Stripe we keep what we need to run your order: what you bought, the amount, the date, your Stripe customer and payment reference numbers, and whether your subscription is active. Stripe sends you the receipt.

4. Your license and your computers

Each license runs on a set number of computers. To make that work, we keep:

your license (plan, status, end date, number of computer slots),
for each activated computer: a device ID, the computer's name, when it was activated and when it last checked in.

The device ID is a one-way scrambled code (a hash) that the mod makes on your own computer from its hardware ID. The hardware ID itself never leaves your computer and can't be worked out from the code.

The mod contacts ryftclient.com only to activate a computer and to renew its license, about once a week. It sends the device ID, the computer's name, the Ryft version and your current license, and nothing else.

5. What the mod never collects

The Ryft mod does not send us, or anyone else:

your Minecraft password or login session,
your chat or private messages,
your screen, screenshots or keystrokes,
your files, other programs or browsing,
what you do in game, where you are, or which servers you play on.

Your module settings, friends list and configs stay on your computer.

6. Optional modules that talk to other services

A few modules connect to other services directly from your computer, only while you have them switched on. We never receive this data.

Module	What it connects to
Discord Presence	The Discord app on your computer, to show Ryft on your profile.
Spotify HUD	The Spotify app on your computer (and Spotify, for cover pictures).
Coord Snapper	Only a Discord webhook address you type in yourself, if you switch its Discord option on.

Ryft includes OpSec, an open-source privacy mod that protects you from servers trying to fingerprint your client. It sends nothing to us.

7. Who handles your data

We never sell or rent your data and never share it for advertising. It's handled only by the services that run the store: Cloudflare (website, database and license server), Stripe (payments) and Discord (signing in). We share data with authorities only when the law requires it.

8. How long we keep it

Account, license and computer details: for as long as you have an account. Ask us to delete it and we do so within 30 days.
Payment records: as long as tax and accounting laws require.
Website and server logs: up to 30 days.

9. Keeping it safe

Everything travels over HTTPS. Sign-in cookies and device IDs are stored only as hashes, computer licenses are cryptographically signed so they can't be forged, and the site sends strict security headers.

10. Your rights

You can ask to see, correct or delete the data we hold about you: open a ticket in our Discord. Deleting your account ends your license. Depending on where you live (for example the EU, UK or California) you may have more rights under local law, including complaining to your data protection authority.

11. Children

Ryft isn't meant for children under 13, and we don't knowingly collect their data. If you think a child gave us data, tell us and we'll delete it.

12. Changes

If this policy changes, we'll update the date at the top and announce important changes in our Discord.