Legal

Privacy Policy

Last updated November 12, 2026

This policy explains what information Zindigon ("we", "us") collects across zindigon.com and our games, apps, tools, and stories, why we collect it, who we share it with, and the choices you have. Individual products may keep their own product-specific policy (for example ToonData's own privacy page); where they differ, the product-specific page governs that product. The Elemental Rift mobile app is covered in its own section below.

The short version

Most of Zindigon's web tools (ToonData, Builds, Zindigon League's lookup features) don't require an account and don't store personal data beyond standard hosting logs. Features that need an account or payment use trusted providers (Supabase for accounts and data, Stripe on the web and Apple on iPhone for payments). Our mobile games may show ads from Google AdMob and offer optional in-app purchases. We do not sell your personal information.

Elemental Rift (iPhone and iPad app)

Playing without an account

You can play Elemental Rift as a guest. Your progress is saved on your device. We don't ask for your name, email, or contact details to play.

Sign in with Apple or Google

If you choose to sign in, you use Sign in with Apple or Sign in with Google. We never see or store a password. From Apple or Google we receive an account identifier and the email address you choose to share (with Apple you can hide your real email and share a private relay address instead). You then pick a public display name. We use this to keep your progress in the cloud so you can play on any device, and to show you on the leaderboard.

Game data, leaderboard, and titles

For signed-in players we store your saved game, Trinity Force progress, earned titles, and your best World Boss score. The leaderboard is public: anyone using the app can see your display name, your equipped title, your best score, and, for Rift Champion subscribers, your chosen name color and badge. Your email is never shown to other players.

Ads (Google AdMob)

The free version of Elemental Rift shows ads served by Google AdMob: occasional full-screen ads at natural breaks, and optional rewarded ads you choose to watch for an in-game reward. Google may collect information from your device to serve and measure ads, such as your IP address, device and app information, ad interactions, and, only if you allow it, your device's advertising identifier.

Your choices: on iPhone and iPad, the app asks your permission through Apple's App Tracking Transparency prompt before your advertising identifier can be used for tracking. If you choose "Ask App Not to Track," or if you are in a region where consent is required (such as the European Economic Area, the UK, and Switzerland) and you don't give it, you will only receive non-personalized ads. In those regions, Google's consent form is shown first, and you can change your choice later from the app's Support page ("Ad privacy choices"). You can also change tracking permission at any time in your device's Settings under Privacy & Security, Tracking. Rift Champion subscribers don't see forced ads. Learn how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites.

In-app purchases and Rift Champion

Purchases, including the Rift Champion subscription, are processed by Apple through your Apple ID. We never receive your card or payment details. We use RevenueCat, a subscription management service, to confirm whether a purchase or subscription is active. RevenueCat receives your purchase and subscription details (product, purchase and expiry dates, renewal status, country/currency) linked to an app user ID, which is your Elemental Rift account ID if you're signed in or a random anonymous ID if you're not. Our server checks your subscription status with RevenueCat so subscriber perks (such as your leaderboard name color and badge) are shown only while your subscription is active. You can manage or cancel your subscription in your App Store account settings. See RevenueCat's privacy policy.

Gameplay analytics

To understand how the game is played and to balance it, the app sends us basic gameplay events (for example: a run started, a wave was completed, a rewarded ad was offered or completed, a purchase screen was opened). Each event includes a random install identifier created by the app, the app version, the time, and simple details such as the wave number. If you're signed in, events are linked to your account. These analytics are stored in our own database (Supabase); they are not shared with advertisers and are not used to track you across other companies' apps or websites.

Support requests and crash reports

If you contact us through the in-app Support form, we receive your subject, message, and the email address you give us for a reply, along with information that helps us fix problems: your display name (if signed in), device model, iOS version, app version, sign-in method, a short description of your current game state, and the most recent crash report if there is one. Messages are delivered to our support inbox by our email provider (Resend). If the app closes unexpectedly, a crash report is kept only on your device; it is sent to us only if you choose to share it or include it with a support request.

Deleting your account

You can delete your account at any time inside the app (Account, then Delete account). After a 7-day grace period, during which you can cancel by signing in again, we permanently delete your account and everything linked to it: your cloud saves, leaderboard entry, titles, Trinity Force progress, subscription status record, support requests, and analytics events. Deleting your account does not cancel an App Store subscription; cancel it in your App Store settings. Purchase records kept by Apple and RevenueCat follow their own retention rules.

Information on your device

The app stores your guest save, settings, a random install identifier, and ad-frequency timers on your device. Uninstalling the app removes them.

Zindigon website and web tools

Accounts and sign-in

Where a website account is offered (Zindigon League, Bloodline Zero, and any other product that shows a Sign In option), account data (email address and a hashed password) is handled by Supabase, our authentication and database provider. We don't see or store your password ourselves. A signed-in session is shared across Zindigon products on this domain so you don't have to sign in separately for each one. Website accounts are separate from Elemental Rift app accounts.

Payments on the web

Paid web features, such as Zindigon League Plus/Premier subscriptions and individual Bloodline Zero episodes, are processed by Stripe. Your card details are entered directly into Stripe's own checkout and are never sent to or stored on Zindigon's servers. We receive confirmation that a payment succeeded and which product it was for, not your card number.

AI features

Some web tools include an AI assistant (for example Zindigon League's match insights chat). Messages you send to an AI feature are sent to our AI provider (OpenAI) to generate a response and are not used to identify you personally beyond what's needed to answer your question in that session.

Website analytics

Zindigon uses Google Analytics on parts of the website to understand traffic, such as which pages are visited. Google Analytics may use cookies or similar technology. It does not have access to your account email, password, or payment details.

Website advertising

Some web pages may show ads served through Google. Where ads are shown, Google may use cookies or similar technology to personalize ads and measure performance, subject to the consent controls required for your location.

Hosting and technical logs

The website is hosted as a static site on GitHub Pages behind Cloudflare. Both may automatically collect standard technical information common to any web server, such as IP address, browser type, and request timestamps, as part of operating their infrastructure. See GitHub's and Cloudflare's own privacy statements for details.

Everything else

Who we share information with

We share information only with service providers that run parts of our products for us, and only what they need:

We may also disclose information if required by law or to protect the safety of our users or services. We do not sell personal information, and we do not share it for cross-context behavioral advertising except as described in the Ads section above, which you can control.

Data retention

Account data, game saves, and leaderboard entries are kept while your account is active and deleted when you delete your account (see above). Support requests are kept as long as needed to help you and are deleted with your account. Analytics events are kept for up to 24 months, then deleted or aggregated so they no longer identify an install or account. Payment records are retained by Apple, RevenueCat, and Stripe according to their own rules and applicable financial recordkeeping requirements.

Security

Data is sent over encrypted connections. Access to your data in our database is restricted so players can only read and change their own information, and privileged keys are kept on our servers, never in the apps. No system is perfectly secure, but we work to protect your information.

Children's privacy

Zindigon's games, apps, and tools are not directed at children under 13, and we don't knowingly collect personal information from children under 13 (or the higher age required by local law to consent to data collection). If you believe a child has provided personal information, contact us and we'll delete it.

Your rights and choices

Depending on where you live (for example under the GDPR in the EU/UK or state privacy laws in the US such as California's), you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. You can delete your Elemental Rift account in the app, change ad and tracking choices as described above, or contact us for any other request. We won't treat you differently for exercising your rights. You may also complain to your local data protection authority.

International transfers

Zindigon is based in the United States, and our service providers may process information in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.

Changes to this policy

As Zindigon adds features, this policy will be updated to describe what's collected, why, and how long it's kept, before those features go live. Material changes will be reflected in the "Last updated" date above, and where required we'll tell you in the app.

Contact

Questions about this policy, or requests to access or delete your data, can be sent to [email protected] or through our contact page.