Last reviewed
Effective 2026-07-23
Riftspire (“we”, “us”, “our”) provides game server hosting, Dash (control panel), and PRISM (stream ingest & routing). This Privacy Policy applies to our websites, products, and services collectively referred to as the “Services”.
Overview
We process information to provide, secure, support, and improve Riftspire. PRISM can connect to third-party streaming and social platforms when you choose to enable an integration. We do not use your hosted or streamed content for advertising, and we do not sell your personal information.
What we collect
Information you provide
- Account details such as email address, username, and billing contact information when you register or purchase.
- Support & communications including messages you send via Discord, email, live chat, tickets, or forms.
- Payment details: payments are processed by our payment providers. We typically receive limited metadata such as last 4 digits and payment status, rather than full card numbers.
Information collected automatically
- Usage data such as pages or features used, clicks, referrers, and approximate location derived from IP.
- Device & network data such as IP address, user agent, browser type, and operating system.
- Logs for reliability & security such as authentication events, error traces, and request IDs.
Service-specific data
- Hosting: server identifiers, resource utilisation, backups you create, and operational metadata needed to run your game servers.
- PRISM: stream and endpoint configuration, routing rules, connected-platform authorisation and metadata, job metadata, and performance or health telemetry related to ingest and output.
- Content: you control what you host or stream. We do not use your content for advertising.
Connected platforms and API services
PRISM can connect to third-party streaming, video, social, and community platforms when you choose to enable an integration. Examples may include YouTube, Twitch, TikTok, Facebook, Discord, and other services made available in PRISM. The information available to Riftspire depends on the platform, the features you use, and the permissions you grant.
Information received from connected platforms
- Account, profile, channel, or page details, such as platform identifiers, display names, usernames, profile images, and other basic details made available by the permissions you grant.
- Authorisation information, such as OAuth access and refresh tokens, granted permissions or scopes, connection status, and token expiry information.
- Streaming and publishing metadata, such as stream, broadcast, video, post, or destination identifiers; titles and descriptions; schedules; privacy or visibility choices; connection state; and platform status or health information.
- Actions and information you choose to send through PRISM, together with API responses and limited operational logs needed to complete the action, diagnose failures, protect the Services, and provide support.
How we use and share connected-platform information
- To connect and authenticate the account you selected and maintain that connection where you grant ongoing access.
- To configure, route, publish, monitor, or manage streams and related content when you expressly request those actions.
- To display connection and delivery status, refresh authorisation, provide support, prevent abuse, and troubleshoot errors.
- To exchange the information needed to perform your chosen action with the connected platform. Infrastructure, database, monitoring, payment, and support providers may also process limited information on our behalf under appropriate safeguards.
We do not sell connected-platform data, use it for advertising, or share it with unrelated third parties.
Disconnecting platforms and deleting associated data
You can disconnect a supported platform from PRISM's connected-account settings. You may also be able to revoke Riftspire's access through the platform's own account, privacy, or security settings.
When an integration is disconnected or access is revoked, we stop using the authorisation and remove stored credentials and associated platform data when it is no longer required to provide the Services, meet legal obligations, resolve disputes, or protect the Services. You may also request deletion by emailing privacy@riftspire.io.
Additional disclosures for YouTube API Services
PRISM uses YouTube API Services when you connect a YouTube account or select YouTube as a streaming destination. Your use of YouTube is governed by the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy.
For YouTube, the connected-platform information described above may specifically include your YouTube channel identifier and channel details; OAuth access and refresh tokens and granted scopes; live-stream and broadcast identifiers; titles, descriptions, scheduled times, privacy settings, lifecycle and connection status; information you direct PRISM to submit to YouTube; YouTube API responses; and limited operational logs needed to perform the action, provide support, diagnose failures, and protect the Services.
Riftspire uses this information only to connect and authenticate your YouTube account, create or manage the YouTube broadcasts and streams you request, route your selected PRISM output to YouTube, show status, refresh authorisation, provide support, prevent abuse, and troubleshoot errors. We may share the information with Google and YouTube to perform your requested actions and with service providers acting on our behalf. We do not sell YouTube API Data or use it for advertising.
You can disconnect YouTube in PRISM's connected-account settings. You can also revoke Riftspire PRISM's access from your Google Account connections page. When YouTube access is revoked through PRISM, we will revoke the applicable authorisation and delete the OAuth tokens and YouTube Authorized Data associated with that authorisation as soon as possible and no later than seven calendar days, except where retention is required by law. You may also request deletion by contacting privacy@riftspire.io.
How we use information
- To provide and operate the Services, including provisioning, authentication, configuration, and billing.
- To maintain security, prevent abuse, and protect our users and infrastructure.
- To monitor performance, debug issues, and improve reliability and features.
- To communicate with you about updates, support, and service notices.
- To comply with legal obligations and enforce our terms.
Legal bases for EEA/UK users
Contract
Providing the Services you request.
Legitimate interests
Securing and improving the Services, and preventing fraud and abuse.
Consent
Where required, including certain cookies or analytics preferences.
Legal obligation
Tax, accounting, and compliance requests.
Data retention
- We keep personal information as long as needed to provide the Services and for legitimate business purposes.
- We may retain some records longer to comply with legal, tax, accounting, and security requirements.
- Operational logs are generally retained for a limited period, then deleted or aggregated.
- Connected-platform credentials and associated data are removed when the integration is disconnected or access is revoked, subject to applicable platform requirements and legal retention obligations.
Security
We use administrative, technical, and physical safeguards designed to protect information against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is 100% secure, but we work to continuously improve.
Your choices & rights
- Access / correction: request a copy of your data or correct inaccuracies.
- Deletion: request deletion of your account data, subject to legal retention requirements.
- Objection / restriction: object to or restrict certain processing where applicable.
- Portability: request export of certain data in a common format.
- Marketing preferences: opt out of promotional communications at any time.
- Connected platforms: disconnect supported integrations in PRISM or revoke access through the platform provider's account controls.
To exercise these rights, contact us at privacy@riftspire.io.
International transfers
Your information may be processed in countries other than where you live. Where required, we use safeguards such as standard contractual clauses or other lawful transfer mechanisms.
Children’s privacy
The Services are not directed to children under 13, or the minimum age required in your jurisdiction. If you believe a child has provided personal information, contact us so we can take appropriate steps.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “Effective date” above. Material changes may also be communicated through the Services or via email.