Privacy Policy

Introduction

I'm Ondřej, the solo developer behind Riftbound Counter: Aethos, on iPhone, iPad, Apple Watch and Android, and behind this website. I built the app to record Riftbound matches and keep track of your cards, and I want to be completely transparent about how it and this site handle your data.

The short version

• No account needed. Every core feature works without signing in, and your match history lives on your device.
• Accounts are optional. If you sign in with Apple or Google, your match history is also kept in a private cloud copy so it can follow you to a new phone, and you can use the friends features.
• Sharing with friends is off until you turn it on. Friend suggestions are on by default and can be turned off.
• Usage analytics and crash reports help me improve the app. They are pseudonymous, not anonymous, and you can switch them off in Settings.
• No ads, and I never sell your data.

Who is responsible

The controller of your personal data is me, as an individual:

Ondřej Vodák
Nádražní 129A, Břeclav, Czech Republic
ondrejvodak@gmail.com

Write to that address for anything in this policy, including the rights listed under "Your rights".

What the app stores on your device

Whether or not you sign in, Aethos saves the following on your device:

• Your match history and game scores
• Champion Legends, battlefields and decks you record
• Notes and rival names you type in yourself
• App settings and progress

Your phone's own backup (iCloud Backup on Apple devices, Google's Auto Backup on Android) may include this data, under Apple's or Google's terms. Backup files you export from the app go wherever you choose to save or send them. Without an account, I can't see your match data.

Optional account (Sign in with Apple or Google)

Creating an account is entirely optional. If you sign in, Aethos uses Supabase (a hosted database and sign-in service) to run your account. What is collected:

• Your email address and a sign-in ID from Apple or Google. With Sign in with Apple you can hide your real address behind Apple's private relay address.
• A username you choose (3 to 20 characters). It is public to other users, because it is how friends find and add you. Don't use your real name if you would rather not.
• On iPhone and iPad, a purchase made while signed in carries your account ID, so it can later be matched to your account.

Your email is used only to identify your account and for essential account communication. It is never sold, never shared with advertisers, and not used for marketing.

Cloud backup & sync

When you are signed in, a copy of your match history is kept in a private cloud vault so it syncs between your devices and survives a new phone:

• It includes your match and game records, with your notes and rival names, and related preferences.
• It is tied to your account and readable only by you. Row-level security stops any other user from reading it.
• Recent earlier versions of each record (the last 40, or anything from the last 30 days) are kept so a bad sync can be undone.
• Data is encrypted in transit (HTTPS) and at rest on Supabase's servers.
• If you never sign in, none of your match data is uploaded.

"The Table": friends & playgroups

With an account you can add friends by username. Here is what that involves:

• Sharing your nights and streak with friends is off until you turn it on. When it is on, your accepted friends see the day you played and when your first and last game ended, the legends on both sides, the formats and event types (including a custom event name if you typed one), the results and the game count. Never your notes or rival names.
• Friend suggestions: you can be suggested to people who already share a friend with you and are in the same country (taken from your device's region setting). This is on by default and can be turned off in the app.
• Reactions, blocking and reports: friends can react to shared nights. There are no public comments anywhere. You can block anyone, and you can report a user or a night; reports are kept so I can review them.

Sending a match

You can send a recorded game to someone else. Before anything leaves your device, your notes and your private rival labels are removed. Only the game itself goes (scores, legends, format, result).

• To a friend: a game you tag with a friend as the rival is offered to them through my cloud database. It only enters their history if they accept it. You can turn off receiving games.
• By link or code: no account needed. The game is stored under a short code for 72 hours. To stop abuse, a random ID for your install (not the analytics ID) and a one-way hash of the IP address that creates or opens a link are kept, never the address itself, and deleted within a day after the link expires. Opening a match link on this website counts as opening it. On Android, installing the app from a match link lets it read Google Play's install referrer to open that game. On iPhone, a new install can offer to paste the link; the clipboard is only read if you tap paste.

Workbench and the Bug Hunt

Workbench (aethoscounter.com/workbench) is the public list of bugs in the app. No account is needed. When you report a bug or say "me too", my server stores the name you pick, a one-line title, the part of the app, and which bugs you said me too to; with a report also what you wrote in its details, the app version and your device model, plus a one-way hash of your IP address to stop abuse. A random token kept on your device (or in your browser on the website) lets only you post and vote under your name. Public: your name, your report titles, their status, the me too counts, my replies, and your points in an event like the Bug Hunt (until 1 November 2026). Never public: the details you write, your device, and your contact. For the Bug Hunt you can leave an email address or Discord name so I can reach you if you win. It is optional, only I see it, and it is used for nothing else.

Share cards & photos

Share cards are images the app draws from your own record, and they are only shared when you share them. On iPhone and iPad, saving one to Photos asks for add-only access: the app can add images but cannot see your library. No photos are uploaded or stored on my servers.

Notifications

Reminders, recaps and the live game-night card are scheduled on your device, only if you allow notifications. They are not sent through any server.

App analytics & crash reports

To make Aethos better, I use PostHog, an analytics service hosted in the EU, to understand how people use the app.

What is collected

• Usage events (which features you use, how often you play, match formats and legends picked)
• Device and app information (device model, system version, app version) and crash reports (the error and where in the app's code it happened)
• Purchase events (product, price, currency, store order number, whether it was a trial or renewal, your earlier purchases of the app, how many matches you had recorded and when you installed it; never your payment details)
• An approximate location (country and city) that PostHog works out from your IP address

The app does not record your screen or your sessions.

How your privacy is protected

• Analytics are identified by a random ID made on your device. If you sign in, that ID is linked to your account ID (never your email), so analytics are pseudonymous, not anonymous.
• Switch analytics and crash reports off any time in Settings → Privacy → Analytics. Nothing is sent while it is off.
• To delete what was already collected, copy the ID shown in Settings → Privacy and email it to me. I'll remove it within 30 days, and if you're signed in, from every device on your account.
• No advertising identifier (IDFA/AAID) is used, and there is no App Tracking Transparency prompt because the app does no tracking.
• No data is shared with advertisers, and you are not tracked across other apps or websites.

Website analytics (aethoscounter.com)

This website also uses PostHog (EU), separately from the app and with stricter settings:

• No cookies and no browser storage are used for analytics. The analytics ID lives only in memory for the page you are on, so each page load is counted on its own and no persistent identifier is left in your browser.
• No session recording. The site does not record your screen or mouse movements.
• Collected per page view: the page address, the referring page, when you leave the page, browser, operating system, screen size, basic performance timings (Core Web Vitals), and an approximate location (country and city) that PostHog works out from your IP address.
• Requests go through aethoscounter.com itself before reaching PostHog's EU servers in Frankfurt, Germany. The site is hosted on Cloudflare, which handles that connection.
• If your browser sends "Do Not Track", the site skips analytics entirely.
• If you open a match link on the site, the page remembers that link's code in your browser so the home page can offer it back for up to 72 hours. That is a convenience only; it is not sent anywhere.
• No advertising, no third-party sharing, no cross-site tracking.

Who processes your data

I only use a few services, each for one job:

• Supabase: accounts, cloud backup, friends and match sending.
• PostHog: app analytics and crash reports, and website analytics.
• Apple and Google: sign-in, payments, app installs and your device backups. For those they act under their own privacy policies.
• Cloudflare: hosting this website.
• Discord: private notifications to me in my own Discord server when a purchase or subscription changes. They carry the plan, price and currency, the kind of event (for example a new purchase, renewal, trial or cancellation), the store's order or subscriber number, and your country (from the store, or worked out from your IP address). For purchases reported by the app they also carry the platform and app version, how many matches you had recorded, when you installed the app and your earlier purchases of it; for store notices, the expiry date. Never your name, email, city or account.

Data is never sold, and is never shared with advertisers or for cross-app tracking.

Where your data is stored

• Supabase: my database runs in the EU, in Frankfurt, Germany. Supabase, Inc. is based in the United States; its data processing agreement includes the EU Standard Contractual Clauses for any access from outside the EU.
• PostHog: PostHog's EU cloud, in Frankfurt, Germany. PostHog, Inc. is based in the United States; its data processing agreement includes the EU Standard Contractual Clauses.
• Discord: Discord, Inc. is in the United States. The purchase notifications above contain no name, email or account ID.

Legal bases

For people in the EU and EEA, the General Data Protection Regulation (GDPR) asks me to say which legal basis covers each use:

• Performing our agreement (contract): your account, cloud backup and sync, friends, sending matches, and paid features.
• Legitimate interest: app usage analytics and crash reports (on by default, and you can switch them off at any time), website analytics (no cookies, skipped with Do Not Track), friend suggestions (can be turned off), abuse prevention for match links, and reviewing reports.
• Consent: notifications, which only happen if you allow them, and which you can turn off in your phone's settings at any time.
• Legal obligation: keeping purchase records for tax and accounting.

How long I keep it

• Account and cloud backup: until you delete your account, then permanently removed after the 30-day grace period (Supabase's daily database backups keep a copy for up to 7 more days).
• Earlier versions of synced records: the last 40 versions, or 30 days.
• Matches sent to a friend: deleted 30 days after sending, whether or not they were answered.
• Match links: 72 hours, then deleted within a day, together with the install ID and IP hash kept for abuse prevention.
• Reports: 1 year.
• Workbench: the email address or Discord name you left for the Bug Hunt is deleted by 30 November 2026. Your name, bug reports and votes stay while the bug list is up; ask me and I remove them.
• Blocks: until you unblock or either account is deleted.
• App and website analytics and crash reports: as long as needed for product analytics, and no more than 7 years.
• Purchase records: as long as tax and accounting law requires.

What I don't do

• Ask for your name or phone number
• Use GPS or precise location
• Read your photos, contacts or files
• Track you across other apps or websites
• Sell your data or share it with advertisers
• Make anything you share visible beyond your accepted friends (apart from your public username)
• Use your data for anything other than running and improving the app

Subscriptions & purchases

Paid features (monthly, yearly or a one-time lifetime purchase) are optional. Payments are handled by Apple through the App Store or by Google through Google Play. I never see your payment details. For billing help, visit Apple's subscription support or Google Play's subscription help.

Age

The core app works without an account and without any personal information, so anyone can use it. Accounts, friends and match sending involve an email address and a public username, so they are for people aged 13 or older, or 16 or older in the EU and EEA. If you believe a younger child has made an account, email me and I'll delete it.

Account & data deletion

Full step-by-step instructions live on the Delete your account page.

• In the app: use Delete account under Account in Settings. You disappear from your friends' lists right away, and your account and all its cloud data are permanently deleted 30 days later. Signing back in within those 30 days cancels the deletion.
• Your local match history stays on your device until you remove the app.
• No app handy? Email ondrejvodak@gmail.com from the address on your account and I'll delete the account for you.
• Analytics: email me the ID shown in Settings → Privacy and I'll remove it within 30 days, from every device on your account if you're signed in.

Your controls

• Use the app with no account, keeping all match data on your device
• Delete local data by uninstalling the app
• Delete your account and cloud data as described above (permanent after 30 days)
• Opt out of app analytics in Settings → Privacy → Analytics
• Sharing with friends is off until you turn it on; friend suggestions and receiving games can be turned off
• Skip website analytics by turning on "Do Not Track" in your browser before visiting aethoscounter.com

Your rights

Wherever you live, email me and I'll help. If you are in the EU or EEA, the GDPR gives you these rights:

• Access: ask what I hold about you and get a copy
• Rectification: have wrong data corrected (you can edit your matches and username in the app yourself)
• Erasure: have your data deleted (Delete account in the app, or email me for analytics)
• Portability: get your data in a machine-readable format (export a backup file in the app, or ask me)
• Restriction: ask me to pause using your data while a question is sorted out
• Objection: object to uses based on legitimate interest, such as analytics (the switch in Settings → Privacy does this instantly)
• Withdrawing consent: turn notifications off at any time
• Complaint: you can complain to a data protection authority. Mine is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz. You can also contact the authority where you live.

I answer requests within one month.

Changes to this policy

If this policy changes, I'll update it here with a new "Last updated" date.

Contact

Questions: ondrejvodak@gmail.com

This policy is intended to meet Apple App Store, Google Play, and EU GDPR requirements.