This Privacy Policy explains what information CoreRift Gate (the "Service") collects, why, who handles it and the choices you have. The Service is operated by Core Rift LLC, a Virginia limited liability company doing business as Core Rift Gate ("CoreRift," "we," "us"). It is part of our Terms of Service.
1. Scope
The Service deals with two groups of people:
- People who sign in to the Service to manage a site (owners and managers). For your account, CoreRift decides how your information is used, as described here.
- Visitors to websites that use the Service, for example someone who joins a site's "Get notified" list, sends feedback or a contact message, makes a cookie choice, accepts a site's terms, or redeems a beta code there. That website decides how your information is used, and its own privacy policy applies. We process the information on the website's behalf and on its instructions, under our Data Processing Addendum. To see, change or delete it, contact the website. If you contact us, we will pass your request to the website.
2. Information We Collect
2.1 People who sign in
- Account details from Google sign-in: your name, email address and Google account ID, and when you accepted these policies.
- Site access: the sites shared with you, your role and your notification settings.
- Billing details, if you choose a paid plan: your plan and subscription status. Payments are handled by Stripe; we never receive your full card number.
- Personal tokens you create for Claude or other AI assistants and scripts: the token's name, a fingerprint (hash) of it, and when it was created and last used. A token acts for you with your access, only while you keep it.
- Messages to us, including the email address you write from.
2.2 Information processed for websites (Site Data)
- Beta-access codes: a fingerprint (hash) of each code, an encrypted copy so the site's managers can show it again, its limits and use count, and the email address it is tied to. Test-account codes are tied to a made-up address ending in "@test.invalid," not to a person.
- Interest lists: each person's email address, the features they picked, any notes, and when they signed up.
- Feedback and contact messages: the message, and any name and email address the visitor provides.
- Consent and acceptance records: a random visitor ID kept in the visitor's browser with their cookie choices, and, for legal documents, the site's identifier for the user (an email or user ID), the document version and when it was accepted.
- Email: the recipient, subject and delivery status of email a site sends through the Service.
- Browser script data: the browser script stores a random visitor ID and a few settings (such as which announcements were dismissed) in the visitor's browser storage.
2.3 Information collected automatically
Our hosting provider keeps short-lived request logs, such as IP address, browser type, the page requested and the time, for security and troubleshooting. Contact and feedback endpoints use the IP address briefly to limit abuse.
3. How We Use Information
- To sign you in and show you the sites shared with you.
- To provide the Service to each website: answer beta-access checks, keep its lists and messages, record consent and acceptance, send its email, and run its monitors and status page.
- To email people who turned on notifications for a site.
- To bill paid plans.
- To keep the Service secure, prevent abuse and fix problems.
- To meet legal obligations.
We do not sell personal information, share it for advertising, or use it to build profiles. We do not use Site Data for anything except providing the Service to the website it belongs to.
4. How We Share Information
- Service providers that host, store and deliver data for us, listed on our Service Providers page.
- The website's owners and managers, who see that website's Site Data.
- Legal and safety: when the law requires it, or to protect people, the Service or our rights.
- A sale or reorganization: if the Service is sold or transferred, information may transfer with it under the commitments in this policy.
5. Cookies and Similar Technologies
The Service's own pages use only the cookies needed to keep you signed in and protect sign-in, and no advertising or analytics cookies. See our Cookie Policy.
6. How Long We Keep Information
| Information | How long |
|---|---|
| Your account and site access | While your account is open, or until an owner removes you |
| Site Data, including email logs and monitor history | Until the site's managers delete it or delete the site |
| Billing records | As long as tax and accounting law requires |
| Request logs and backups | Removed on our providers' schedules, generally within 30 days |
7. Security
All traffic is encrypted in transit. Codes and API keys are stored as fingerprints rather than in readable form, with an encrypted copy of each code so a site's managers can show it again. Only the people a site is shared with can see its data. No system is perfectly secure; if a breach affects your information, we will notify you and affected websites as the law requires.
8. Your Privacy Rights
You can ask to see, correct or delete the information we hold about you by emailing us. We honor these requests from anyone, whether or not a particular privacy law, such as the Virginia Consumer Data Protection Act, requires it, and we will not treat you differently for making one. We may need to confirm it is you. If we decline a request, you can appeal by replying to our answer, and you may also contact your state attorney general. You can turn notification emails off at any time in a site's People tab.
9. Children
The Service is for adults managing websites and is not directed at children. We do not knowingly collect information from anyone under 18 who signs in, and websites may not send us information about children under 13.
10. Where Information Is Processed
Our providers process information in the United States.
11. Changes to This Policy
We may update this policy. Each version is posted here with its effective date, and earlier versions remain available. We will tell site owners about material changes before they take effect.
12. Contact
Core Rift LLC, doing business as Core Rift Gate, Virginia. Email: admin@corerift.com.