Privacy Policy
Last updated October 19, 2026
CoreRift Gate is a service of Core Rift LLC, a Virginia limited liability company doing business as Core Rift Gate (“we”, “us”). This policy explains what the gate collects, why, and what you can do about it.
Two kinds of people
- People who sign in to the gate to manage a site (owners and managers). For your account, Core Rift LLC decides how your information is used, as described here.
- Visitors to sites that use the gate, for example someone who joins a site's “Get notified” list or redeems a beta code there. That site decides how your information is used, and its own privacy policy applies; we process the information for the site, on its instructions. To see, change or delete it, contact the site. If you contact us, we will pass your request to the site.
What we collect
- When you sign in to the gate: your name, email address and Google account ID, from Google. We keep your email address on the sites shared with you, with your role and whether you want signup emails.
- For each site: its name and web address, a fingerprint (hash) of its API key, its beta-code records (the code's fingerprint and an encrypted copy so the site's managers can show it again, the code's limits, how many times it has been used, and the email address it is tied to), and its interest list (each person's email address, the features they picked, any notes, and when they signed up).
- Test accounts: a test-account code is tied to a made-up address ending in “@test.invalid”, not to a person.
- Technical data: our host keeps short-lived request logs (such as IP address, browser type and the page requested) for security and troubleshooting.
How we use it
- to sign you in and show you the sites shared with you;
- to answer a site's beta-access checks and keep its interest list;
- to email people who turned on signup notifications for a site;
- to keep the gate secure, prevent abuse, and fix problems.
We don't sell personal information, share it for advertising, or use it to build profiles. We don't use Site Data for anything except running the gate for the site that sent it.
Cookies
The gate sets one cookie, to keep you signed in, plus the short-lived cookies Google sign-in needs. There are no advertising or analytics cookies.
Who handles it for us
| Provider | What for | What it handles |
|---|---|---|
| Vercel | Hosting and serverless compute | Every request to the gate while it is processed, and short-lived request logs |
| Neon | Database | Sites, people a site is shared with, beta-code records and interest lists |
| Sign-in to the gate | Your name, email address and Google account ID at sign-in | |
| Resend | Signup notification emails | The notified person's email address, the site's name and the new signup's email address |
All of them process data in the United States. We may also disclose information when the law requires it.
How long we keep it
Site Data stays until the site's managers remove it or delete the site, which deletes its codes and interest list. Your access record on a site goes when an owner removes you or the site is deleted. Deleted data can remain in our database provider's routine backups for a short time before those backups expire.
Security
Codes and API keys are stored as fingerprints, not in readable form (with an encrypted copy of each code so a site's managers can show it again). All traffic is encrypted in transit. Only the people a site is shared with can see its data.
Your choices and rights
You can ask to see, correct or delete the information we hold about you, or ask questions about it, at admin@corerift.com. Depending on where you live you may have further rights, and we will honor them as the law requires. Turn signup emails off at any time in a site's People tab.
Children
The gate is for adults managing websites. It isn't meant for anyone under 18, and we don't knowingly collect information from children.
Changes
If we change this policy, we will post the new version here with a new date, and tell site owners about material changes before they take effect.
Contact
Core Rift LLC: admin@corerift.com