Privacy

What Riventale keeps and sends, feature by feature. Lattice Logic Pte. Ltd. of Singapore runs the game and is responsible for this data.

Single player

Single-player worlds, your settings and your character's look are stored in your browser on your device. Playing alone sends nothing about you or your worlds to us, and never contacts our account service.

The game's files come from Cloudflare, our host. Like any web request, loading them shows Cloudflare your IP address and browser. We count page visits with Cloudflare Web Analytics, which uses no cookies and does not identify you.

Online play

When you play online (The Riven Lands, a private world, or a friend's world you were invited to), our game server receives and keeps:

Your player name and a random token this browser makes, which proves the name is yours.
Your character in that world: where it is, its inventory, look, homes, achievements, pages and songs found, and play statistics.
Chat messages, which go to the players in that world. The server does not save them.
Your IP address, used to limit connections and stop abuse. The server's log notes it with your player name when you connect.
An anonymous account id (Firebase Authentication, by Google): the first time you play online, the game signs this browser in anonymously, with no name or email, so your character can later move to a real account.

Other players see your name, your character, where it is and your chat. A private world stores a scrambled form (SHA-256) of its code, never the code itself, and of its owner's token.

When you invite friends to a world of your own, our server only introduces the two browsers; the game then runs directly between them, so each browser sees the other's IP address. If they cannot connect directly, the game goes through a Cloudflare relay, which passes the traffic without keeping it. The host's world, with the friends' characters, stays in the host's browser.

Player counts

We count how many people play online each day. Single player and the title screen are never counted.

Once a day while you play online, the browser sends an id (your account id, or a scrambled form of this browser's token), whether you have bought anything, and how you first arrived (the referring site and campaign tags, and the first page). Our server stores a keyed scramble (HMAC) of the id, never the id itself, with the day, your country and the kind of device (phone, tablet or computer). No IP address, name or browser details are kept.
The game server sends each day's number of joins and the most players at once. These are totals only.

Accounts

An account is optional; you need one only to buy looks and for features that say so. Accounts use Firebase Authentication (Google). Signing in with your email keeps your email address; signing in with Google keeps the email address and name Google shares; a passkey keeps its public key (the private key stays on your device). Your account id links your account to your online characters on our game server.

Purchases

Payment happens on Airwallex's page: Airwallex receives your card details, and we never see or store your card number. We keep a record of each purchase: your account id, what you bought, the price, the time, Airwallex's reference, and that you agreed to immediate delivery. The looks you own are stored by account id, and the game server is told which looks your account owns.

World copies

If you are signed in and choose to keep copies of your single-player worlds on your account, they are stored in Google Cloud Storage under your account id, readable only by your account. You can delete a copy at any time; deleting your account deletes them all.

Friends

Friends needs an account. Our game server keeps your friend code, your friends, requests and blocks, and whether you are online and in which kind of world, which it shows to your friends. Single player never tells it anything.

Advertising and cookies

Riventale shows no ads today. Neither the game nor this website sets advertising cookies. The game keeps your worlds and settings in your browser's own storage, which is not shared with any other site.

We plan to show ads later, served by Google as our ad vendor: video ads at breaks in play, never during play, and optional ads you can choose to watch for an in-game reward. This section says what will happen then, so you can decide before it starts. We will update it, and the date below, when the first ad runs.

Cookies and identifiers. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. In the game, Google may also read and store similar identifiers in your browser to show ads, limit how often you see the same one, measure them and prevent fraud.
Personalised and non-personalised ads. Personalised ads are chosen using those cookies and identifiers, from what Google knows about your interests. Non-personalised ads are chosen from the context instead, such as the game itself and your general location, but still use cookies or identifiers to cap how often an ad shows, to report on ads in aggregate and to fight fraud.
Opting out. You can turn off personalised ads from Google in Google's Ads Settings. You can opt out of personalised ads from other vendors that take part in the industry programme at aboutads.info. How Google uses information from sites and apps that use its services is explained at policies.google.com.
Consent in the EEA, the UK and Switzerland. Before ads run there, the game will ask for your consent with a consent message from a consent management platform certified by Google. You can agree, refuse, or choose by purpose, and change your choice later. If you refuse, Google may show only limited or non-personalised ads.
What we receive. Google tells us how many ads were shown and what they earned, in totals. It does not tell us who you are, and we do not send Google your player name, account, email or worlds.

Where data is kept

AWS Lightsail, Singapore: the game server: online worlds, characters, private worlds and Friends.
Google Cloud and Firebase (Singapore, asia-southeast1, for our own services): accounts, purchases, owned looks and world copies.
Cloudflare: the website, the relay for worlds you invite friends to, and the daily player counts.
Airwallex: payments.
Google: ads, once they start (see Advertising and cookies above).

How long we keep it

Single-player worlds: in your browser until you delete them or clear the site data.
Online characters: while you play. A name unused for 60 days is freed for others; the character is set aside and comes back if its account signs in again.
Private worlds: closed after 7 days without players; the owner can download the world for 90 days after that, then it is deleted.
Nightly backups of the game server: 14 days.
Accounts, owned looks and world copies: until you delete them or ask us to delete your account.
Purchase records: as long as tax law requires.
Daily player counts: kept as totals, with no way back to you.

Deleting your data

To delete your account and everything linked to it (your account, owned looks, world copies, and your characters on our game server), write to support@latticelogic.app from the address you signed in with, or name that address and your player name. We delete it within 30 days and reply when it is done. Purchase records are kept as long as tax law requires. To delete an online character without an account, write with your player name from the browser you play it on.

Children

We do not knowingly collect personal data from children under 13. Single player collects none. A parent who thinks their child has given us data can write to support@latticelogic.app, and we will delete it.

Contact

Questions about your data: support@latticelogic.app. We may update this page; the date below is the current version.

Last updated 2026-10-04.

Riventale is made by Lattice Logic Pte. Ltd. (UEN 202610912N), 77 High Street, #10-12B High Street Plaza, Singapore 179433. Contact: support@latticelogic.app.