Nothing to
sign up for.

On your device

What stays in your browser

These are kept in your browser's local storage so the site remembers them between visits. They are never sent to us.

• Light or dark mode, and whether sound is on (stream mode has its own sound setting).
• Whether the round timer is on.
• Your daily results and streaks, including a daily you've started but not finished.
• The riddles you've seen recently, so endless rounds don't repeat them.
• While you're streaming, the session code and key that let your tab run that stream.

Clearing this site's data in your browser removes all of it.

Hosting

What reaches a server

RiftRiddle runs on Cloudflare. Like any website, requests pass through Cloudflare's network, which processes technical details such as your IP address to deliver and protect the site. Our server code keeps short diagnostic logs of its own requests (what was asked for and whether it worked) so errors can be fixed. Cloudflare holds those for a few days, and they aren't used for anything else.

Champion art and ability icons load straight from Riot Games' Data Dragon servers, and riddle images from our Cloudflare storage. Your browser fetches them directly, so those servers see the request the way any image host would.

Twitch stream mode

If you stream with RiftRiddle

Stream mode is optional and only for the person running the stream. Anyone guessing in chat signs in to nothing.

Connecting your Twitch account

Connecting asks Twitch for no permissions at all. Twitch tells RiftRiddle which channel is yours, once. RiftRiddle then tells Twitch to cancel the access key straight away, and keeps nothing else from the exchange. There's no RiftRiddle account to come back to.

Two short-lived cookies are involved, and they're the only cookies the site ever sets. Both are readable only by our server, never by the page.

• tw_oauth_state: proves the sign-in you return from is the one you started. It lasts 5 minutes and is deleted when you come back from Twitch.
• tw_channel: a signed note that Twitch confirmed your channel, so nobody can start a stream under someone else's name. It lasts 15 minutes and is deleted when you go live or disconnect.

Twitch's own authorisation screen may say the app can see your email address. It can't. Reading an email needs a Twitch permission called user:read:email, and RiftRiddle never asks for it. That line is Twitch's standard wording, shown even to apps that request nothing.

Reading your chat

Your chat is read the way anyone can read a public Twitch chat: anonymously, with no login, straight from your browser tab. Messages go from Twitch to your tab, not through us. Only messages that look like a champion's name are sent on to our server to be checked against the answer.

What we keep, and for how long

For the length of a stream, our server stores your channel name, the round in progress, the Twitch usernames of chatters whose message looked like a guess, those guesses, and the scores. That's what the leaderboard is built from. It's stored in Cloudflare's database, deleted when you end the stream, and deleted automatically after 48 hours either way. It is never shared, sold or used for anything else, and no leaderboard outlives the stream it came from.

Twitch's own handling of your account is covered by Twitch's privacy notice.

Sound

Made in your browser

RiftRiddle's sounds are generated on your device as you play. Nothing is downloaded for them and nothing about them is sent anywhere.

Your choices

Removing your data

Clear this site's data in your browser to remove everything kept on your device. Ending a stream deletes everything stored for it. If you'd like something removed sooner, or want to know what we hold about you, email naveessharma@gmail.com and it will be dealt with.

If this page changes, the date at the top changes with it.