Trust & Safety

Security

Nemesis Rift is a RuneScape 3 clan site run by players, not a company. Here is exactly how we handle the small amount of data we keep about you.

Encrypted in transit

Every page and request is served over HTTPS/TLS.

Hashed passwords

Passwords are salted and hashed — never stored or emailed in plain text.

Row-level access rules

The database enforces who may read or write each row.

Minimal data

We only keep your RSN, email and clan activity.

These are our own statements about how Nemesis Rift handles data — not third-party certifications. Read the details.

Accounts and passwords

  • Sign-in is handled by our managed authentication provider. Passwords are salted and hashed before storage — nobody in the clan, including officers, can read your password.
  • We never send passwords by email. The welcome mail confirms your RuneScape name and login email only.
  • Password resets are done through a one-time link sent to your registered email address.

Connections and storage

  • The whole site is served over HTTPS, so traffic between your browser and us is encrypted in transit.
  • Member data lives in a managed PostgreSQL database hosted by our backend provider, with encryption at rest handled by that provider.
  • Uploaded images (news posts, avatars) are kept in managed object storage with access rules attached.

Who can see what

  • The database enforces row-level access rules: signed-out visitors can only read public pages such as Home, About, Events and Join Us.
  • New registrations must be approved by an officer before the account can sign in.
  • The member portal and admin panel are limited by rank, and each panel can be enabled or disabled per rank by clan leadership.
  • You control whether your RuneScape stats are shown publicly from your profile settings.

Reporting a problem

  • If you believe you've found a security issue, email nemrift@gmail.com with the details and steps to reproduce. Please don't share it publicly until we've had a chance to fix it.
  • We'll confirm receipt and let you know once the issue is resolved.

We hold no ISO, SOC 2 or similar certification — we're a clan, and we'd rather be honest than wear a badge we haven't earned. For how long we keep data and how to have it deleted, see our privacy notice.