RiverForge
Privacy notice
Website operator
杭州开川互联网科技有限公司 · RiverForge
GamePilot is a RiverForge product.
Text revision: 2026-10-27-r2-account-sms · Effective date: the date this revision is publicly published; account provisions apply only after R2 activation
Website and account scope
R1 provides company and product information, documentation and preset interactive demos. Closed account entry points do not collect account passwords or phone numbers. Only after R2 is separately approved and enabled, registration processes a name, email and hashed password. After email verification, you may optionally bind a mainland China phone number and use it to sign into the same account. Binding and SMS sign-in do not create another account; phone-only registration is unavailable. Accounts do not enable administration writes, product integration, payments or real project processing. Demos run in your browser without calling a model or connecting to local projects.
Account verification and SMS
When accounts are enabled, email supports registration verification, sign-in, password resets and verified email changes. Phone binding and SMS sign-in process the number and code you submit and necessary delivery results. Codes expire after five minutes, are stored as hashes on the server, become invalid after successful use and are rejected after expiry or repeated errors. They are not marketing messages. Keyed digests, timestamps and counters enforce phone and IP sending limits. Phone numbers and codes are not stored in browser storage. Phone changes, recovery after losing a number and account merging have no self-service entry point; contact the email below for manual ownership checks without sending passwords or codes.
Access and security logs
To deliver pages and investigate attacks or faults, the server processes IP addresses, timestamps, request methods and paths, response status, duration and necessary connection information. The access-log configuration excludes request bodies, cookies and authentication headers and removes URL query parameters. Do not put passwords, verification codes or other secrets in URL paths or email. Log access is restricted to authorized operators.
Cookies and browser storage
When you switch languages, the gamepilot_locale cookie stores your preference for up to one year; you can delete it in your browser. The gamepilot.world-event.v2 session-storage entry stores demo world choices and viewed state. It normally lasts for the tab session and can be cleared manually; browser session restoration may retain it longer. After accounts are enabled and you sign in, necessary secure HttpOnly cookies maintain a session lasting up to 30 days, renewable during use; signing out revokes the current session. SMS resend countdowns store only a timestamp in session storage, without phone numbers or codes. This release includes no advertising or third-party analytics tracking and does not create a sign-in session merely for browsing.
Contact email and rights requests
If you contact us, we process your email address, message and attachments you choose to provide to answer questions, complaints and rights requests. Provide only necessary information, without identity documents, passwords or verification codes. Use the email below to request access, a copy, correction, deletion or restriction of your information. We verify ownership proportionately. Where retention is legally required, use is restricted to storage and necessary protection, and we explain why deletion is unavailable.
Service providers and storage
The website is hosted on Tencent Cloud in mainland China; the hosting provider processes information needed for hosting and network security. QQ Mail processes correspondence sent to our contact address. HTTPS certificate authorities process domain and contact details required for certificates, not website account content; the actual issuer can be viewed in the website certificate information in your browser. The website uses manual operational checks and existing cloud-platform traffic alerts. Automated email and WeCom operational alerts are not enabled. SES is not used for R1 user email, verification codes, marketing or other external deliveries; registration, sign-in and SMS remain disabled until R2 is approved and enabled. After activation, Tencent Cloud SES processes recipient email addresses and account verification, reset or email-change messages; Tencent Cloud SMS and mobile carriers process recipient phone numbers and verification messages, only for verification requested by the user. COS cloud backups remain disabled. Website data uses a local-backup plan on the same server, without a separate-device backup; this does not cover loss of the entire server or disk. Any later independent backup requires identifying its recipient, location and access scope and updating this notice first. This release does not plan to transfer personal information abroad. Changes require prior assessment, an updated notice and applicable procedures.
Retention and expiry
After account activation, account details, email, a bound phone number and verification state are retained while the account exists; deletion follows the manual ownership-check procedure. Expired codes cannot be used, and their records are removed on consumption or verification cleanup; rate-limit records expire with their applicable windows. We retain necessary network-security logs for at least six months, configured as at least 185 days. Ordinary container fault logs rotate by size, with up to five files of approximately 20MiB per container; no fixed retention in days is promised. Contact correspondence is deleted 90 days after closure, except unresolved matters or legal retention, with periodic cleanup by the responsible handler. The local backup configuration retains the seven most recent complete backups; no off-machine backup or off-machine retention period is promised. Security logs follow their separate retention period and are not removed early by data-backup counts. Data is deleted or anonymized using the relevant procedure on expiry; historical backup data expires with its backup, and effective deletion requests must be reapplied after restoration.
Minors, changes and security incidents
R1 offers no minors’ accounts and does not ask children to submit personal information. Do not send sensitive information about children through our contact channel. Report accidental collection or security issues to the email below. If an incident may expose, alter or destroy personal information, we will take remedial action and provide notices to authorities and affected individuals as required. Material changes to purposes, information categories or third parties require an updated notice and applicable notification or consent.
Contact, complaints and privacy requests
Responsible person for legal matters and personal-information requests: 邓力川 (Deng Lichuan). Include the relevant page, a description and only information needed for your request. Our service target is acknowledgement within three working days and a substantive response or explanation of an extension within fifteen working days; these service targets are not a statement of statutory deadlines.