Privacy policy for RIB.IT

Last updated: 23 October 2026

RIB.IT is a game by 6dot6 Games ("we"). You can reach us at contact@6dot6.org.uk. This policy explains what the game keeps and why.

The short version: there are no accounts. We do not ask for your real name, email address or location. The game contains no advertising and no tracking. The only things that leave your phone are a name you choose and your results, so that the public leaderboards can work.

What stays on your device

The game saves these on your device only: your settings (sound, vibration, reduce motion), your chosen frog colour and which colours you have unlocked, your progress (best distance and score, number of runs, batteries collected, Daily Challenge days finished), the name you chose, a random identifier, and the list of leaderboard names you chose to block. You can erase all of it in Settings with Reset progress.

What we collect when you use the leaderboards

If the leaderboard is available and you finish a run, the game sends our server:

• the name you chose for the board (letters and numbers, 12 characters at most; the game asks you to pick one before your first Classic run is posted),
• a random identifier made on your device (it is not linked to you, to your device's advertising identifier or to any account),
• a replay of the run: the taps you made and when. The server plays it back to check that the result is genuine, and then discards it.

The server keeps your name, your identifier and your best results (your best time for each Daily Challenge, and your best distance and score for Classic), with the time they were set. The leaderboards are public: other players can see the name you chose and your results. Please do not use your real name.

We use this to run the leaderboards fairly. Our lawful basis (under the UK and EU GDPR) is our legitimate interest in running a fair public leaderboard.

Names, reporting and blocking

Names are filtered, and some words are not allowed. Players can report a name from the leaderboard, and block a name so it is hidden on their own device. When a name is reported we keep: the name, the identifier of the entry, which board it was on, the short reason (if any) and the time. We do not record who sent the report. Reports are used only to review the name, and a report about a deleted Daily board is deleted with it. Reported names may be removed, and the random identifier behind a name may be put on a block list so that it can no longer post to the leaderboards.

Technical data

Our hosting provider, Fly.io, handles the network connection to our server and may keep technical logs that include your network (IP) address for a short time, for security and to run the service. Our own logs record what happened (for example "a run was accepted") and do not contain your address or your identifier. The server looks at your address briefly, in memory, to stop abuse (for example too many submissions in a minute), and does not store it. If you use the web version of the game, the company that hosts the web page may also keep ordinary web logs.

Where your data is kept and for how long

• Where: our server is in London, in the United Kingdom.
• Daily Challenge results: a Daily Challenge can be played for 7 days. Its board, with the names and times on it, is then deleted automatically a day later.
• Classic results: the all-time Classic boards keep your best distance and score until you ask us to remove your entry, or until the game is closed down.
• Backups: the server makes automatic backup copies that are kept for 7 days, our hosting provider keeps disk snapshots for a short time, and we keep our own backup copies for no more than 90 days. A deleted entry disappears from backups when they expire.
• Removal on request: email contact@6dot6.org.uk with the name you used and roughly when you played, and we will remove your entry. We hold no account for you, so we cannot find an entry by anything else.

Children

RIB.IT is a casual arcade game. We do not knowingly collect personal information from children. The only information a player enters is a chosen name, which we ask players not to make their real name. If you believe a child has put personal information into a name, contact us and we will remove it.

Your rights

Depending on where you live (for example under the UK or EU GDPR) you may have the right to ask what we hold about you, to have it corrected or deleted, to object to our use of it, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). Contact contact@6dot6.org.uk.

Changes

If we change this policy we will update the date above and, where it matters, tell players in the game.