Privacy Policy

Last updated: November 4, 2025

Thank you for visiting RibCage Games’ website (the “Site”). This Privacy Policy explains how RIBCAGE GAMES LTD (“RibCage Games,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you use the Site, join our community channels, subscribe to updates, or otherwise interact with us online. It also describes your privacy rights and how to exercise them.

1) Who we are & how to contact us

Controller: RIBCAGE GAMES LTD, Arlozorov St 22, Ramat Gan, 5248138, Israel. Company number: 517216271.

Contact for privacy matters: [email protected]

If you are located in the European Economic Area (EEA) or the United Kingdom, RibCage Games is the controller of your personal data processed under this Privacy Policy. Depending on your interaction with us, we may appoint an EU/UK representative; if and when we do, we will update this Policy and our Site to reflect representative contact details.

2) Scope

This Policy covers personal data we collect via:

Our public website and any pages we operate that link to this Policy.
Email newsletter sign‑ups and press/partner inquiry forms.
Community and social channels we operate and link from the Site (e.g., Discord, X/Twitter, YouTube, TikTok, Instagram, LinkedIn).
Playtesting sign‑ups and research activities that we host or run in collaboration with trusted research partners.

This Policy does not cover data processed solely by third‑party platforms (e.g., Steam, Discord, X/Twitter). Those platforms’ own privacy policies apply to your use of their services.

3) Information we collect

(A) Information you provide directly

Contact details (name, email, company/role), when you subscribe to updates, request press materials, apply for playtests, or contact us.
Community information you share with us on official channels (e.g., Discord username, messages you send to us, bug reports, feedback).
Playtest & research information, such as survey responses, session feedback, and—if expressly agreed—voice/chat/recording data of your participation. Playtest sign‑ups and participation are always voluntary.
Job applications (if applicable): résumé/CV, portfolio links, and similar recruitment information.

(B) Information we collect automatically

Usage data about your interaction with the Site (pages viewed, referring/exit pages, timestamps) and device data (IP address, device type, browser type/version, general location inferred from IP). We use this to maintain and secure the Site, measure performance, and improve content.
Cookies and similar technologies (pixels, local storage) for core functionality (e.g., remembering preferences) and analytics. See §10 for details and choices.

(C) Information from third parties

Analytics & social media: We may receive aggregated insights from analytics providers or social networks when you interact with our official pages or content.
Creators/Press/Partners: If you are a content creator, journalist, or business partner, we may receive your public contact details from your site, business card, industry databases, or introductions in order to communicate about coverage, events, or collaboration.

4) How we use information

We use personal data to:

Provide and secure the Site, including preventing fraud, abuse, and technical issues.
Communicate with you, including sending developer updates/newsletters you request, replying to inquiries, and providing support.
Run community activities, events, and playtests, including eligibility checks, scheduling, feedback capture, and reporting in aggregated or de‑identified form.
Operate marketing and PR, including sending press kits to opted‑in press/creators, coordinating preview codes, and measuring campaign performance in aggregate.
Comply with legal obligations and enforce our rights.

We rely on the following legal bases (for EEA/UK): (i) Consent (e.g., newsletters, optional cookies, recordings in playtests); (ii) Contract (providing requested services or information); (iii) Legitimate interests (site security, minimal measurement, B2B outreach to the extent permitted by law, improving our services); and (iv) Legal obligations (record‑keeping, responding to lawful requests).

We share personal data only as necessary with:

Service providers / processors who help us host the Site, manage newsletters, run analytics, conduct user research and playtests, provide customer support, or assist with PR/marketing. They must follow our instructions and protect your data.
Community platforms (e.g., Discord) when you choose to interact there.
Legal & compliance recipients when required by law, regulation, or to protect our rights, users, or the public.
Business transfers: if we undergo a corporate event (e.g., merger, financing, or asset sale), data may be transferred consistent with this Policy and applicable law.

We do not sell your personal information, nor do we share it with third parties for their direct marketing without your consent.

6) International data transfers

We are based in Israel and may process data in Israel and other countries. Where applicable law requires, we apply appropriate safeguards for international transfers, such as Standard Contractual Clauses (SCCs) or other adequacy/transfer mechanisms permitted by law. You can contact us to learn more about these safeguards.

7) Data retention

We keep personal data only for as long as necessary to fulfil the purposes described above or as required by law (e.g., tax, accounting). Typical retention periods:

Newsletter & press lists: until you unsubscribe or we detect prolonged inactivity.
Playtests & research: for the duration of the study and analysis/reporting period, then archived or de‑identified.
Site logs & analytics: short‑to‑moderate periods needed for security, troubleshooting, and trend analysis.
Recruitment: usually up to 12 months (or as allowed/required by law) unless you ask us to keep your details for future roles.

8) Your rights

Depending on your location, you may have rights to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (subject to lawful exceptions).
Object to or restrict certain processing (including direct marketing).
Withdraw consent where we rely on consent (e.g., newsletters, optional cookies; withdrawing does not affect prior processing).
Data portability (receive your data in a structured, commonly used format).
Appeal certain decisions and lodge a complaint with your data protection authority.

To exercise these rights, email us at [email protected] with “Privacy Request” in the subject line. We will verify your identity and respond within the timeframes required by applicable law.

For U.S. residents, we honor applicable state privacy rights (e.g., to access, delete, correct, and opt‑out of certain targeted advertising or “sharing” as defined by state law). Where relevant, you may use a user‑enabled global privacy control (GPC) in supported browsers to signal cookie preferences; see §10.

9) Marketing communications

You can opt‑in to our newsletter or press updates and can opt‑out at any time via the unsubscribe link in our emails or by contacting us. If you opt‑out, we may still send you non‑promotional communications (e.g., service or policy updates).

10) Cookies & similar technologies

We use:

Strictly necessary cookies to operate core Site functions (e.g., security, load balancing, consent banner state).
Analytics cookies to understand Site performance and improve content. These are optional and only set with your consent where required.

Managing cookies: You can manage preferences via our consent banner (where available) and your browser settings. Some browsers and extensions support a Global Privacy Control (GPC) signal; when detected, we treat it as an opt‑out of certain non‑essential cookies/processing to the extent required by law.

11) Playtests & user research

From time to time, we conduct voluntary playtests or surveys. When you sign up, we’ll provide a study‑specific notice describing what we’ll collect (e.g., gameplay telemetry, survey answers, recordings where explicit consent is requested), how we’ll use it, and how long we keep it. We analyze results in aggregated or de‑identified form wherever feasible. Participation is optional and does not affect your use of the Site.

12) Children’s privacy

Our Site and community are intended for general audiences not directed to children under 13 (or a higher age where required by local law). We do not knowingly collect personal information from children without appropriate parental/guardian consent. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

13) Security

We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is 100% secure; we encourage you to use unique, strong credentials for third‑party platforms and to report any suspected security issues to us.

14) Third‑party links

Our Site may link to third‑party websites, services, or social features. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing personal data.

15) Changes to this Policy

We may update this Policy to reflect changes in our practices, technologies, or legal requirements. When we post changes, we will update the “Last updated” date above. If changes are material, we will take additional steps as required by law (e.g., seeking consent where necessary).

16) Contact & complaints

Questions or requests about this Policy? Email [email protected]

If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK or your national supervisory authority in the EEA).