Skip to content
Ribat

Privacy Policy

Last updated: September 2026

1. What Ribat is

Ribat is a hackathon and tech-event management platform. It lets organizers run registration, team formation, check-in, judging, and announcements for their events. Participants use Ribat to register, join teams, submit projects, and receive updates.

2. Information we collect

We collect information in three ways:

  • Account data — email address, full name, and avatar when you sign up or sign in with Google.
  • Profile data — bio, skills, and links you add to your public profile.
  • Event data — registration answers, team membership, project submissions, and check-in timestamps associated with events you participate in.
  • Usage data — standard server logs (IP address, browser, pages visited) retained for up to 30 days.

We never store card numbers. If you buy a paid plan, payment details are handled by our payment processor.

3. How we use your information

  • Authenticate you and secure your account.
  • Show your profile to other participants in the same event.
  • Send transactional emails — registration confirmations, QR check-in tokens, and announcements broadcast by event organizers you registered with.
  • Let organizers view registrations, team rosters, and submission data for events they administer.
  • Improve the platform through aggregated, anonymized usage analytics.

We never sell your data. We never use your data to train AI models.

4. Who can see your data

  • Other participants in the same event can see your name and profile (bio, skills, links) inside the event. Your profile only appears on public event pages if you turn on “Show me on public participant pages” in your settings.
  • Event organizers can see your registration details, team, submission, and check-in status for their event.
  • Judges can see submitted project titles, descriptions, and media for projects assigned to them.
  • Ribat staff may access data to investigate abuse reports or resolve support issues.

5. Third-party services

We use the following sub-processors:

  • Supabase — database and authentication (EU or US region).
  • Vercel — hosting and edge delivery.
  • Resend — transactional email delivery.

Each sub-processor is contractually bound to process data only as instructed.

6. Data retention

Your account and associated event data are retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Aggregated, anonymized analytics may be retained indefinitely.

7. Cookies

Ribat uses one first-party session cookie to keep you logged in. No third-party tracking or advertising cookies are used.

8. Your rights

You can download a copy of your data or permanently delete your account at any time from Profile & account settings. Every event email includes a one-click unsubscribe link. For anything else — access, correction, or questions — contact us.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced via the in-app broadcast system. Continued use of Ribat after a change takes effect constitutes acceptance.

10. Contact

Questions about this policy? Reach out and we'll respond within 5 business days.