Ribat

Privacy Policy

Last updated: June 2026

1. What Ribat is

Ribat is a hackathon and tech-event management platform. It lets organizers run registration, team formation, check-in, judging, and announcements for their events. Participants use Ribat to register, join teams, submit projects, and receive updates.

2. Information we collect

We collect information in three ways:

  • Account data — email address, full name, and avatar when you sign up or connect a third-party provider (GitHub, Google).
  • Profile data — bio, skills, and links you add to your public profile.
  • Event data — registration answers, team membership, project submissions, and check-in timestamps associated with events you participate in.
  • Usage data — standard server logs (IP address, browser, pages visited) retained for up to 30 days.

We do not collect payment information. Ribat has no paid tiers that require billing data.

3. How we use your information

  • Authenticate you and secure your account.
  • Show your profile to other participants in the same event.
  • Send transactional emails — registration confirmations, QR check-in tokens, and announcements broadcast by event organizers you registered with.
  • Let organizers view registrations, team rosters, and submission data for events they administer.
  • Improve the platform through aggregated, anonymized usage analytics.

We never sell your data. We never use your data to train AI models.

4. Who can see your data

  • Other participants in the same event can see your name and public profile.
  • Event organizers can see your registration details, team, submission, and check-in status for their event.
  • Judges can see submitted project titles, descriptions, and media for projects assigned to them.
  • Ribat staff may access data to investigate abuse reports or resolve support issues.

5. Third-party services

We use the following sub-processors:

  • Supabase — database and authentication (EU or US region).
  • Vercel — hosting and edge delivery.
  • Resend — transactional email delivery.

Each sub-processor is contractually bound to process data only as instructed.

6. Data retention

Your account and associated event data are retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Aggregated, anonymized analytics may be retained indefinitely.

7. Cookies

Ribat uses one first-party session cookie to keep you logged in. No third-party tracking or advertising cookies are used.

8. Your rights

You may request access to, correction of, or deletion of your personal data at any time. To exercise any of these rights, contact us.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced via the in-app broadcast system. Continued use of Ribat after a change takes effect constitutes acceptance.

10. Contact

Questions about this policy? Reach out and we'll respond within 5 business days.