Privacy Policy
Last updated: October 2026
Introduction
Rip Largo: Ghost of Earth ("the Game") is published by Rip Largo. This Privacy Policy explains how we handle information when you use our Game.
The Game does not require an account, show advertising, or track you across apps and websites. We collect limited pseudonymous usage information to understand whether the Game works and where players get stuck. “Pseudonymous” means events use a random installation identifier rather than your name or account; it does not mean that all technical processing is anonymous.
Information We Collect
Game progress and Level Lab files are stored locally unless you explicitly export or share a level. If usage analytics is enabled, the Game sends limited product-interaction events and technical information to TelemetryDeck.
- The Game does not require an account or login.
- Game progress is stored locally on your device using standard iOS storage (UserDefaults). The local save file never leaves your device; analytics may separately record bounded mission IDs, attempt counts, outcomes, durations, and stars.
- Custom Level Lab documents are stored in the app's local Application Support folder. Exporting a file uses the iOS share sheet and sends it only to the destination you choose.
- Analytics events include actions such as opening the Game, completing onboarding or a mission, viewing an unlock screen, product identifiers and purchase/restore outcomes, settings changes, and Level Lab actions.
- Each installation receives a random identifier that is hashed before transmission. This stable identifier lets us associate events from the same installation, not your name or Apple ID. We also receive SDK-provided app version, operating system, device model and class, display, locale, time-zone, accessibility-setting, and run-environment information.
We do not send your name, email address, advertising identifier, precise location, free-form text, level names or documents, receipts, prices, or StoreKit transaction identifiers with analytics events. We do not use analytics data for cross-app tracking or advertising.
You can turn analytics off at any time under Settings → Usage Analytics. This stops new analytics collection and new attribution updates. Events collected before opt-out may still be delivered from the SDK's queue, and requests already in flight cannot be recalled. Turning analytics off does not delete events already received by the provider.
In-App Purchases
The Game offers optional in-app purchases to unlock additional chapters and content. Payments are processed by Apple through the App Store. The Game receives signed entitlement information needed to unlock and restore content, but we do not receive your payment-card details or Apple ID and do not send raw transaction data to our analytics service.
For information about how Apple handles your purchase data, please refer to Apple's Privacy Policy.
Third-Party Services
TelemetryDeck processes the analytics information described above on our behalf so we can measure the Game's usage and reliability. Its SDK may process a network address as part of delivering a request, but we do not include network addresses as analytics properties. See TelemetryDeck's Privacy Policy.
Apple's AdAttributionKit may provide Apple and participating advertising networks with aggregate, privacy-preserving conversion milestones such as first open, onboarding completion, or purchase completion. These postbacks do not identify a player and are not joined to a TelemetryDeck installation. There are no ads in the Game, and we do not use the App Tracking Transparency identifier or track activity across other companies' apps or websites.
Website Forms
The website and its forms are separate from in-game analytics. If you submit feedback or level designs through riplargo.com, we collect the information you voluntarily provide, which may include:
- Your name
- Your email address
- Your message content or level submission data
Feedback and level submission data is used solely to respond to your inquiry, investigate a reported problem, or review your submission. We do not sell this information or combine it with in-game analytics.
Website submissions are processed and stored using Google Firebase. Our form service also processes your network address to secure the service and enforce request limits. The current service stores that address with the submission; Firebase and Google Cloud may also process request metadata in security and operational logs.
Website submissions and their associated network address are retained for up to 24 months from submission for support history, abuse prevention, and dispute handling, unless a longer period is legally required. You can request earlier deletion at any time by emailing privacy@riplargo.com. Provider security logs and backups may persist for their configured retention periods before deletion cycles complete.
Friend Links (Planned, Not Yet Enabled)
If hosted Level Lab friend links are enabled later, creating a link will upload the level document without requiring a name, email address, or account. The service is designed to store the level for no more than 30 days, use a one-way hash of network information for abuse rate limiting, and support creator deletion and recipient reporting. Local file sharing remains available without uploading to Rip Largo.
Owner/legal review required before activation: confirm Firebase processing regions, exact log and backup retention, child-user treatment, moderation response times, and the final deletion/contact procedure.
Children's Privacy
The usage analytics described above can apply during gameplay and local Level Lab use when enabled. Children should not include names, contact details, or other personal information in shared level text or use the separate website submission forms without a parent or guardian.
Owner/legal review required: confirm age-rating wording and child-user requirements before enabling hosted friend links.
Data Retention
Your game progress and custom-level library exist locally on your device and remain under your control until you delete the app or individual levels. Files you export are controlled by the destination you choose.
Our planned raw analytics retention limit is 90 days. Provider configuration and this policy must be confirmed before production analytics is enabled. Turning analytics off stops new collection, not delivery of previously queued events; removing the app's local data creates a new random installation identifier.
Website feedback and level submissions are retained as described under Website Forms. If you would like identifiable submission data deleted sooner, contact us at the email below.
Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, delete, or port your data.
Analytics data is associated only with a random installation identifier and no account is available for us to use to identify your records. You can stop future analytics collection in Settings. For website submissions, or if you have a privacy request, contact us to request access to, correction of, or deletion of data we can identify.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make significant changes to how we handle data, we will provide prominent notice (such as an in-app notification or update notes).
Contact Us
If you have questions about this Privacy Policy, contact us at privacy@riplargo.com.