Privacy policy
Last updated: 26 October 2026
In brief
- Rikiki shows no advertising, never sells data, uses no analytics tools and sets no tracking cookies.
- To play, we only keep a nickname, a secret code and the content of your games. No real name, no e-mail address, no phone number, no location.
- Two services from outside companies load only if you accept them: Google reCAPTCHA verification and GIFs (KLIPY). You can change your mind at any time in ⚙️ Settings.
- You can ask to see, correct or delete your data by writing to admin@rikikigame.com.
1. Who is responsible for your data?
The data controller is K.vroom, publisher of the Rikiki game (a free, non-commercial site). Contact for any question about your data: admin@rikikigame.com.
2. Which data, why, and for how long?
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Profile: nickname, colour, technical player identifier, creation date, secret code (handled by Google Firebase Authentication, which the publisher cannot read). A technical, fictitious e-mail address (in the form nickname@rikiki.invalid) is used as a sign-in identifier. | Create your profile, recognise you and let you sign in again. | Performance of the service you requested (art. 6.1.b) | As long as your profile exists, or until you ask for deletion. |
| Guest account: an anonymous identifier generated automatically when you play without a profile. | Let you play without creating a profile. | Performance of the service (6.1.b) | As long as your device keeps it; deleted on request. |
| Games: nickname, colour, cards, bids, tricks, scores, game state. | Run the online game. | Performance of the service (6.1.b) | Waiting rooms and games that were started and then abandoned: deleted automatically after 24 hours without activity, when the publisher opens the game. Others: deleted during a clean-up of games with no activity for more than 30 days, done by the publisher about once a month. |
| Chat: messages, emojis, chosen GIFs, with your nickname and the time. | Talk during the game. | Performance of the service (6.1.b) | Deleted with the game (see above). |
| Friends and invitations: nicknames, friend requests, invitations. | Play with your friends. | Performance of the service (6.1.b) | Until the friend or the profile is deleted. |
| Presence: "online", code of the current game, time, updated every 40 seconds while you are signed in with a profile. | Show your friends that you are online. | Performance of the service (6.1.b) | Only the latest state is kept (it overwrites the previous one); deleted with the profile. |
| League: nickname, rank, score, successful contracts, gap and trump plays per game, and who ruined whose contracts ("duels"); confirmation of the result by the players. | Ranking, crown, rewards, integrity of the ranking. | Performance of the service (6.1.b) and legitimate interest in keeping a reliable ranking (6.1.f) | Kept to preserve the ranking history; deleted or anonymised on request. |
| Game analysis: nicknames and cards played. | "Analysis" screen (statistics per player and per robot) and improvement of the robots. | Legitimate interest (6.1.f) | Kept without time limit; deleted or anonymised on request. |
| Poll vote (name of the deck) linked to your technical identifier. | Choose the name of the card deck. Only the publisher can read the votes; the result is published as a percentage. | Legitimate interest (6.1.f) | Until the profile is deleted, or on request. |
| Bug report (if you send one): your text, the game version, your device and browser type, screen size, language, the current screen or game (code, state, round), the latest technical errors, your nickname if you have a profile, and your technical identifier. Never your secret code or your cards. | Understand and fix problems in the game. Nothing is sent without your click. Only the publisher can read the reports. | Legitimate interest (6.1.f) | Deleted after 180 days at the latest (automatic deletion when the publisher opens the game), or sooner once the problem is fixed; on request. |
| Technical connection data: IP address, browser type, time. | Send the game page and make it work; security. | Legitimate interest (6.1.f) | According to the retention periods of GitHub and Google (see below), not on our side. |
| Your choice about reCAPTCHA security and GIFs. | Respect your choice. | Legal obligation (GDPR art. 7.1: being able to prove consent) | Stored on your device for 12 months at most, then asked again. |
3. What Rikiki does not collect
Your real name, a real e-mail address, a phone number, a postal address, your location, your contacts, photos, microphone or camera, payment details. No advertising trackers, no analytics tools (neither Google Analytics nor anything similar), no browser fingerprinting.
4. Who receives your data?
Other players
Your nickname and colour are visible to the players of your game. The chat is visible to the players of the game. Your "online" status is visible to your friends. The league ranking (nickname, rank, score) is visible to all players of the game. Do not put your real name or any personal information in your nickname or in the chat.
Technical providers
- Google (Firebase): database hosted in Belgium (region "europe-west1") and sign-in service. Google acts on our behalf to store the game data.
- GitHub (GitHub Pages): hosts the pages of the site and sends them to your browser. GitHub sees your IP address when you open the site.
- Google, for the game scripts: the Firebase programs are loaded from Google's server (gstatic.com), which shows it your IP address. This is essential for the game to work.
- Google reCAPTCHA (security check): only if you click "Accept". Google then receives your IP address and information about your browser. If you refuse, the game works exactly the same.
- KLIPY (chat GIFs): only if you allow GIFs. KLIPY then receives your IP address, and your search words when you look for a GIF. The GIFs themselves are displayed from KLIPY's server.
- Fonts are hosted by the site itself: no request to Google Fonts.
Rikiki does not sell, rent or give your data to anyone else.
5. Transfers outside the European Union
Google and GitHub are US companies. Data transfers to the United States are covered by the "EU-US Data Privacy Framework" and/or by the European Commission's standard contractual clauses, depending on the provider. The game data is stored in Belgium.
6. Your rights
At any time you can ask to access your data, to have it corrected or deleted, to restrict its use, to receive it in a readable format (portability), or to object to processing based on legitimate interest. You can also withdraw your consent at any time in ⚙️ Settings (withdrawing does not undo what was done before).
To do so, write to admin@rikikigame.com stating your nickname. To avoid someone else's account being deleted, we will ask you to prove that the profile is yours. We answer within one month.
Account deletion: your profile page has a "Delete my account" button. It erases your sign-in access, your friends and your presence, and empties your profile. Your nickname is deleted or replaced by "Former player" in the league and in the analysis. Games that are still stored disappear at the next clean-up. A technical record of the profile name (without your data) may remain until the publisher purges it.
If you think your rights are not respected, you can lodge a complaint with the Data Protection Authority (Belgium): Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, autoriteprotectiondonnees.be.
7. Children and teenagers
In Belgium, a young person can consent alone to an online service from the age of 13 (article 7 of the law of 30 July 2018). Rikiki is intended for people aged 13 and over. Below that age a parent's agreement is needed. Rikiki does not ask for your date of birth.
8. Security
Exchanges are encrypted (HTTPS). Access to the database is limited by security rules: each player can only read and write what concerns them or their game. Your secret code is handled by Google Firebase Authentication and cannot be read by the publisher. No system is infallible: choose a secret code that you do not use anywhere else.
9. Automated decisions
Rikiki makes no automated decision that would have a legal effect on you. The ranking is a simple game calculation.
10. Changes to this policy
If this policy changes significantly, the update date above changes and, if needed, the game tells you.