Privacy
Technical information for the Rilto game and website. Reviewed: 24 October 2026.
Playing in the native app
Game rules, computer opponents, scores and sound generation run on your device. The reviewed app code has no account system, advertising or analytics SDK, or service that uploads gameplay to the developer. It does not request access to contacts, the camera, microphone or location. Sound playback does not record the microphone.
Android loads the bundled game through a local asset loader and declares no Internet permission. The Apple app loads bundled files through a server bound to 127.0.0.1 on the same device. This loopback connection is not an Internet gameplay server. Native gameplay does not need an Internet connection.
Saved play and settings
Game state, recent move history, scores and game, language, appearance, territory-chart and audio preferences are stored in local WebView or browser storage. This enables resuming play and remembering your choices. Rilto has no developer-operated account or save-sync service.
Local data persists between sessions until replaced or removed, subject to browser and operating-system storage controls. Clearing this site's data removes browser saves and preferences. Android's app-storage controls can remove native app data. On Apple platforms, deleting the app is different from offloading it, which can retain data. Clearing data is not a request to erase platform backups.
Operating-system backups and transfers
Local storage does not mean data can never leave your device. Android permits backup and explicitly includes WebView data in cloud backup and device transfer. Apple device backup or transfer may also include app data, depending on the platform and your settings. These processes are handled by the operating system and your backup provider, not a Rilto sync server. Manage backup copies and retention through those services; no fixed backup retention period is promised here.
Website and offline caching
The web version and this page are hosted through Cloudflare. Loading them online sends network requests to the hosting service, including your IP address and technical request information such as the requested URL and browser headers, to deliver the website and handle network security. This is separate from native offline gameplay; it is not a gameplay upload service.
The web game stores saves and preferences in browser storage. After a successful online load, its service worker can cache game files and this privacy document for offline use. Browser eviction or clearing site data can remove that cache. A first visit without a cached copy needs an Internet connection.
No tracking script, form, cookie-setting code or remote font is included in this privacy document. The reviewed game code contains no advertising, analytics or gameplay-upload integration. Hosting-level log settings, retention periods, processing locations and international-transfer arrangements have not been verified for this deployment; this page does not invent them or claim that the host processes no personal data.
Other services and reference
App stores, operating-system services, browser services and backup providers operate under their own terms and privacy information. Their processing is not described as collection by the game.
The existing official hug.systems privacy notice describes the hug.systems online offering. It is provided as a separate reference, not incorporated as Rilto's policy. Its existence does not establish that hug.systems is Rilto's controller; its processing claims and retention periods are not transferred to this game. Opening that external link sends a request to that website.
Scope of this information
This page describes the reviewed technical data flows. It does not identify a confirmed legal controller or provide a privacy-rights contact, and it is not a certification of GDPR or app-store compliance. Controller identification, any required public contact and rights information, and deployment-specific hosting disclosures remain unresolved. A private store-portal contact is separate and does not replace information a public privacy policy is required to contain.