Privacy Policy

Last updated 12 October 2026

This policy explains what personal data Ruffle3D ("we") processes, and why. We are the data controller for the data described here.

The short version: the Ruffle3D application doesn't collect, send or store any of your data on our systems. Your designs stay on your device. We don't collect personal data. If you post on GitHub (issues, discussions or security reports), that happens on GitHub under GitHub's own privacy statement.

1. The Ruffle3D application

Ruffle3D runs on your device. Your projects, versions, thumbnails and preferences are stored in your browser's local storage (IndexedDB and localStorage) for the address the app runs on. They never leave your device unless you export or share them yourself. The app contains no analytics, crash reporting, advertising or tracking. Once a day it checks for a newer version by downloading a small public file (downloads/latest.json) from this website; that request carries no information about you or your designs, only what any web request does (see section 2), and you can turn it off in Preferences ▸ General ▸ Check for updates. If you use the hosted version at this website's /app/ address, our web host receives the same basic request data as for any web page (see section 2), but not your designs.

2. This website

The website doesn't use analytics or advertising cookies, and doesn't load fonts or scripts from third parties. Our hosting provider keeps standard server logs to run and secure the site: IP address, date and time, the page requested and your browser's user agent. We use these logs only to operate and protect the website, and they are deleted within 30 days.

3. Downloads

Ruffle3D is free and needs no account, so downloading it doesn't involve any personal data beyond the standard server logs described above.

4. GitHub

Support, questions and contributions happen on GitHub. Anything you post in issues, discussions or pull requests is public, and GitHub processes it under the GitHub Privacy Statement. Don't post personal information, and only attach project files you're happy to share publicly. You can edit or delete your own posts at any time. Private security reports are visible only to you and the maintainers.

5. Sharing

We share personal data only with service providers that help us run the business: our web host. They process it on our instructions or as required by law. We don't sell personal data, or share it for advertising.

6. International transfers

Our service providers may process data outside your country. Where the law requires, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict our processing of it, and to complain to your data protection authority. California residents have the right to know about, delete and correct their personal information, and the right not to be discriminated against for using these rights. We don't sell or share personal information as defined by the CCPA. Because we hold no personal data about you outside GitHub, most requests are answered by GitHub's own tools (edit or delete your posts there). For anything else, ask in GitHub Discussions without including personal details, and we'll arrange a private way to continue.

8. Children

Ruffle3D isn't directed at children under 13, and we don't knowingly collect their personal data. Students can use the app without giving us any data.

9. Changes

We'll post any changes to this policy on this page, and update the date at the top.

10. Contact

Ruffle3D. Questions: GitHub Discussions.