سياسة الخصوصية

Privacy Policy (English)

Controller: Ahmed Abdulaziz · Contact: [email protected] · Data stored in: Saudi Arabia

1. What we collect

Nothing the game does not need. You can play against the computer with no account at all.

• Handle and display name — to identify you at the table and on the leaderboard.
• Password — stored only as an argon2id hash. We never keep the plaintext.
• Profile picture (optional) — automatically reviewed before any player sees it.
• Public chat messages — to run the public rooms and to answer reports.
• Reports you send or that name you — player safety, which is the condition on which a public room exists.
• Match results and rating — for scoring, leaderboards and seasons.
• Purchases and wallet — to deliver what you bought and to settle any dispute.
• Friends and presence — to invite people you know.
• The bio you write about yourself (optional) — shown to other players on your card, and checked before it is saved in the same way chat messages are.
• Gifts and marks — a record of what you sent and were sent, and to answer any report about it. The mark shown on your profile is the one you chose to wear; the counts behind the rest are visible to nobody but you.

What other players can see

Any player can open your card from the table, the chat, the leaderboard or their friends list. It shows your display name and picture, your level, your ranks and your match record, the bio you wrote, and the mark you chose to wear.

You control that from your account screen:

• Profile privacy — “private” or “friends only” hides the record, the bio and the ranks from anyone not allowed. Your name and picture remain, because you are sitting at the table already.
• Hide my name — hides your display name from other players everywhere: the table, the leaderboard, the chat and the card.
• Blocking — someone you block cannot open your card, and is not told that you blocked them.

Nobody sees the counts of marks you were sent, your XP, or the privacy setting itself.

Phone notifications

If your phone allows this app to post notifications and you have not turned them off in Settings, we store a device token issued by Google (FCM): a string that addresses the app installed on your device, along with the platform, your language — so an announcement arrives in the one you read — and when the app was last opened. The token carries no name, number or location.

The permission is your system's: on Android 13 and later it is granted only by your explicit yes, and before that notifications are allowed by default and you can refuse them to this app in your device settings. The app never asks on first launch.

The token is stored against the device, not against you. If you are signed in it is attached to your account as well, which is the only thing that could address a notice to a person rather than broadcast it; as a guest it is attached to nobody, and nothing but an announcement sent to everyone can reach it.

Turning “Phone notifications” off in Settings deletes the token from our servers rather than merely disabling it, and so does uninstalling the app — Google tells us the address is dead and we drop it. Deleting your account deletes any token attached to it. Sending a notification means giving that token to Google, who deliver it to your device.

What we do not collect

• No tracking. No analytics SDK, no advertising identifier, no third-party SDK that sends your data anywhere.
• We do not sell your data and do not share it for marketing.
• Your session does not store your IP address. The session table holds a token digest and its dates, nothing else.

Your IP is read transiently at sign-up and sign-in to rate-limit abuse, and is not stored against your account.

2. Retention and deletion

• You can delete your account in the app — Edit account → delete.
• On deletion every session is revoked immediately, your handle is released for reuse, and your match history is anonymised rather than left under your name.
• Public chat messages are deleted automatically after seven days, whether or not you delete your account. The sweep runs on the server hourly and at every boot.
• Reports are kept beyond that — deleting the evidence when acting on it is how a moderation record loses its own history. A report holds the reason and your note, not the conversation.

3. Your rights

Under Saudi PDPL you may request access, correction, deletion, or object to processing.

• Access: Account → Download my data — one file with everything we hold, which also names every store it consulted.
• Correction: your name, picture and name visibility, from the same screen.
• Deletion: from that screen too.
• Objection: write to the address above.

4. Children

The minimum age to hold an account is 13. At sign-up we ask for a year of birth and take the answer as given — we ask for no document and verify no identity.

• The year is used to check the threshold and then discarded: the account stores only that it passed, not a date and not an age.
• Under-13s may not create an account, and can still play against the computer without one, collecting nothing about them.
• If we learn an account belongs to a child under 13 we delete the account and its data. A parent or guardian may ask us to delete a dependant's account at the contact address above.

5. Changes

If this policy changes the date above changes with it, and we will say so in the app if the change is material.