سياسة الخصوصية

Privacy Policy (English)

Controller: Ahmed Abdulaziz · Contact: [email protected] · Data stored in: Saudi Arabia

1. What we collect

Nothing the game does not need. You can play against the computer with no account at all.

• Handle and display name — to identify you at the table and on the leaderboard.
• Password — stored only as an argon2id hash. We never keep the plaintext.
• Profile picture (optional) — automatically reviewed before any player sees it.
• Public chat messages — to run the public rooms and to answer reports.
• Reports you send or that name you — player safety, which is the condition on which a public room exists.
• Match results and rating — for scoring, leaderboards and seasons.
• Purchases and wallet — to deliver what you bought and to settle any dispute.
• Friends and presence — to invite people you know.

What we do not collect

• No tracking. No analytics SDK, no advertising identifier, no third-party SDK that sends your data anywhere.
• We do not sell your data and do not share it for marketing.
• Your session does not store your IP address. The session table holds a token digest and its dates, nothing else.

Your IP is read transiently at sign-up and sign-in to rate-limit abuse, and is not stored against your account.

2. Retention and deletion

• You can delete your account in the app — Edit account → delete.
• On deletion every session is revoked immediately, your handle is released for reuse, and your match history is anonymised rather than left under your name.
• Public chat messages are deleted automatically after seven days, whether or not you delete your account. The sweep runs on the server hourly and at every boot.
• Reports are kept beyond that — deleting the evidence when acting on it is how a moderation record loses its own history. A report holds the reason and your note, not the conversation.

3. Your rights

Under Saudi PDPL you may request access, correction, deletion, or object to processing.

• Access: Account → Download my data — one file with everything we hold, which also names every store it consulted.
• Correction: your name, picture and name visibility, from the same screen.
• Deletion: from that screen too.
• Objection: write to the address above.

4. Children

The minimum age to hold an account is 13. At sign-up we ask for a year of birth and take the answer as given — we ask for no document and verify no identity.

• The year is used to check the threshold and then discarded: the account stores only that it passed, not a date and not an age.
• Under-13s may not create an account, and can still play against the computer without one, collecting nothing about them.
• If we learn an account belongs to a child under 13 we delete the account and its data. A parent or guardian may ask us to delete a dependant's account at the contact address above.

5. Changes

If this policy changes the date above changes with it, and we will say so in the app if the change is material.