Skip to content
Sahrat
Games Rules Verify
Join العربية
Games Rules Verify Join Investors

Privacy notice

Last updated 8 October 2026 · Shard Soft EOOD

In short: If you join the waiting list we keep your name, your mobile number or email, your country and your favourite game, only to tell you when Sahrat launches. We do not sell it or use it for advertising. You can have it deleted at any time on /delete-account or by writing to us.
  • Who we are
  • What we collect
  • If you register interest as an investor
  • Cookies
  • Why we use it, and on what basis
  • Who sees it
  • How long we keep it
  • Your rights
  • Leaving the waiting list
  • Contact us
  • Changes

Who we are

sahrat.online, the Sahrat waiting list and the investor interest form are run by Shard Soft EOOD, a company registered in Bulgaria, in the European Union, based in Sofia. Contact: use the form on our contact page. We are the controller of the personal data described here.

This notice covers the website, the waiting list and the investor interest form. The Sahrat app has its own privacy notice.

The waiting list and the investor form are for people aged 12 or over.

Sahrat app privacy notice

What we collect

When you join the waiting list:

  • your name;
  • your mobile number or your email address (one of the two);
  • your country, and your favourite game if you choose one;
  • the language of the page you joined from, and how you found us: the campaign name in the link you followed (for example ?source=…) and, if a friend shared their link, their share code;
  • when you joined, which version of the notice you agreed to, that you confirmed you are 12 or older (a tick, never your birth date), whether you asked for launch messages, and when you confirmed your email;
  • your own share code, and how many people joined through it.

If you ask us to delete data on /delete-account, we keep the mobile number or email you typed and the language of the page. If you email us, we keep your message.

Like every website, our hosting and security providers process your IP address and technical details of each request (browser, page, time) to deliver the site and protect it from abuse.

If you register interest as an investor

On /investors we keep what you send: your name, email, mobile (if given), country, whether you are an individual, a company or a fund, the amount and currency you have in mind (if given), your note and the page language. We use it only to contact you privately about your interest, because you asked us to (steps at your request before any agreement), and to keep a record of who contacted us (our legitimate interest). It is mailed to our team’s inbox and kept in our admin panel; our team gets an alert with the type and country only. We keep it for 2 years after our last contact with you, unless we agree something else with you, and delete it earlier if you ask. Registering interest is not an offer and commits nobody to anything.

Cookies

When you send a form, or open the pages that follow it (such as confirming your place), the site sets one session cookie that the form needs to work (it protects the form and shows you errors); it is deleted when it expires. To count visits we use Google Analytics, which sets the cookies _ga and _ga_NQN67T9405 in your browser (they hold a random visitor ID and are kept for up to two years). Pages with a private link, such as a table invite or a confirmation link, are not measured. We use no advertising cookies.

Why we use it, and on what basis

  • To keep your place on the list and, only if you tick the separate box for launch messages, to tell you when Sahrat launches: your consent, given when you join and, for launch messages, by that separate tick. You can withdraw either at any time; that does not affect what we did before.
  • To understand where interest comes from (countries, games, campaigns, how many people joined through a friend’s link), in counts: the same consent.
  • To keep the site and the list safe from spam and abuse (rate limits, a hidden form field, refusing fake entries): our legitimate interest in running a secure service.
  • To handle deletion and other requests about your data: our legal obligation.

We confirm an email address by sending one link to it. We do not send anything to a mobile number while you wait. If you ticked the box for launch messages, we tell you once at launch, by email or by SMS or WhatsApp to your mobile, and we send no marketing beyond that without asking again.

Who sees it

Our team. We do not sell your data or share it with anyone for advertising. These providers process it for us, under contracts that oblige them to protect it:

  • Google Cloud: hosting and database, in Frankfurt (EU);
  • Cloudflare: delivering and protecting the website;
  • Microsoft 365: sending our emails;
  • Google reCAPTCHA: checks that a form on this website (contact, waiting list, investor interest, deletion request) is filled in by a person and not a bot; Google receives your IP address and browser details for that check, and its Privacy Policy and Terms of Service apply;
  • Google Analytics: counts visits to the public pages (which page, the site you came from, your country and device type) so we can see what people read; Google receives your IP address and that data, and its Privacy Policy and Terms of Service apply. Private links and the part of an address after the page name (except campaign tags such as utm_source) are never sent;
  • Sentry: error reports from the website, in the EU, set up not to collect personal data;
  • Telegram: an alert to our team’s private group when someone joins, with your name, your contact mostly hidden (like +9665•••1234 or a•••@gmail.com), country and game. Your full number or email never leaves our system.

Some of these companies are in the United States. Where your data leaves the EU, it is protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

  • An email that is never confirmed: deleted after 30 days.
  • Your waiting-list entry: at most 12 months after you joined; it is deleted automatically then, and earlier if you ask.
  • A deletion request: as long as we need to show we handled it, and no longer than 3 years.
  • Technical request logs: about 30 days.

Your rights

You may ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable form, and you may withdraw your consent at any time. We answer within one month.

You may also complain to a data protection authority: in Bulgaria, the Commission for Personal Data Protection (cpdp.bg), or the authority where you live. If you live in Saudi Arabia, you also have rights under the Personal Data Protection Law.

Leaving the waiting list

Send the mobile number or email you joined with on our deletion page, and your waiting-list entry is removed straight away. You can also write to us.

Delete my data

Contact us

For any question about your data, write to us. We reply in Arabic or English.

Contact us

Changes

If we change this notice, we publish the new version here with its date. If we want to use your data for anything new, we ask you first.

Sahrat

Sahrat is by Shard Soft EOOD, a company in the European Union.
© 2026 Shard Soft EOOD

Games Verify a match Support Contact us Privacy Terms of Use Delete account Investors