Sahrat app privacy notice
Who we are
The Sahrat app is run by Shard Soft EOOD, a company registered in Bulgaria, in the European Union, based in Sofia. Contact: use the form on our contact page. We are the controller of the personal data described here.
This notice is for the app. The website sahrat.online and the waiting list have their own notice (Privacy notice).
Sahrat is for people aged 12 or over.
What we collect
You can play as a guest with no account, or sign in. Depending on what you do, we collect:
- When you sign in: your name, email and picture from Apple, Google or Facebook (whichever you choose; they send only what you allow), or your mobile number if you sign in with a code sent to it;
- Your game profile: your display name, your picture or a ready-made one from the app, your flag (you choose it; the app suggests it from your phone’s region setting, not from your location), your level, coins and items in the game;
- Your play: the tables you joined, results, rankings and achievements, your friends and block list, and gifts you sent or received;
- What you write at a table: chat messages (up to 200 characters) and quick emotes, shown to the players at the table and passed through a word filter;
- App notifications: if you allow notifications, your device’s notification token (an Expo push token), device type, language, time zone and app version. We collect it from signed-in players and from guests, where it is tied to your game player id;
- Usage statistics: how the app is used (opening the app, starting and finishing games, opening the shop, signing in), with your game player id turned into a scrambled code, the platform, the app version, and the campaign that brought you to the app. We use no advertising ID and no third-party analytics SDK. If you decline analytics in the app, nothing is sent;
- Your feedback: if you send a note from Settings, we keep its text and the contact you chose to add (optional), with the app version and build, the platform (iOS or Android), the OS version, your language, the game and match you were in and the screen you were on;
- Reports: if you report a player, we keep the report, its reason and your note, the reported message and the last lines of chat at the table;
- Technical data needed to run the service: your IP address, device and system type and connection time, to deliver the game and protect the service from abuse.
In-app purchases are switched off for now. If we switch them on, we will update this notice first; your card details go to Apple or Google and we never see them.
Voice
The microphone works only after you tap it, in the lounges or at a table, and the app asks your permission the first time. Your voice is passed live to the players in the same room through our own LiveKit server. We do not record or store it (the server has no recording at all). If you report a player, the report contains text only, never audio.
What we do not collect
- Your location;
- Your contacts, photos or camera;
- Your device’s advertising ID; we do not track you across apps and websites;
- The app currently has no advertising or third-party analytics libraries. If we add any, we will update this notice and ask you first where the law requires it.
Why we use it, and on what basis
- To run the game: your account, profile, tables, results, friends and rankings. This is to provide the service you asked for;
- To send you notifications: game notifications (invitations, rematches, tournament and table alerts, rewards, new games and season news) and reminders to come back, at most one a day, with quiet hours and a switch for each category in Settings. This is with your consent, which you can withdraw by switching categories off in Settings or in your device settings;
- To keep players safe: the word filter, reports, blocks and suspensions, and to stop cheating and manipulation. This is our legitimate interest in running a safe service;
- To answer your feedback and fix faults: our legitimate interest;
- To handle deletion and other requests about your data: a legal obligation.
Moving data outside your country
The game server is in Qatar, our website and sign-in accounts are in the European Union, and some of our providers are in the United States. Where data leaves the EU we rely on suitable safeguards such as the standard contractual clauses or the EU–US Data Privacy Framework. If you live in Saudi Arabia, your data is transferred under the controls of the Personal Data Protection Law.
How long we keep it
- Your account, profile and play: until you delete your account. After that it is deleted from our website and from the game server, and your friend list and your place in the rankings are deleted too. Backups roll off within 14 days;
- Your notification token: until you delete your account, you turn notifications off, or the system reports the token invalid. Tokens not used for 90 days are removed;
- Usage statistics: 90 days, then deleted;
- Chat: shown live; the latest messages are kept with the table only while it is running. The reported message and the last lines are kept with the report;
- Reports: on our website, every report you filed and every report about you is deleted with your account. The game server keeps only an anonymous safety record (identifiers, no name), and reports you filed that were never sent are deleted;
- Technical logs (such as connection addresses): rotated automatically and kept only a short time (rotated by size);
- Your feedback: until we have dealt with it, at most 12 months (a policy we will enforce);
- Records needed for fair play (identifiers without your name): kept so that any match can be checked;
- Purchase records (when purchases open): as long as the law requires, without your name after deletion.
Your rights
You can ask for a copy of your data, to have it corrected or deleted, to restrict or object to its use, or to receive it in a portable format, and you can withdraw consent at any time. We reply within a month.
You can also complain to a data protection authority: in Bulgaria the Commission for Personal Data Protection (cpdp.bg), or the authority in your country. If you live in Saudi Arabia you also have rights under the Personal Data Protection Law.
Deleting your account
In the app: open Settings from the home screen and tap Delete my account. If you have an account, confirm it with one of the sign-in methods you used. If you no longer have the app, use the account deletion page. Deletion cannot be undone.
Contact us
For any question about your data, write to us. We reply in Arabic or English.
Changes
If we change this notice, we publish the new version here with its date. If we want to use your data for something new, we ask you first.