Privacy Policy

1. Data we collect

• Account data. When you register: a username, your email address, your mobile number and your country. If you pick an avatar, we store which preset you chose. We never ask for your real name, photo or address.
• Guest accounts. If you play as a guest, we create a random guest identity. We collect no personal details from guests.
• Google sign-in.If you choose “Continue with Google”, Google confirms your email address to us. We do not receive your contacts, files or anything else from your Google account.
• Gameplay data. Your matches, moves, results, ratings, tournament entries, friend list and any players you block. This is what makes fair matchmaking, leaderboards and your match history work.
• Reports and complaints. If you report a player, we record who reported whom and the match - never the chat content (we cannot read it). If you raise a complaint, we store your message so we can respond.
• Notifications. If you turn on push notifications, we store the delivery token your browser or device gives us. Turn them off any time in Settings.
• Technical data. Short-lived security logs, including IP addresses, used only to prevent abuse (for example, rate-limiting sign-in attempts).
• Consent records. A record of what you agreed to and when, so we can prove we respected your choices.

2. Data that stays on your device

Some things never leave your phone or browser: your app settings (sound, haptics, reduced motion), your XP, levels, streaks and achievements, and saved puzzle progress. They live in your device’s local storage. We cannot see them, and clearing your browser data removes them.

3. Data we never collect or store

• Your conversations. In-match text and voice chat are end-to-end encrypted between the two players. Our servers pass the encrypted data along without being able to read it, and it is discarded the moment the match ends. Nothing is recorded.
• Payment data. Saaht is free. There are no purchases, no wagering and no real-money play.
• Precise location, contacts, photos or files. We never ask for these.
• Advertising profiles. We show no ads and use no advertising cookies or third-party trackers.

4. Why we use your data

• To run the service - your account, sign-in codes, matchmaking, live games and rankings.
• To keep games fair and safe - preventing cheating, abuse and spam, and handling reports.
• To contact you about the service - for example one-time sign-in codes by email.
• With your permission only - product analytics, personalisation and product-update emails. Each one is off by default and has its own switch in Settings. Without your consent, analytics are stored only as anonymous counts that are not linked to you.

Where the law asks for a “legal basis” (for example in the EU/UK under GDPR): we process account and gameplay data because it is necessary to provide the service you asked for; security and anti-abuse processing is our legitimate interest in keeping the platform safe; analytics, personalisation, marketing and notifications run on your consent; and we may process data to meet a legal obligation.

5. Who can see what

• Other players see only your username, avatar, ratings and public results (for example on leaderboards or in a match against you).
• Your email and mobile number are private. They are never shown to other users.
• Our team can access account data only when needed - for example to resolve a complaint - under strict access controls.
• Service providershelp us run Saaht: hosting, email delivery for sign-in codes, Google for optional Google sign-in, and your device’s platform (such as Google or your browser vendor) for delivering push notifications. They may only use your data to provide these services for us.
• Authorities, only if the law genuinely requires it.

We do notsell your personal data, and we do not share it for advertising. In the words of California law: we do not “sell” or “share” personal information.

6. Where your data lives

Our servers are based in India. If any data ever needs to move across borders - for example when a service provider operates elsewhere - we use recognised safeguards (such as contractual protections) so your data keeps the same level of protection wherever it is processed.

7. How long we keep it

• Account data: for as long as your account is active.
• Inactive accounts: automatically deleted after about 3 years of inactivity.
• If you delete your account (Settings → Account): your profile, contact details, ratings and consents are permanently erased. Finished match records are kept only in anonymisedform - with nothing linking them to you - so opponents’ histories and leaderboards stay accurate.
• Security logs: kept briefly, then deleted.

8. Your rights

No matter where you live, we give you the same core rights over your data. Depending on your local law (for example the GDPR in the EU/UK, the DPDP Act in India, or state laws like the CCPA in California), these include the right to:

• Access the personal data we hold about you, and get a copy.
• Correct it - you can edit your username and avatar directly in your profile.
• Delete it - self-serve, from Settings, at any time.
• Withdraw consent - every optional switch in Settings can be turned off as easily as on.
• Object to or restrict certain processing, and receive your data in a portable format.
• Complain to your local data-protection authority. We will never treat you differently for exercising your rights.

Most of these work instantly and self-serve inside the app. For anything else, contact us (Section 12) - we respond to all rights requests within the timelines your local law sets, and in any case within 30 days.

9. Children

Saaht is not directed at children. You must be at least 18 years old (or the age of majority where you live) to create an account. We do not knowingly collect data from children; if we learn that we have, we delete it. If you believe a child is using Saaht, please contact us.

10. Security

We protect your data with encryption in transit (HTTPS), end-to-end encryption for in-match chat and voice, hashed one-time sign-in codes (we never store passwords - there are none), rate limiting, and strict internal access controls. You can sign out of all devices at once from Settings. No system is perfectly secure, but if a breach ever puts your rights at risk we will notify you and the relevant authorities as required by law.

11. Cookies and device storage

We use no advertising cookies and no third-party tracking. The website and app use your device’s local storage for strictly necessary things only: keeping you signed in and remembering your preferences. That is why you will not see a cookie banner - there is nothing optional to consent to.

12. Contact and complaints

For any privacy question, request or complaint, email grievance@saaht.com or use Settings → Supportin the app. Our Grievance Officer (required by India’s DPDP Act, Section 13) acknowledges complaints within 24 hours and resolves them within 15 days. If you are in the EU/UK or elsewhere, you can also contact your local supervisory authority at any time.

13. Changes to this policy

If we change this policy in any meaningful way, we will tell you in the app before the change takes effect, and update the date and version number at the top. Older versions are available on request.