Thaheen

Privacy Policy

Last updated: 2026-08-19 العربية

This page explains what the Thaheen platform collects and what it does not. Two games are available today: Word Rush and the crossword. Colour Sort is built but paused for now. The principle is simple: we do not ask you for anything the game does not need.

Playing without an account

You can play as a guest with no account at all. We create a temporary guest account under the name you type (or a random one if you leave it blank), and we ask for no email, no phone number and no other personal details. Abandoned guest accounts are deleted automatically.

If you sign in

If you choose to sign in with Google or Apple, this is all we receive from them and keep, in order to connect your account:

• A stable identifier from the provider (no password — we never see one).
• Your email address, name and picture, where the provider makes them available. With Apple's Hide My Email we receive a relay address and never see your real one.

The only benefit of signing in is that your match history and your single-player progress are kept and follow you to any device.

What we store while you play

• In multiplayer games: the rooms you joined, the words you found, and the scores and rounds.
• In single-player games: the level you reached, your attempt times and your best results, so your progress is kept and can be resumed.
• Your last sign-in time and how many times you have signed in, to run the service and measure usage in aggregate.
• Technical messages in server logs (an IP address inside an error log, for instance) for a limited period, for operations and security only.

What we record on each sign-in

Every time a session begins — as a guest, or with Google or Apple — we store a single row containing:

• The time and method of sign-in (guest, Google, Apple) and whether it came from the web or the app.
• The IP address the request came from.
• The device type, its operating system, and the app or browser version, as your device declares them in the request header.
• An approximate country and city, derived from the IP address using a database installed on our own server — your address is not sent to any third party for this or for anything else.

The purpose of that row is operational and security-related: knowing which devices and platforms are actually in use so we can support them, and spotting abuse. It is not used for advertising, not used to build a profile of you, and not shared with anyone. These records are deleted automatically after 180 days, and immediately along with your account if you delete it.

This is not location tracking: the app never asks your phone for location permission and never reads GPS. The accuracy is city-level at best, and it can be entirely wrong if you use a VPN or a carrier network.

What we do not do

• We do not sell your data and do not share it with advertisers.
• We use no advertising trackers and no cross-app tracking identifiers.
• We do not access your contacts, your photos or your microphone, and we do not ask your device for location permission or read GPS.

Where the data lives and who reaches it

Data is kept on our own server, and the connection to the app is encrypted over HTTPS. Access is limited to the project's owner, for operations and support.

Deleting your account and your data

You can delete your account entirely from inside the app (Settings → Delete account). Your match history, your progress and the sign-in records described above go with it. Abandoned guest accounts are deleted automatically with no action from you, and you can also withdraw the app's permission from your Google or Apple account settings at any time.

Children

The platform is not directed at children under thirteen, and we do not knowingly collect any data from them.

Changes to this policy

If our practices change we will update this page and change the last-updated date at the top of it.