Privacy Policy
Effective date: 27 October 2026 · Last updated: 27 October 2026
This Privacy Policy explains what information Sartash ("we", "us", "our") collects when you use the Sartash mobile application, this website and related services (together, the "Service"), why we collect it, how we use and share it, and the choices available to you. By using the Service you acknowledge the practices described here.
1. Who we are
Sartash operates the Service and is the controller of the personal information described in this policy. For privacy questions, requests or complaints, contact us at privacy@sartash.top.
2. Information we collect
We collect only what we need to run the games, keep play fair and support your account.
| Category | What it includes | Why we need it |
|---|---|---|
| Account data | Username, password (stored only as a salted hash), guest identifier, account creation date, referral code. | To create and secure your account, let you sign in and keep your progress. |
| Gameplay data | Match history, results, coin balance and transactions, tournament participation and standings, level and experience, friend list and private-room invitations. | To run matches, settle results, award rewards and show your profile and history. |
| Technical data | IP address, device model and operating system, app version, connection timestamps, session tokens, crash and error logs. | To connect you to the right server, keep sessions secure, diagnose faults and prevent abuse. |
| Support data | The content of messages you send to support, including any screenshots or account details you choose to provide. | To investigate issues and respond to you. |
We do not ask for your real name, home address, government identifiers or precise location, and we do not access your contacts, photos, microphone or camera. If a future feature needs any of these, we will ask for your permission first and update this policy.
3. How we use information
- Create your account and let you sign in, including upgrading a guest account.
- Match you with other players, run games, settle results and calculate rewards.
- Maintain your coin balance, transaction history, level and tournament standings.
- Detect and prevent cheating, collusion, multiple accounts, fraud and abuse.
- Provide customer support and respond to your requests.
- Monitor performance, fix crashes and improve game balance and features.
- Comply with legal obligations and enforce our Terms of Service.
Legal bases (EEA/UK visitors)
Where data protection law requires a legal basis, we rely on:
- Contract — to provide the Service you signed up for.
- Legitimate interests — to keep the games fair and secure, and to improve them.
- Consent — where we ask for it, for example for optional communications.
- Legal obligation — where we must keep or disclose records.
4. Cookies and local storage
This website does not use advertising cookies or third-party trackers. The app stores a small amount of data on your device (such as your session token and local preferences) so you do not have to sign in every time and so the interface remembers your settings. You can clear this data through your device settings; doing so signs you out.
Our servers keep standard access logs, including IP address and request timestamps, for security and troubleshooting. These logs are not used to build advertising profiles.
5. How we share information
We do not sell your personal information. We share it only in these situations:
- Service providers. Hosting, database, messaging and error-monitoring providers that process data on our instructions and under confidentiality obligations.
- Other players. Your username, level, avatar and public statistics (such as tournament standings and match results) are visible to other players. Your password, session tokens and transaction history are not.
- Legal reasons. Where we believe in good faith that disclosure is required by law, a valid legal request, or necessary to protect the rights, safety or property of Sartash, our players or the public.
- Business transfer. If the Service is sold, merged or reorganised, information may be transferred as part of that transaction, subject to this policy.
6. International transfers
Our servers and service providers may be located in countries other than yours. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses.
7. Retention
- Account and gameplay data — kept while your account is active.
- After deletion — account data is removed from live systems; residual copies may remain in encrypted backups for a limited period (normally up to 30 days).
- Logs — security and access logs are kept for a limited period, normally up to 12 months.
- Legal records — transaction and fraud-prevention records may be kept longer where the law requires it.
8. Security
Passwords are stored as salted hashes, sessions use random tokens, and access to production systems is restricted. Traffic between the app and our servers can be encrypted in transit. No system is completely secure, but we work to protect your data and review our practices as the Service grows.
9. Children
The Service is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to a minor, we will close it and delete the associated personal data. If you believe a minor is using the Service, contact privacy@sartash.top.
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your account and associated personal data.
- Receive a copy of your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Complain to your local data protection authority.
To exercise any of these rights, email privacy@sartash.top from the address linked to your account. We may need to verify that the request comes from the account holder. We respond within the time required by applicable law.
California residents
We do not sell or share personal information for cross-context behavioural advertising as those terms are defined by the CCPA/CPRA. You may still request access, correction or deletion using the contact details above.
11. Deleting your account
You can request deletion at any time by emailing support@sartash.top. We will close the account, remove it from leaderboards and delete personal data as described in section 7. Records we must keep for legal or fraud-prevention reasons may be retained, but will no longer be used to provide the Service to you.
12. Third-party links
The Service may link to third-party sites or app stores. Their privacy practices are their own and are not covered by this policy. Review their policies before providing personal information.
13. Changes to this policy
We may update this policy as the Service changes. When we do, we will revise the date at the top of this page. Material changes will be announced in the app or by email where appropriate. Continued use of the Service after an update means you accept the revised policy.
14. Contact
Privacy questions: privacy@sartash.top
General support: support@sartash.top