Privacy policy

Last updated: 9 October 2026. This policy covers the waitlist and playing on the site and in the Kroooot phone apps, including your account. The terms of use apply alongside it.

Who we are

Kroooot (kroooot.com) is operated by DIRWAAS Intelligent Solutions LLC (درواس للأنظمة الذكية), Amman, Jordan, which is the controller responsible for the personal data described in this policy. Contact, including any request about your data: contact@dirwaas.com.

What we store

This list is for the waitlist; the sections below describe account and play data.

• Your email address.
• The games you like and your country, as you choose them.
• The page language, and your approximate country as shown by your network.
• When you gave consent, and which version of this policy you agreed to.

We do not store your IP address in the waitlist. Cloudflare does receive your IP address and technical request data to deliver the site and protect it from abuse, for example by limiting repeated attempts, and keeps technical logs for a short time.

On your device, the site and the apps keep in local storage your random secret id, the name you play under, a partly hidden copy of your account email if you are signed in, your settings, the scorers' points, games against bots in progress, daily challenge results not yet sent and which daily challenges you have played, the random install identifier, your diagnostics choice and the last technical errors recorded (see Diagnostics and usage data), and, for each online table, the data needed to check that its deals were fair, so the service works as described here. We use no cookies and no advertising. On the website (not inside the apps) we count visits with Cloudflare Web Analytics, which sets no cookies and does not identify you: we see only totals such as pages opened, countries and device types. You can clear this storage in your browser or device settings, but that may sign you out or make a guest record unreachable.

Your account

Playing with bots needs no account. Playing with other people does. For an account we keep your email address, a hash of your password (never the password itself), the hashed id of your play record, and that record's secret device id encrypted, so that signing in on another device continues the same record. We send your email a six-digit code to confirm it and to reset your password; codes expire after ten minutes and are stored only as a hash. We use your email for nothing else, except to tell you that we have replied to your message (see Contact us), and never show it to other players. When you sign in on a device that was used without an account, that device's guest record is deleted, since your account's record replaces it there. A password reset moves your record to a new secret id, so any other device that was signed in becomes a guest; the old id's hash is kept 30 days so that anything recorded under it again is deleted. The email address in a code request is kept with the code for one to two days, whether or not it has an account. The account is deleted with "Delete account", or after a year without play, as described below.

Play and voice chat

When you play at a private table, we keep the name you type and the game only while the table exists, then the table is deleted. Anyone with the table link sees the names of those seated and can watch the game once it starts, without seeing anyone's hand. After a game ends, anyone with the table link can fetch its moves, those of the game before it, and the shuffle seeds, to check for themselves that the deal was fair. This does not include players' names.

You become friends when one of you accepts a friend request from the other. A request is sent from a table you both played at, or with the friend code a player gives to people they know. Each record has one friend code, stored with it and deleted with it. We keep a request with the sender's name as it is on their record and your name as they saw it, and delete it after 90 days whether or not it was accepted; nobody is told that their request was declined. A friend's name stays in your list as it appeared when you became friends, and is removed if they delete their record; ending a friendship removes it from both lists. Friends can each see whether the site is open on the other's device right now, even in a background tab, and can invite the other to a table. We do not store this; it comes from the device's connection while the site is open. We count the friend requests each player sends in a day to prevent spam, and delete that count after two days. You can block another player from inviting you, sending you friend requests or seeing whether you are online; we keep the list of players you block, linked to your hashed id, and delete it with your record.

At public tables your name is shown to the people you play with, and offensive names are not accepted. Their results give you a rating in each game: a number estimating your level, linked to your hashed id and deleted with your record. For each month we keep your number of public games, your wins, your rating and your public table name. Once you have five games in a month and are among the top fifty, your name, rating, games and wins appear on the leaderboard that any visitor can see, unless you hide your name with the switch on the leaderboard page. We also keep, for each week, your number of public games, your wins, your rating and your public table name. Once you have three games in a week and are among the top fifty, your name, rating, games and wins appear on that week's leaderboard, which any visitor can see. They stay visible on last week's board until the following week ends, unless you hide your name from the leaderboard. Older week rows are deleted daily. These rows are deleted with your record or after a year without play.

Anyone who played with you can report deliberate spoiling of a game, an offensive name, cheating or another problem. We keep the report for review, with the reporter's and the reported player's hashed ids, the name shown at the table and the reason, and delete it from our database after a year. Reports are delivered to our team by email, and that copy is kept only as long as needed to handle the report and any related claim. We review them, normally within seven days, and may warn, restrict or remove an account.

When a game at a private or public table ends, we record each participant's games played and won and the last name they used at a table. The record is linked to a hash of a random id kept on the device. If you have an account, it is also linked to your account, which holds your email address; other players never see your email. Clearing the site's data may make a guest record unreachable, while an account's record can be reached again by signing in. These ids and the play data linked to them are not anonymous.

If you create or join a group, we keep its name, its members' names as they chose them linked to their hashed ids, the results of games at its tables, and its next night with members' replies on whether they are coming. Anyone with its link sees its name and member count and can join; only members see the names, results and date. If you leave or are removed from a group, your results in it are deleted. We keep the hashed id of someone the organiser removed with that group, to refuse that player record joining it again, until the group is deleted or for a year. A group with nobody left is deleted.

If you play the daily challenge and send its result, we check your game's moves, then keep its result and the name you chose with your hashed id. Any visitor can see your name and result on that day's board unless you have hidden your name from the leaderboard. Results are deleted after thirty days.

The scorers (Baloot, Kout and Hand) keep their points on your device only.

Voice chat at private tables connects players' devices directly. We do not record or store it, and it only works if you allow your browser or the app to use the microphone. Because the connection is direct, the other players' devices in the chat can see your IP address, and connection setup goes through Cloudflare's STUN server. Before the microphone first opens, the app reminds you that the others at the table can see your connection (IP) address. Voice is optional: you can play without it, mute yourself at the table, or withdraw microphone permission in your device or browser settings. Your IP address can reveal your approximate location and your internet provider. We do not record voice, but that cannot stop another participant from recording it by other means, so do not share private information in voice chat. You must not record or publish other players' voices without their consent.

The camera is used only when you choose to scan a table's QR code, and only with your permission. The picture is read on your device to find the code; it is never recorded, stored or sent to us.

Diagnostics and usage data

To find and fix faults and to understand how Kroooot is used, the website and the apps send us limited diagnostics and usage data, unless you turn this off in Settings, under "Send diagnostics". This covers:

• Technical errors: the error text with anything that could identify you removed, where in the code it happened, requests to our server that failed (the path and status code only), a table connection that dropped and its code, moves a table refused and why, and games saved on your device that could not be opened.
• Usage: opening the app, the sections and screens you open, games started and finished, their kind (against bots or online) and length, how a quick match search ended and how long it took, the names of settings you change (not their values), and how long slow tasks in the page took.
• Device information: the platform (web, iOS or Android), the app version, the code version and the interface language.
• A random install identifier created on your device for this purpose only, which is not your secret player identifier. If you are signed in, we link this data to your account's record (by the fingerprint of your play record, not your email).

This data never includes your messages, your name, your email, passwords, codes or table links, and anything that looks like them is removed from error texts on your device and again on our server. We do not use it for advertising, we do not share it with anyone to track you, and we do not sell it.

We keep the detailed events for 90 days, then delete them. After that we keep only daily totals that contain no identifier (such as the number of games started on a day) for up to 400 days. Our server also records its own silent failures and the games being played (the game, its rules version, the number of players and when it started and ended), without player names or identifiers, and deletes the record of games after 30 days. These anonymous game statistics and server error counts are collected to run the service even if you turn diagnostics off, because they contain no name, no identifier of yours and no table code (only a keyed fingerprint of it). Everything of this kind linked to your account is deleted when you delete your account.

Our legal basis is our legitimate interest in running a service that works properly and in improving it, where the law that applies recognises it. You can object by turning the option off in Settings or by writing to us.

Contact us

An account holder can write to us from More, then Contact us. We keep your message, its topic (problem, account, idea, something else) and our replies, linked to your account's record, so that we can answer and you can read the answer in the app. If you choose to attach technical details, we attach the app version, your device type and system, browser details, the interface language and the last technical errors the app recorded on your device; you are shown what will be attached before you send. When we reply, we email your account's address to say that a reply is waiting, without the reply's text. Only our team reads the messages. We delete a conversation two years after its last message, or when you delete your account. Please do not include information we do not need, such as payment details or your password.

Your player picture

When you choose a picture for your player, we keep on your record only the number of the preset picture you chose; uploads are not accepted. Other players see this picture at tables, in friends and group lists, and in the in-app leaderboards and daily challenge board. It is not shown on the website's public leaderboard page, but the leaderboard API the app uses returns it to anyone who asks for a leaderboard with a valid player identifier, so do not treat it as private. It is deleted with your record.

Why we keep it, and on what basis

We keep waitlist data to email you when the Kroooot app launches and to decide which games and countries to start with. The basis is your explicit consent. We keep your account, play record, ratings, friends list, friend requests, friend code and groups to provide what you ask for when you play: signing in, results, ratings, leaderboards, invitations and group nights. The basis is providing the service you ask for when you play. We keep Contact us messages and our replies to answer you; the basis is providing the service you ask for. We keep reports, blocks, group removals, daily friend request counts and limits on repeated attempts to prevent abuse and cheating and to protect players and the service. The basis is keeping players safe, preventing abuse and complying with the law: our legitimate interest where the law that applies recognises it, and otherwise a legal obligation or performance of the terms. Playing with bots needs no account; playing with people needs an email address, the code we send to it and a password. The waitlist and voice chat are optional. We do not sell your data or share it with anyone for their marketing.

Who processes it

Cloudflare, Inc. runs the service for us: hosting and running it (Workers), the database (D1), live tables and who is online (Durable Objects), protection against abuse, and sending account emails with codes and delivering reports to our team (Email Sending). Its STUN server also helps set up voice connections. Your own email provider receives the emails we send you, and our email provider receives reports and the messages you send us. Some data is shown to other players, group members and visitors, as described under play and voice chat. We may disclose data to a competent authority where the law requires it. When we send the launch email we will use an email delivery provider, and will name it here before sending.

We protect data as described above: passwords and codes are stored only as hashes, the secret device id only encrypted, and repeated attempts are limited. No system can be guaranteed completely secure. If a security incident affects players' data, we will post a notice in the game and on this website, and will notify the authorities or the players affected where the law requires.

Transfers outside your country

Our main database runs on Cloudflare in Western Europe. Live game tables, online status and matchmaking run on Cloudflare servers that Cloudflare places, which may be in another region. Requests are served from the point of Cloudflare's worldwide network nearest to you. Your data may therefore be processed outside your country, including in the European Union and wherever Cloudflare's network serves your request. Cloudflare processes it for us under its Data Processing Addendum, which incorporates the European Union's Standard Contractual Clauses. You can ask us at contact@dirwaas.com for information about these protections.

How long we keep it

Waitlist data is deleted one year after the app launches if you have not created an account, and in any case no later than two years after you signed up, whichever comes first. It is deleted promptly if you ask. Our server backups and technical logs are deleted automatically within 30 days. Diagnostics, usage data and Contact us messages are kept for the periods given in their sections above. Accounts, play records, ratings, friends lists and group memberships are deleted after a year in which the record has not been used: the play page has not been opened with it and no game has ended under it, on any device. An account's record is the same on every device you sign in on. Deleting an account does not at once delete a report made by or about you, which is kept for a year from when it was made, or a group's record of someone its organiser removed, which is kept until the group is deleted or for a year. Data we no longer need for the purposes in this policy is deleted.

Your rights

• Under the law that applies to you, ask what data we hold about you and for a copy of it, ask for it to be corrected, completed or deleted, ask us to restrict or stop processing it, or receive it in a portable form where that right applies. Where the European Union's or the United Kingdom's General Data Protection Regulation applies to you, you have the rights it gives, including the right to object to processing based on our legitimate interest. These rights have legal conditions and exceptions; if we refuse or limit a request, we will tell you why.
• Withdraw your consent to waitlist emails at any time by writing to us, after which we will not send them. Codes you ask for to use your account are still sent.
• Delete your account yourself, with "Delete account" under "More" or in "Settings" while signed in to it, after two confirmations, or ask us to delete it on the account deletion page or at contact@dirwaas.com. The page asks for a code we email to the account and its password; by email, we will check that the account is yours and will never ask for your password. It deletes your account, play record, ratings, daily challenge results and friends list, removes you from your groups and from other players' friends lists. We keep the hashed id of a deleted account for 30 days, so that a game still running at that moment cannot bring the record back; anything recorded under it is deleted within a day. Reports and group removals are kept as described under how long we keep it. Deletion does not erase copies other people have made themselves.

Email contact@dirwaas.com. We may ask for limited information to confirm that a request is yours, but we will never ask for your password by email. We will reply within 30 days, or sooner where the law requires. You may complain to the data protection authority in your country. We ask you to contact us first, so that we can try to resolve your concern.

We will publish changes to this policy here with their date, and for a significant change we will give notice in the service before it takes effect where we can. Using the service alone is not consent to any processing that needs separate consent. This policy is published in Arabic and English, and both versions are official; if they differ, the Arabic text prevails.

Age

The waitlist is for people aged 18 and over. Playing is for people aged 13 and over, and under 18, or under the age of majority where you live, only with a parent's or guardian's permission, as set out in the terms of use. You confirm this when you create an account. Where the law where you live sets a higher age or further conditions, they apply. We do not knowingly collect data from children under 13; if you believe a child under 13 has used the service, or that someone used it without a permission the law requires, write to us and we will delete their data.