Privacy Policy

Last updated: 2026-10-06. If the Arabic and English texts differ, the Arabic text applies.

Ploof (بلوف) is a free web app of party games run by an individual based in Saudi Arabia ("we"). We collect as little as possible: no password, email or phone sign-up, no ads, no tracking cookies and no analytics tools. We follow the Saudi Personal Data Protection Law (PDPL) and apply GDPR-like practices.

1. Data on your device

On first run your device creates a random player id and a random device secret (instead of a password) and keeps them, with your name and avatar, in the browser's localStorage. We also keep your settings (sound, devices, display), your block list and which tutorials you have seen there. The recovery link (/k/…) contains your device secret: anyone who has it can use your identity, so don't share it.

2. What the server stores, why, and for how long

Live game state (moves, who is in a room right now) lives only in server memory and disappears when the room ends. IP addresses are used in memory only for rate limiting and for handing an invite from the browser to the installed app on the same phone (a salted hash of address + device model kept in memory with the room code for 15 minutes, plus an "app installed on this device" marker for up to 30 days, cleared on server restart). IP addresses are not written to the database or the logs.

3. Voice, camera and screen sharing

• All optional: your browser asks for permission, nothing turns on without your tap, and you can turn it off at any time.
• Audio and video travel directly between players' devices (WebRTC), encrypted. Our server only relays connection set-up messages. We never record or store audio or video.
• Because the connection is direct, other players in the room can technically see your IP address. This is inherent to peer-to-peer calls.
• When a direct connection fails, media is relayed through a TURN server we run on our own host. It stays encrypted and we cannot see it. Its logs may contain IP addresses on connection errors and are rotated automatically.
• To find a route, your browser uses Google's public STUN servers (stun.l.google.com), which see your IP address.
• Any participant could capture their screen or record without our knowledge. Don't share what you don't want kept. Recording others without consent is forbidden by our Terms and by law.

4. Connection-quality telemetry

During live games your device sends a technical summary about every 5 seconds: latency, packet loss, frame rate, connection type, screen size, CPU cores and approximate memory, and a shortened browser user agent, with a random per-match session id. It contains no name, player id, room code or IP address. It is written to the server log to make games smoother and is removed by log rotation.

5. Third parties

• Hosting: a cloud server at Hetzner Online GmbH in Falkenstein, Germany (EU), which we administer ourselves (app, database, TURN). Your data is therefore processed outside Saudi Arabia.
• Google Fonts: fonts (Lalezar, Baloo Bhaijaan 2, Lilita One) load from Google's servers, which receive your IP address and browser details.
• Google STUN: see section 3.
• Push services: if you enable notifications they go through your browser's service (Google for Chrome/Android, Apple for Safari/iPhone, Mozilla for Firefox). Notification content is encrypted.

We do not sell your data or share it for marketing.

6. Legal basis

We process data to provide the service you asked for (games, rooms, friends), for our legitimate interest in safety and abuse prevention (reports, rate limits), and with your consent for notifications, microphone and camera, which you can withdraw at any time in the app or browser settings.

7. Children

Ploof is not directed at children under 13. Users under 18 should use it with a parent's or guardian's permission and supervision, especially voice and camera with people they don't know. If we learn that a child under 13 is using it, or a guardian contacts us, we delete their data.

8. Your rights

You can access and get a copy of your data, correct it (edit your name and avatar in the app), ask for deletion and withdraw consent. Use the buttons in the Arabic section above (“نزّل بياناتي” = download my data, “احذف بياناتي” = delete my data) or email ploof@sb.sa; we reply within 30 days. You may also complain to the Saudi Data & AI Authority (SDAIA) or your local data protection authority.

9. Security

All traffic is encrypted (HTTPS/WSS), we store only a hash of your device secret, and TURN credentials expire after 6 hours. No system is 100% secure; if a breach affects you we will notify you and the authorities as the law requires. To report a vulnerability see security.txt.

10. Changes and contact

If we change this policy we update the date above and, for material changes, tell you in the app. Contact: ploof@sb.sa.