Privacy & your data
We collect the minimum, never sell data, and use no advertising cookies. You have clear rights and can exercise them with a verified request.
TRUST CENTER
Trust Center
How we handle your data, protect the site, use AI, and who owns what — in one place, in plain language.
Status
Policies are published with versions, and requests are received and tracked from the dashboard.
- Page last reviewed
- Published policies
- 8
- Privacy requests
- Answered within 30 days as a general rule
- Legal entity
- Cup Code Establishment · Unified National No. 7051565781
Security
Encrypted connections, protected forms, private attachments and an admin audit log. Found a vulnerability? Report it responsibly.
Transparency in AI use
We say where AI was used, and every output goes through human review. Assets currently disclosed: 1.
Intellectual property & assets
Every asset has a documented source and license before use, and credits are published.
Processors
Service providers that process data on our behalf (1 right now), with purpose and region.
Access & terms
A site that works with a keyboard and respects reduced motion, with clearly written terms.
What we actually do
Implemented, verified controls — pulled from our internal control register, and only shown once they are in place.
- License check before using any asset
- Identity verification for privacy requests
- Admin account protection (hashed passwords, session timeout, login throttling)
- Form & upload protection (CSRF, CSP, bot trap, image re-encoding)
- Audit log for admin changes
What we don’t claim
We are one developer. We don’t currently hold any third-party compliance certification (such as ISO 27001), and we don’t use phrases like “100% compliant”. This page is an honest description of what we do, reviewed and updated over time.
We are guided by the Saudi Personal Data Protection Law and its Implementing Regulation, the Anti-Cyber Crime Law, the Copyright Law, the Trademarks Law, and SDAIA’s AI Ethics Principles.