Privacy Policy

Who is responsible

The Sabro ecosystem is run privately by its owner as a personal, non-commercial project. For anything related to your data, use the contact address below.

What we store

When you create an account, our self-hosted sign-in service (Logto) stores your email address, your username, and a hashed form of your password. We never see or store the password itself.

Your profile holds what you set on the profile page: a display name, your preferred language, and your preferred Syriac script.

When you play a game while signed in, we store one result per game and day: the date, whether you solved it, and in how many attempts. Playing without an account stores nothing on the server.

Our servers keep technical logs (including IP addresses and, for signed-in requests, your user ID) for troubleshooting and abuse prevention. They are not used for profiling and are kept only as long as needed.

There is no advertising, and your data is never sold or shared for marketing.

We count page visits with Umami, an analytics tool we host ourselves on the same server. It sets no cookies, does not track you between sites, and records no personal data — only anonymous, aggregated figures such as which pages are read and which country a visit came from. Nothing is sent to a third party, which is why no cookie banner is needed.

Cookies

We use a small set of functional cookies only: your language and Syriac-script preferences (shared across sabro.be and its subdomains so the apps stay consistent) and a session cookie that keeps you signed in. There are no advertising or analytics cookies — our analytics works without them.

Third-party services

The interface fonts are loaded from Google Fonts, so your browser contacts Google's servers when a page loads; Google may see your IP address in that request.

Account emails (such as verification codes) are delivered through Resend, which processes the destination email address for that purpose only.

Where your data lives

Everything runs on a server in the European Union (Hetzner, Germany), with nightly backups kept on EU storage — 30 daily and 12 monthly copies, after which they are overwritten.

Your rights

You can view and edit your profile at any time on the profile page, and delete your account there too — deletion removes your sign-in identity, your profile and your play results.

You can request a copy of the data linked to your account (an export) by writing to the contact address; you can also ask us to correct or delete anything.

If you believe your data is mishandled, you can lodge a complaint with your data-protection authority (in Belgium, the GBA/APD).

Contact

For any question or request about your data, write to contact@sabro.be.