Privacy policy

Last updated: 28 September 2026

We respect your privacy and collect as little data as possible. There are no visitor accounts, and we never ask for your name or number to use the site. This page explains what we keep and why, how long we keep it, and your rights over it.

What we keep

  • Ratings: the stars, reasons and any comment you write. For a site rating, your name and email only if you choose to give them, so our reply can reach you. Ratings from the Khabeerak app are explained in the “Android app” section below.
  • Mistake reports: the report text, its status and our reply, and your email only if you provide it and agree to its use for the tracking link and report notifications.
  • IP address: never stored. Instead we keep an irreversible keyed hash, used only to prevent abuse and repeated submissions.
  • Statistics: page views and unique visitors per page, search queries with their language and result count, and symptom combinations that found no result in “Diagnose your fault”, never linked to your identity. We use them to learn what content is needed and to improve it.

Cookies and browser storage

  • Session (kb_sid): necessary to protect the forms (ratings and reports) from forged submissions; deleted when you close the browser.
  • Vote (kb_voter): an anonymous random token that lets you change your rating of a page instead of repeating it; kept for about 13 months.
  • Price country (kb_region): stored only if you choose to see prices for Saudi Arabia or another country; kept for one year. Without it, the country is taken from your connection at request time and is not stored.
  • View counting (kb_vid): an anonymous random token so a visit to the same page is not counted more than once within 30 minutes; kept for one year.
  • Ad choice (kb_consent): stores whether you accepted or declined personalised ads; kept for one year, and only used when ads are on.
  • Theme (light/dark): kept in your browser’s local storage only and never sent to us.
  • Language: comes from the page address itself (/ar or /en), so no file is stored for it.
  • Report tracking links: kept in your browser’s local storage to show your “My reports” list; clear this site’s data to remove them.

Android app

The Khabeerak app works without an account and offline from data stored on your device. It does not ask for access to your contacts, location, photos or files.

  • Install ID: the app creates a random number that is stored only on your device (you can see it in Settings → Privacy). It is not linked to your name, phone number, email, or any device or Google account identifier. Its only purpose is to count your rating once and let you change it instead of repeating it.
  • When it is sent: only when you rate an item (a code, a light or an appliance fault), together with the stars and reasons you chose and the app language. It is never sent in any other case.
  • How it is stored: we never store the number itself, only an irreversible keyed hash, with the stars, reasons and time of the rating. The hash stays with the rating for as long as the rating is kept; no IP address and no information about your device is stored with it.
  • Country: to show prices in riyals or as a cost level, the app reads the country from your device settings (or your choice in Settings). It stays on your device and is not sent to us.
  • Data updates: once a day (or when you tap “Update data now”) the app requests new content from the website with only the app language and the date of the last data update — no install ID and no other identifier. As with any internet connection, your IP address reaches the server: we do not store it, and use its keyed hash only temporarily to limit the number of requests.
  • Nothing else: the app collects no other data, contains no trackers, analytics or ads, and we share no data from it with any third party.
  • On your device: your language, appearance, price country, your ratings and any ratings waiting to be sent are kept in the app only, and are all removed when you uninstall the app or clear its data.
  • Delete your ratings in the app: Settings → Privacy → “Delete my ratings”. All of your device’s ratings are deleted from the website permanently and immediately, cleared from the app, and a new install ID is created that is not linked to the old one.
  • Delete your ratings by email: copy the install ID from Settings → Privacy and send it to [email protected], and we will delete all ratings for that ID within 30 days of your request (a copy stays in our trash for another 30 days and is then erased permanently). The ID alone is enough; we do not ask for any personal data.

Ads and third-party cookies

We may show Google AdSense ads. Google and its partners use cookies to serve and measure ads, and ads may be personalised based on your visits to this and other websites.

  • When ads are on, a banner asks for your choice: Accept allows personalised ads, and Decline makes ads non-personalised. Until you choose, ads are non-personalised.
  • You can change your choice at any time from the “Ad settings” link at the bottom of the page.
  • To control Google’s personalised ads across all websites: Google Ad Settings. To learn how Google uses data on sites that show its ads: Google’s partner sites policy.
  • We may use Google reCAPTCHA to protect forms from bots; it is subject to Google’s privacy policy and terms of service.

Email

  • Giving an email is always optional. We use it only to send a report’s tracking link and status updates, or to reply to your site rating.
  • We never send marketing email, and we never sell or share your email with anyone.

How long we keep data

  • Reports: deleted 12 months after being closed, and any other report 24 months after it was sent.
  • Name and email in site ratings: deleted after 12 months; the rating itself stays with nothing that identifies you.
  • IP hashes in ratings and reports: erased after 12 months.
  • Search queries and symptom combinations with no result: deleted after 12 months. Aggregated daily view counts contain no personal data.
  • Technical error logs: deleted after 6 months.
  • Encrypted backups: deleted automatically within 12 months at most.

Where data is kept and how we protect it

Data is stored on the site’s server, backups are encrypted and kept off-site, and only the site administrator can access them. We use an encrypted connection (HTTPS), and the control panel is protected by two-step verification.

Your rights

Under Saudi Arabia’s Personal Data Protection Law, you have the right to:

  • Know what we hold about you and why.
  • Get a copy of it.
  • Have it corrected.
  • Have it deleted, for example a report or rating you sent from the website or the app, or your email in it.
  • Withdraw your consent to personalised ads at any time.

To make a request, contact us at [email protected], with the report’s tracking link or a description of the rating if possible so we can find it. We reply within 30 days.

Governing law

This policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its implementing regulations issued by the Saudi Data and AI Authority (SDAIA). The site is not directed at children under 18, and we do not knowingly collect their data.

Changes

We may update this policy; the date of the last update is shown at the top of this page. Material changes are announced on the site before they take effect. For the limits of our responsibility for the content, see the disclaimer.