Privacy

What we collect

• Account: a sign-in identifier from Privy (our sign-in provider) and your Solana wallet address. Email or social details stay with Privy.
• Profile: the username, avatar and social links you choose. Social links and stats are shown to others only if your profile is public.
• Gameplay: your runs (score, wave, combo, kills, duration, the seed) and the recorded inputs used to verify them.
• Contributions and payouts: wallet addresses, amounts and transaction signatures. These are public on the Solana blockchain anyway.
• Referrals: who invited whom and whether it qualified. Other players do not see who you invited.
• Reports and moderation: reports you file and actions taken, kept in an audit log.
• Technical: your IP address is used briefly for rate limiting and is not stored with your profile.
• On your device: settings and a pending invite code in local storage, plus your best score, tickets and Vault levels from signed-out free play.
• On our servers when signed in: your ticket balance and Vault levels, with a ledger of every ticket credited or spent.

Why

To run the game, rank and verify scores, pay rewards, prevent abuse and keep the treasury transparent.

Who processes it

Privy (sign-in and wallets), Supabase (database), Railway (hosting) and a Solana RPC provider (blockchain access). Each has its own privacy terms.

Your choices

• You can hide your stats and social links by making your profile private, remove your picture, and change your name every 7 days.
• You can ask us to export or delete your data. Blockchain records cannot be deleted, and some records (ledger, audit log, published results) must be kept for accountability.

Contact

[Contact address to be added before launch.]

Draft. This page is written in plain language and has not yet been reviewed by a lawyer. It will be reviewed and may change before real-money features are promoted. Material changes are announced on the site.