Privacy Policy

1. What We Collect

• Wallet address — your Solana public key, used to identify you in matches, leaderboards, and profiles. This is public blockchain data.
• Display name & tagline — optional profile information you choose to set. Stored in our database.
• Game data — match participation, outcomes, reputation scores, and flag history. Stored on-chain and in our database.
• Push notification tokens — if you opt in to notifications, we store your browser push subscription endpoint.
• Notification consent — we log your opt-in/opt-out decisions with wallet-signed proof for audit purposes.

2. What We Do NOT Collect

• We do not collect your name, email, phone number, or any personal identity information.
• We do not have access to your private keys or wallet seed phrase.
• We do not track your browsing activity outside of this application.
• We do not sell or share your data with third parties for advertising.

3. How Data Is Stored

• On-chain — match accounts, reputation PDAs, and game configuration are stored on the Solana blockchain. This data is public and immutable.
• Database — player profiles, match history mirrors, notification preferences, and moderation data are stored in Supabase (PostgreSQL) with row-level security.
• Local storage — your move secrets (choice + salt) are stored in your browser's IndexedDB. These never leave your device unless you opt into auto-reveal mode.
• Auto-reveal secrets — if you use 4DPLOY mode, an encrypted ephemeral delegate key is stored server-side for automatic reveal. It is deleted after use.

4. Third-Party Services

• Solana blockchain — public ledger for all on-chain transactions.
• Helius — RPC provider for Solana network access. Proxied server-side; your IP is not exposed to Helius.
• Supabase — database hosting with encryption at rest.
• Vercel — web hosting and analytics (anonymous page view counts only).

5. Cookies & Local Storage

We use browser local storage for:

• Network mode selection (devnet/mainnet)
• Terms acceptance state (session only)
• Theme preference (dark/light)
• Move secrets in IndexedDB (critical for game play)

We do not use tracking cookies.

6. Data Retention

• On-chain data persists as long as the Solana blockchain exists.
• Database records for completed matches are archived after 30 days and permanently deleted after 60 days.
• Notification subscriptions are automatically cleaned when they become invalid.
• Player profiles persist until you request deletion.

7. Your Rights

• You can disconnect your wallet at any time to stop interacting with the application.
• You can opt out of notifications at any time through the Profile tab.
• You can request deletion of your database profile by contacting us.
• On-chain data cannot be deleted due to the nature of blockchain technology.

8. Children

RPS v3 involves real cryptocurrency wagering. You must be 18 years or older (or the age of majority in your jurisdiction) to use this application. We do not knowingly collect data from minors.

9. Changes

We may update this policy as the application evolves. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions or concerns? Reach us on X at @KITEMAN or through the Sol-HQ GitHub organization.