Privacy Policy

1. What We Collect

• Wallet address: your Solana public key, used to identify you in matches, leaderboards, and profiles. This is public blockchain data.
• Display name & tagline: optional profile information you choose to set. Stored in our database.
• Game data: match participation, outcomes, reputation scores, and flag history. Stored on-chain and in our database.
• Push notification tokens: if you opt in to notifications, we store your browser push subscription endpoint.
• Notification consent: we log your opt-in/opt-out decisions with wallet-signed proof for audit purposes.

2. What We Do NOT Collect

• We do not collect your name, email, phone number, or any personal identity information.
• We do not have access to your private keys or wallet seed phrase.
• We do not track your browsing activity outside of this application.
• We do not sell or share your data with third parties for advertising.

3. How Data Is Stored

• On-chain: match accounts, reputation PDAs, and game configuration are stored on the Solana blockchain. This data is public and immutable.
• Database: player profiles, match history mirrors, notification preferences, and moderation data are stored in Supabase (PostgreSQL) with row-level security.
• Local storage: your move secrets (choice + salt) are stored in your browser's IndexedDB for recovery. Creating a match also stores an encrypted reveal backup server-side so the relayer can settle after a join.
• Auto-reveal secrets: every match uses auto-reveal. An encrypted ephemeral delegate key is stored server-side and deleted after use. There is no separate manual-reveal play mode.

4. Third-Party Services

• Solana blockchain: public ledger for all on-chain transactions.
• Helius: RPC provider for Solana network access. Proxied server-side; your IP is not exposed to Helius.
• Supabase: database hosting with encryption at rest.
• Vercel: web hosting and analytics (anonymous page view counts only).

5. Cookies & Local Storage

We use browser local storage for:

• Network mode selection (devnet/mainnet)
• Terms acceptance state (session only)
• Theme preference (dark/light)
• Move secrets in IndexedDB (critical for game play)

We do not use tracking cookies.

6. Data Retention

• On-chain data persists as long as the Solana blockchain exists.
• We keep database records for 1 year.
• Reputation and financial records are kept by season. Each season stands on its own.
• Notification subscriptions are cleaned when they become invalid.
• You can ask us to delete your database profile sooner. See Your Rights.

7. Your Rights

• You can disconnect your wallet at any time to stop interacting with the application.
• You can opt out of notifications at any time through the Profile tab.
• You can request deletion of your database profile by contacting us.
• On-chain data cannot be deleted due to the nature of blockchain technology.

8. Children

RPS v3 involves real cryptocurrency wagering. You must be 18 years or older (or the age of majority in your jurisdiction) to use this application. We do not knowingly collect data from minors.

9. Changes

We may update this policy as the application evolves. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions or concerns? Reach us on X at @ioFutureLink, or through the Sol-HQ GitHub organization.