Privacy policy

What data we process

• The public address of the wallet you sign in with, sign-up and last sign-in dates.
• Activity on the site linked to your account: credits, rewards, games, missions, invites (referrals), token scans.
• If you link your X account: your X ID and username, and the posts you submit for missions.
• Technical data in server logs (IP address, browser, requested page) and short-lived counters against abuse.
• Technical cookies and, only with your consent, Google cookies for statistics and advertising (see the cookie policy).

We never ask for or store private keys or recovery phrases: you sign in by signing a message, not a transaction. Wallet addresses and on-chain transactions are public on the blockchain by nature and outside our control.

Why and on what legal basis

• Account, credits, rewards and site features: performing the service you request (Art. 6(1)(b) GDPR).
• Logs, abuse limits and security: legitimate interest in protecting the site and its users (Art. 6(1)(f)).
• Google statistics and advertising: only with your consent, which you can withdraw at any time (Art. 6(1)(a)).

How long we keep it

• Account data: as long as the account exists. You can ask for deletion at any time.
• Server logs: 14 days. Abuse counters: a few minutes.
• Your cookie choice: 6 months.

Who receives the data

• OVHcloud: site hosting, servers in the European Union.
• Google (Analytics, Ads): only with your consent. Data may be transferred to the USA under the EU-US Data Privacy Framework.
• X: only if you link your account, to verify missions.

We do not sell your data to anyone.