Privacy Policy

Our Privacy Commitment

At Chain Pot, we believe in radical transparency and minimal data collection. This Privacy Policy explains what we collect, why, and how we protect your information.

🔒 Summary: We collect only what's necessary. No names. No emails. No KYC. Just your wallet address and gameplay data. Your privacy is not a product—it's a principle.

1. Information We Collect

1.1 Wallet Information

1.2 Gameplay Data

1.3 Technical Data

1.4 Voluntarily Provided Data

If you contact support, we may collect:

• Your wallet address (for identification)
• Match IDs related to your inquiry
• Screenshots or recordings you provide
• Communication history with support

2. What We Do NOT Collect

We prioritize your anonymity. We do not collect:

• ❌ Name or real identity
• ❌ Email address
• ❌ Phone number
• ❌ Physical address
• ❌ Government ID or KYC documents
• ❌ Social media accounts
• ❌ Date of birth (beyond age confirmation)
• ❌ Employment information
• ❌ Financial information (beyond on-chain data)
• ❌ Biometric data
• ❌ Private keys or seed phrases (never, ever)

Your identity on our platform is tied solely to your wallet address. We practice pseudonymous gaming—you are your wallet.

3. Cookies & Local Storage

3.1 Essential Cookies

These are required for the service to function:

3.2 Local Storage

We use browser local storage for:

• Sound/music preferences
• UI settings (theme, zoom level)
• Cached game assets for performance
• Recent match history (local cache)
• Preferred wallet connection

3.3 No Tracking Cookies

We do not use:

• ❌ Third-party analytics (no Google Analytics, Mixpanel, etc.)
• ❌ Advertising trackers or pixels
• ❌ Cross-site tracking cookies
• ❌ Fingerprinting technologies
• ❌ Social media tracking widgets

💡 Why no analytics? We believe your gameplay is your business. We use only aggregated, anonymized server-side metrics.

4. How We Use Your Information

Your data is used exclusively for:

4.1 Service Operation

• Processing match entries and payouts
• Managing your inventory and cosmetics
• Displaying leaderboards and statistics
• Enabling matchmaking
• Administering the referral program — including binding referees to referrers, computing referral earnings, displaying your claimable balance, and processing on-chain claim transactions (see Terms §2.7 for the full program rules)

4.2 Security & Integrity

• Preventing fraud, cheating, and abuse
• Detecting bots and automated play
• Rate limiting and DDoS protection
• Investigating reported violations

4.3 Product Improvement

• Analyzing aggregated gameplay for balance updates
• Identifying bugs and performance issues
• Improving user experience

4.4 Legal Compliance

• Responding to valid legal requests
• Complying with applicable laws
• Enforcing our Terms of Service

4.5 What We Never Do

• ❌ Sell your data to third parties
• ❌ Rent or trade your information
• ❌ Use data for targeted advertising
• ❌ Share data with marketing partners
• ❌ Build profiles for third parties

5. Third-Party Services

5.1 Solana Blockchain

• All transactions are publicly visible on the Solana blockchain
• Blockchain data is immutable and beyond our control
• Anyone can view transaction history associated with your wallet
• This is inherent to blockchain technology, not our choice

5.2 RPC Providers

We may use third-party RPC providers to interact with Solana:

Providers may log connection metadata per their own policies.

5.3 Wallet Providers

Your wallet provider has its own data practices:

We recommend reviewing their documentation.

6. Data Security

6.1 Protection Measures

We implement comprehensive security:

In Transit:

• 🔐 TLS 1.3 encryption for all connections
• 🔐 Secure WebSocket (WSS) for gameplay

At Rest:

• 🔐 AES-256 encrypted database storage
• 🔐 Encrypted backups with separate keys
• 🔐 Secrets management for sensitive configuration

Access Control:

• 🔐 Role-based access control (RBAC)
• 🔐 Multi-factor authentication for staff
• 🔐 Logging of access and authentication events
• 🔐 Principle of least privilege

Monitoring:

• 🔐 Infrastructure monitoring and alerting
• 🔐 Automated threat response
• 🔐 Regular penetration testing
• 🔐 Bug bounty program (coming soon)

6.2 Incident Response

In the event of a data breach:

1. We will investigate immediately
2. Affected users will be notified within 72 hours
3. We will report to relevant authorities as required
4. We will take steps to prevent recurrence

6.3 No Guarantee

While we implement industry-standard security, no system is 100% secure. We cannot guarantee absolute security of your data. Use strong wallet security practices.

7. Data Retention

7.1 Retention Periods

7.2 Deletion

When you request deletion:

• Account data is removed within 30 days
• Aggregated statistics may be retained (anonymized)
• Blockchain records cannot be deleted (immutable)
• Legal hold data may be retained if required

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

8.1 Response Time

• We respond to requests within 30 days
• Complex requests may take up to 60 days (we'll notify you)
• Requests are free of charge

8.2 Verification

To protect your privacy, we verify requests by:

• Confirming wallet ownership via signature
• Matching wallet address to account records

9. Children's Privacy

Chain Pot is not intended for users under 18.

• We do not knowingly collect information from minors
• Age verification is required before wallet connection
• If we discover data from a minor, it will be deleted immediately
• Parents/guardians may contact us to remove a minor's data

10. International Data Transfers

10.1 Data Location

Your data may be processed in:

• United States
• European Union
• Singapore
• Other regions where our servers operate

10.2 Transfer Safeguards

For international transfers, we ensure:

• Standard contractual clauses where applicable
• Adequate data protection agreements
• Compliance with local data protection laws

By using the Service, you consent to international data transfer.

11. Regional Privacy Rights

11.1 Jurisdiction & GDPR (European Union / Croatia)

Chain Pot operates under the laws of the Republic of Croatia.

If you're in the EU/EEA, you have rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time
• Right to not be subject to automated decision-making

Legal Basis for Processing:

• Contract performance (providing the game)
• Legitimate interests (security, improvement)
• Legal obligations (compliance)

11.2 California Users (CCPA)

If you're a California resident:

• You have the right to know what data we collect
• You have the right to delete your data
• You have the right to opt-out of data sales (we don't sell data)
• We will not discriminate against you for exercising rights

11.3 Other Jurisdictions

We strive to comply with privacy laws worldwide. Contact us for jurisdiction-specific questions.

12. Changes to This Policy

12.1 Notification

We may update this policy periodically. Changes will be communicated via:

• Updating the "Effective Date" above
• In-app notification for material changes
• Announcement on Discord for significant updates

12.2 Continued Use

Continued use of the Service after changes constitutes acceptance of the updated policy. Review this policy periodically.

13. Contact Us

Questions or concerns about privacy?

Response Time: Within 48 hours for privacy matters

Community:

• 💬 Discord: discord.gg/aHj7pStqVC
• 🐦 Twitter/X: @chainpotio

🛡️ Your privacy matters. Play anonymously. Play confidently. Your wallet, your identity, your control.

Last reviewed: 3 June 2026