Privacy

What we never ask for

We don't ask for your name, email, phone number or ID to play. We never see or store your wallet's private key or seed phrase.

What we keep when you sign in

• Your wallet address, the handle and avatar you choose, when you first signed in and first played for PUP.
• The terms version you accepted, when you confirmed your age, and the region we saw at that moment.
• Your own limits and any self-exclusion you set, and your trust level (new wallets are limited to the two lowest stake tiers).
• The sign-in message your wallet signed, its signature, and the public half of the session key it authorised, with their times.
• Your X handle or Telegram chat, only if you link them.

Location and eligibility checks

Before any match for PUP we check eligibility. We look up the country and region of your IP address in a database that runs on our own server, so your address isn't sent to anyone else. We store a hash of your IP address (not the address itself), the country and region, the result and the reasons, and the time.

We also check your wallet against the U.S. sanctions list of digital-currency addresses, refreshed daily.

Your matches are public

Every match is an escrow on the Solana blockchain. Deposits, payouts and the accounts involved are public there for good, and we can't change or delete them.

Each match's full game record (every move, both players' signatures, the seed and the result) is published at its replay page and stored in locked storage so anyone can check it. Move details leave our database after 30 days; the stored record keeps them.

Your profile, ratings, record, recent matches and leaderboard places are public.

Other things we keep

• First-party analytics: the event name, an anonymous session id, your wallet if you're signed in, a few details of the event, and the time. No third-party analytics service receives wallet addresses.
• Push notification subscriptions you turn on (the browser's endpoint and keys).
• Who opened a challenge link (your wallet, else an anonymous session, else a hash of your IP address), for 24 hours.
• Daily challenge runs, until 7 days after their day ends.
• Signals our anti-cheat and compliance checks raise about a wallet, with the evidence, for review.
• Feedback you send us from the test network.

Cookies and browser storage

• pup_refresh keeps you signed in. It is only readable by our API and only sent to its sign-in routes.
• pup_csrf protects those routes from forged requests.
• pup_anon is an anonymous session for free play and the daily challenge.
• Your session key lives in your browser's storage and can't be exported. The sound setting and a pending claim are kept in the browser too.

Who else handles data

Solana requests go through our server to blockchain node providers, who see the transactions and accounts asked about. Swaps are quoted by Jupiter, which receives your wallet address as the buyer. Our servers and the stored game records run on Amazon Web Services, and the database on MongoDB Atlas. Error reports go to Sentry. Telegram delivers the pings you link it for.

Your choices

You can play for free without a wallet. You can sign out at any time, which ends your session on that device. You can change your handle and avatar on your profile page (/me). You can turn browser pings off there (Turn browser pings off) or in your browser's settings for this site. You can unlink Telegram there too (Unlink Telegram): the bot stops messaging you at once. X linking isn't on the site. Data on the blockchain and published game records can't be deleted.