PRIVACY POLICY.
This notice explains the data involved when you visit the ChickenPop website or use the wallet-linked game. The ChickenPop project operates the game account and match database; Phantom and hosting providers handle their own services under their own privacy notices.
EFFECTIVE 20 SEPTEMBER 2026
1. Data we handle
- Account and login: public wallet address, short-lived login challenge and signature proof, account ID, session-token hash, session timestamps, and account creation/update times.
- Fighter profile: unique fighter name, referral code, any referral relationship, and profile creation time.
- Game activity: matchmaking and room state while playing; selected fighter, actions needed to run a match, connection/forfeit status, match ID and result, opponent, timestamps, Energy balance/reset, wins, losses, ratings and rating changes.
- Competition: weekly-ladder registration, score and standings. A disabled reward-ledger structure exists, but no token or cash payout feature is active.
- Technical delivery: IP address, browser and request metadata may be processed by Cloudflare, the game API host, and network providers to deliver traffic, secure the service, and diagnose failures. The current game account tables do not store an IP-address field.
2. Why we use it
We process this data to authenticate wallet-linked accounts, prevent duplicate matchmaking, operate real-time matches, enforce Energy and game rules, calculate results and standings, prevent abuse, investigate faults, and respond to support or privacy requests. We aim to collect only what is needed for these purposes. Where applicable law requires a specific legal basis, that basis depends on the activity: providing the service you request, legitimate security/fair-play interests, legal obligations, or consent where required.
3. What others can see
Other players may see your public wallet address and selected fighter when matched with you, and your fighter name and results in their match history. Leaderboards and weekly standings display fighter names and performance statistics. A public wallet address can also be associated with activity on a public blockchain outside this game. Do not choose a fighter name containing information you want to keep private.
4. Browser storage, wallets, and cookies
The game uses browser local storage for an authentication session token and, on mobile, Phantom connection/session and temporary encryption material needed for the wallet handoff. The server stores a hash of the authentication token rather than its raw value. Sign out and clear site storage on shared devices. The marketing site does not currently set its own analytics or advertising cookies. Google Fonts and Cloudflare may receive request data when pages load; Phantom processes wallet interactions under its own policy. We do not receive your wallet seed phrase or private key.
5. Sharing and location
We share data only as needed to operate the Service: with the opponent and public competition views described above, and with infrastructure providers such as Cloudflare and hosting/database services. Data may be processed in locations where those services operate. We do not sell game-account data or use it for targeted advertising. We may disclose information if required by law or needed to protect users or the Service, subject to applicable law.
6. Retention and security
Login challenges expire after about five minutes; authentication sessions expire after seven days unless revoked earlier. Match, profile, referral, rating and weekly-ladder records are currently retained to preserve game history, fair-play investigations, and account statistics; there is no automatic deletion schedule for those records yet. We use signature verification, limited-purpose sessions, hashed server-side session tokens, and access controls, but no online system is risk-free. Do not store a wallet seed phrase in a game form or support message.
7. Your choices and rights
You can disconnect/sign out, clear local site storage, stop using the game, and request access, correction, or deletion of account data by contacting hello@chickpop.online. Include your public wallet address and enough information to verify control of the account; never send a seed phrase. We will review requests under applicable law and may need to retain limited records for security, disputes, or legal obligations. Public-blockchain records, if any, cannot be erased by ChickenPop. You may also have a right to complain to a relevant privacy regulator.
8. Changes and contact
We will update this notice when the data practices change, especially before any new rewards, payments, analytics, or on-chain game feature launches. The effective date above will change when we publish a material update. For privacy questions or requests, email hello@chickpop.online.