back to game
scalprunner500x

privacy policy

last updated May 2026

Draft. This describes our actual data practices today. Counsel review is in progress to add jurisdiction-specific rights language (GDPR/CCPA). The data inventory and processor list below are accurate.

what we collect

  • Wallet address. Public, on-chain. Tied to your Privy account.
  • Privy account identifier (DID). Used to authenticate API calls and join your identity across our games (Swallow Me, Holy Liquid, ScalpRunner) on the unified leaderboard.
  • Trade history. Open/close prices, leverage, wager, PnL, liquidation outcome, transaction hashes. Stored in Supabase.
  • Username if you pick one for the leaderboard.
  • Email or social login if you log in via those methods. That identity sits with Privy under their privacy policy. We see only the wallet address and the DID.
  • IP address and request metadata. Standard server logs. Used for abuse prevention.
  • Browser error reports. Unhandled errors and stack traces. PII is not intentionally collected; the wallet address may be tagged on the error if available.

what we do NOT collect

  • We do not custody funds or private keys.
  • We do not require KYC for gameplay.
  • We do not sell user data.

where it lives

  • Supabase (US-East). Trade rows + cross-game player identity table.
  • Privy (US). Embedded wallet provisioning + auth.
  • Railway (US). Application logs.
  • Vercel (Global edge). Frontend hosting.
  • Base & Avantis (public chain). All trade transactions are public on basescan.org.

retention

  • Trade history: indefinite. Powers the leaderboard and your stats across games.
  • Server logs: ~30 days.
  • Error reports: ~90 days.
  • On-chain transactions: immutable; we cannot delete them.

your rights

  • Data deletion: ask in the Hiscore Discord. We can purge your trade rows and identity from our database; we cannot delete your on-chain history (it’s public on Base).
  • Data export: same channel; we’ll send a CSV of your trade history.
  • EU/CA users: jurisdiction-specific rights are being added in the canonical post-review version of this policy. Reach out via Discord if you need to exercise a specific right in the meantime.

cookies

We use first-party cookies for authentication (Privy session). No third-party advertising or tracking cookies.

children

The Service is not for users under 18.

changes

We will update this policy as practices change. Continued use after an update is acceptance.

contact

Hiscore Discord.