Privacy Policy

Last updated: June 2025

1. What We Collect

SolToss collects only what is necessary to operate the Platform:

• Wallet address — your Solana public key, used to identify you, verify deposits, and send payouts. Public keys are not personally identifiable information.
• Transaction signatures — Solana transaction IDs for your deposits and payouts, stored for game record-keeping and dispute resolution.
• Game records — bet amounts, outcomes, timestamps, and matched opponent wallets. All stored in a Cloudflare D1 database.
• Session tokens — a short-lived JWT stored in your browser's localStorage, used to authenticate API requests. It expires on disconnect and contains only your wallet address.

2. What We Do Not Collect

• No name, email address, phone number, or any personally identifiable information.
• No IP addresses stored persistently (Cloudflare processes them at the edge; we do not log them).
• No cookies — we use localStorage for session tokens only.
• No tracking pixels, ad networks, or third-party analytics scripts.

3. How We Use Your Data

• To verify your deposit arrived on-chain before entering the match queue.
• To match you with an opponent at the same stake tier.
• To send your payout or refund to your wallet.
• To display your game history on the results screen.
• To detect and prevent cheating, botting, or abuse.

4. Data Retention

Completed game records (paid or refunded bets) are automatically deleted after 30 days. Bet data in terminal states is pruned by an automated cron job. We do not archive or sell historical game data.

5. Third Parties

• Cloudflare — our infrastructure provider. Workers, D1, KV, and Pages are all Cloudflare services. Cloudflare's own privacy policy applies to their infrastructure.
• Helius — Solana RPC provider used for transaction verification and sending payouts. Helius sees the Solana transaction data we send, not your personal information.
• Solana blockchain — all transactions are permanently recorded on the Solana public ledger. Wallet addresses, amounts, and timestamps are publicly visible on-chain.

6. Blockchain Transparency

Because Solana is a public blockchain, your wallet address, bet amounts, and payout transactions are permanently visible to anyone. This is inherent to how blockchain technology works and is outside our control.

7. Your Rights

Since we hold only your public wallet address (which is not personally identifiable), most data privacy rights (access, correction, deletion) are either inherently satisfied or inapplicable. If you have concerns about data we hold, contact us and we will respond within 30 days.

8. Security

We implement industry-standard security practices to protect the platform and your funds.

9. Changes

We may update this Privacy Policy. The updated date at the top of this page reflects the latest revision. Continued use of the Platform constitutes acceptance.