Privacy Policy

Last Updated: March 29, 2026

1. Introduction

This Privacy Policy describes how the Permissionless Casino Protocol ("the Protocol", "we", "us", or "our") handles information when you access or use our decentralized frontend interface, smart contracts, and related services. As an open-source, decentralized protocol, our approach to data is fundamentally different from traditional centralized services.

We are committed to transparency about what data is and is not collected, and how blockchain technology inherently operates with publicly visible transaction data.

2. Decentralized Architecture & On-Chain Data

The Protocol operates on the Avalanche C-Chain, a public blockchain. It is essential that you understand the following regarding data on the blockchain:

Public Blockchain Data: All transactions on the Avalanche C-Chain are publicly visible and permanently recorded. This includes your wallet address, transaction amounts, game interactions, bet history, pool creation events, and all smart contract calls. This data is inherent to blockchain technology and cannot be modified, deleted, or made private.
Wallet Addresses: Your public wallet address is visible on the blockchain for every transaction. While wallet addresses are pseudonymous, they can potentially be linked to your identity through blockchain analysis, exchange records, or other means.
No Control Over Blockchain Data: The Protocol contributors have no ability to delete, modify, restrict access to, or control the visibility of any data recorded on the blockchain. This is a fundamental characteristic of decentralized public ledgers.
Smart Contract Events: Game outcomes, bet amounts, win/loss results, pool deposits, and withdrawals emit on-chain events that are indexed and publicly queryable by anyone using blockchain explorers or indexing services.

3. Information Collected Through the Frontend

3.1 Information You Voluntarily Provide

Wallet Connection: When you connect your wallet (e.g., MetaMask, WalletConnect, Coinbase Wallet), your public wallet address is shared with the frontend interface to enable interaction with the Protocol.
Arena Profile Data: If you connect an Arena account, your Arena username, avatar, and associated profile information are stored on-chain via smart contracts to enable social features, leaderboards, and user profiles.
Chat Messages: Messages sent through the in-app global chat or game-specific chat features are stored in our database and are visible to other users.
User Preferences: Settings such as notification preferences, favorite games, and UI preferences may be stored locally in your browser or in our database.

3.2 Information Collected Automatically

Analytics Data: We may collect anonymized usage analytics including page views, feature interactions, device type, browser type, operating system, screen resolution, and referral sources. This data is used solely to improve the frontend experience.
IP Addresses: Your IP address may be temporarily processed by our hosting infrastructure (Netlify) and CDN services for the purpose of delivering the frontend interface. We do not persistently store IP addresses for tracking purposes.
Local Storage & Cookies: The frontend uses browser local storage and cookies for functional purposes including wallet connection persistence, UI preferences, consent records, and session management.
RPC Requests: Blockchain RPC requests made through the frontend are routed through RPC providers (e.g., Avalanche public RPC, Infura, Alchemy). These providers may collect metadata about your requests in accordance with their own privacy policies.

3.3 Information We Do NOT Collect

We do not collect your real name, email address, phone number, physical address, government-issued identification, or any traditional personally identifiable information (PII).
We do not collect or store your private keys, seed phrases, or wallet passwords.
We do not perform KYC (Know Your Customer) or identity verification procedures.
We do not use tracking cookies for advertising or marketing purposes.
We do not sell, rent, or trade any user data to third parties for commercial purposes.

4. How We Use Information

Information collected through the frontend is used exclusively for the following purposes:

Protocol Functionality: To enable wallet connection, transaction signing, game interactions, and other core Protocol features.
User Experience: To display game history, leaderboards, user profiles, notifications, and personalized UI elements.
Analytics & Improvement: To understand usage patterns, identify bugs, optimize performance, and improve the frontend interface.
Security: To detect and prevent potential abuse, exploits, or attacks against the frontend infrastructure.
Community Features: To power chat, social features, and community engagement tools.

5. Data Storage & Security

Database: All core data (profiles, chat messages, game data, analytics) is stored on the Avalanche C-Chain blockchain via smart contracts. Data is public, immutable, and verifiable on-chain.
Frontend Hosting: The frontend is hosted on Netlify, a global CDN and hosting platform. Netlify's privacy and security practices apply to the delivery of the frontend interface.
Encryption: All data transmissions between your browser and our services are encrypted using TLS (HTTPS).
Access Controls: Database access is restricted through row-level security policies, API key authentication, and role-based access controls.
No Guarantees: While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of any information transmitted to or stored by the Protocol.

6. Third-Party Services

The Protocol frontend interacts with the following categories of third-party services, each governed by their own privacy policies:

Wallet Providers: MetaMask, WalletConnect, Coinbase Wallet, and other supported wallets. These providers may collect usage data in accordance with their privacy policies.
RPC Providers: Avalanche public RPC endpoints and potentially third-party RPC services that process your blockchain requests.
RainbowKit / Wagmi: Libraries used for wallet connection and blockchain interaction. These are client-side libraries that do not independently collect data.
DexScreener: Used for token price data. API requests to DexScreener are made server-side and do not expose user data.
Avalanche C-Chain: Blockchain network where all smart contract data is stored. All on-chain data is publicly visible.
Netlify: Frontend hosting and CDN. Subject to Netlify's privacy policy.
Arena SDK: Social integration platform. If you connect an Arena account, Arena's privacy policy applies to your Arena data.

We encourage you to review the privacy policies of all third-party services you interact with through the Protocol.

7. Cookies & Local Storage

The Protocol frontend uses the following types of browser storage:

7.1 Essential Cookies & Storage

Wallet Connection State: Stored in local storage to maintain your wallet connection across page reloads.
Consent Preferences: A cookie/local storage entry records your acceptance of these Terms, Privacy Policy, and cookie consent.
UI Preferences: Theme settings, notification preferences, and display options stored locally.

7.2 Functional Cookies & Storage

Favorite Games: Your list of favorited game pools stored locally for quick access.
Recent Searches: Search history stored locally for convenience.
Notification State: Read/unread status of notifications stored locally.

7.3 Analytics Cookies

Usage Analytics: Anonymous usage data to understand how the frontend is being used and to improve the user experience. No personally identifiable information is collected through analytics cookies.

You can manage cookies through your browser settings. Disabling essential cookies may prevent the frontend from functioning correctly. Note that blocking cookies does not affect your ability to interact with the smart contracts directly.

8. Data Retention

Blockchain Data: All on-chain data is permanently and immutably stored on the Avalanche C-Chain. This data cannot be deleted or modified by any party, including the Protocol contributors.
Profile Data: Arena profile data and user preferences are retained as long as the associated wallet address remains active in the system.
Chat Messages: Chat messages are retained for community record-keeping purposes.
Analytics Data: Anonymized analytics data is retained for a maximum of 24 months, after which it is aggregated or deleted.
Local Storage: Browser local storage data persists until you clear your browser data or the data expires naturally.

9. Your Rights & Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data:

Access: You can view all your on-chain data through any blockchain explorer (e.g., Snowtrace). Off-chain profile data can be viewed through the Protocol frontend.
Deletion of Off-Chain Data: You may request deletion of your off-chain profile data. Please note that on-chain data cannot be deleted due to the immutable nature of the blockchain.
Opt-Out of Analytics: You can disable analytics cookies through your browser settings or use browser extensions that block analytics scripts.
Wallet Disconnection: You can disconnect your wallet at any time through the wallet interface, which will end the frontend session.
Browser Data: You can clear all local storage and cookies at any time through your browser settings.

Due to the decentralized nature of the Protocol, data rights requests related to on-chain data cannot be fulfilled. The "right to be forgotten" under GDPR and similar regulations does not apply to data immutably recorded on a public blockchain, as no data controller has the ability to delete such data.

10. International Users

The Protocol is accessible globally. If you are accessing the Protocol from outside the jurisdiction where the frontend infrastructure is hosted, please be aware that data may be transferred to and processed in different countries. By using the Protocol, you consent to the transfer and processing of your information as described in this Privacy Policy.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with comprehensive data protection laws: the Protocol processes minimal personal data, and the legal basis for processing is (a) your consent, provided through the consent banner, and (b) legitimate interest in maintaining and improving the Protocol.

11. Children's Privacy

The Protocol is not intended for use by individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect information from minors. If you believe a minor has interacted with the Protocol, please contact the community through official channels.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Protocol after changes are posted constitutes your acceptance of the revised Privacy Policy.

13. Data Breach Notification

In the event of a data breach affecting off-chain data, we will make reasonable efforts to notify affected users through the Protocol frontend and official communication channels within 72 hours of becoming aware of the breach, as required by applicable law.

On-chain data is publicly available by design and does not constitute a "data breach" in the traditional sense.

14. Contact

For privacy-related inquiries or to exercise your data rights, please reach out through the official community channels linked from the Protocol frontend. As a decentralized protocol, we do not maintain a traditional privacy office, but the community contributors will make reasonable efforts to address your concerns.