What we collect
Your email, your password (stored scrambled, we can't read it), robot name, language, your age confirmation, and your activity: points, missions, runs and invites.
Wallet
If you link a wallet we keep its public address and use it for season rewards. We never ask for your recovery phrase and never hold your keys. Linking is optional.
Discord
If you link Discord we keep your Discord ID and display name, and check once that you joined our server. We don't keep any Discord login token.
Safety checks
To stop fake accounts we keep scrambled (hashed) versions of your network address and device, never the real ones. A small cookie keeps you logged in and remembers your device and language.
How we use it
To run your account, count your points, work out season rewards, and stop cheating. We don't sell your data and we don't show ads.
Who helps us
Supabase stores the data, Resend sends our emails, Cloudflare checks for bots, and Discord confirms your membership if you link it. Screenshots you upload are private and only reviewers see them.
How long we keep it
As long as your account exists. Server backups are removed after 14 days.
Delete your account
Go to Settings, Delete my account. Your email, robot, points, screenshots and links are removed at once, and from backups within 14 days. We keep only a linked wallet address or Discord ID, with no name attached, so one identity can't collect rewards twice.
Questions
Ask us in the official Discord, linked in Settings.
DEMOPreview. Anything marked DEMO is not real yet.