Privacy Policy

1. Information We Collect

When you visit https://polygongaming.io, play web arcade games, or connect an EVM wallet, we collect only the following information:

A. Web3 Blockchain Data (Public Ledger)

• Public Wallet Address: When you connect MetaMask, Rabby, or WalletConnect, we store your public Ethereum/Polygon address (linked_wallet_address, e.g., 0x1234...).
• On-Chain Transaction Hashes: When you deposit, withdraw, adopt referrals, or purchase utility NFTs, the public transaction hash (tx_hash) is logged to verify payment completion and prevent replay attacks.
• Smart Contract Ownership: Public balances of PGT (ERC-20), Starships, and Relics (ERC-721/1155) queryable directly from the Polygon PoS blockchain.

B. Gameplay & Platform Progression

• Synthetic Player Identifier: A randomly generated synthetic ID (player_id, e.g., 0xpgt... or 0xg...) used to link game progress without exposing personal data.
• Arcade Scores & Game Statistics: Game session scores, all-time high scores, survival times, and leaderboard achievements across arcade games.
• Downline & Referral Links: Anonymous hierarchical linkages (referred_by_l1..l4) required to calculate multi-tier referral commissions and loyalty bonuses.
• Staking & Faucet Records: Timestamps of faucet claims, loyalty streaks, and active vault staking allocations.

C. Authentication Credentials (Optional)

• Google OAuth: If you choose passwordless Google login, Supabase Auth stores your Google Account ID, verified email address, and avatar URL strictly for account recovery and profile synchronization.
• Sign-In with Ethereum (SIWE): If you authenticate via Web3, an EIP-191 cryptographic digital signature challenge verifies wallet ownership without passwords.
• Guest Mode: If you play as a guest, zero personal data is sent to our servers; game state is stored entirely in your local browser storage.

D. Technical & Anti-Abuse Telemetry

• Browser Environment: Browser type, user agent string, and screen dimensions to ensure proper canvas rendering.
• Security Logs: Ephemeral IP addresses and rate-limit counters processed in memory strictly by Cloudflare and Supabase to mitigate DDoS attacks, sybil bots, and automated cheat engines.

2. What We NEVER Collect

• Private Keys or Seed Phrases: We will never ask for your private key, recovery seed words, or external wallet password.
• Credit Card or Bank Numbers: All platform payments are handled directly via Web3 on-chain Polygon transfers or decentralized exchanges. We do not process or store credit card numbers.
• Real-World Identities: We do not collect government-issued IDs, physical home addresses, passport numbers, or telephone numbers.

3. Data Transparency Summary

4. How We Use Collected Information

We process the minimal data collected strictly for the following purposes:

• Core Gameplay Delivery: Maintaining arcade game states, provably fair dice/coin/card RNG generation, and space fleet mining calculations.
• On-Chain Ledger Audits: Validating that deposits, withdrawals, and NFT purchases originate from legitimate Polygon transactions before crediting in-game perks.
• Fair Play & Anti-Cheat Enforcement: Preventing sybil attacks, multi-accounting on 24h faucets, and automated memory injection in arcade leaderboards.
• Referral Program Accounting: Cascading multi-tier commission distributions to upstream referrers in real time upon verified downline activity.

5. LocalStorage & Cookies

Polygon Gaming uses modern HTML5 localStorage rather than intrusive tracking cookies:

• Functional Local Storage: Stores your audio volume preferences, visual theme toggles, virtual view routing (#arcade, #vault, #space), and guest player session tokens.
• Zero Cross-Site Tracking: We do not employ third-party advertising trackers, Google AdSense cookies, Facebook pixels, or fingerprinting scripts.
• Clearing Storage: You can clear your game preferences and guest state at any time by wiping your browser's site data or cache.

6. Data Sharing & Public Blockchain Transparency

We do not share your private account data with external commercial entities. Data is only accessible to:

• Cloud Infrastructure Partners: Cloud hosting, serverless functions, and encrypted database infrastructure provided by Supabase Inc. (US-East datacenter) with strict Row Level Security (RLS) policies.
• Legal Compliance: We may disclose data only if required by valid court order, subpoena, or applicable law.

7. Data Security & Technical Invariants

We enforce enterprise-grade security invariants across our frontend and database architecture:

• Zero-Anon-Writes Architecture: Anonymous web visitors and client applications have zero direct INSERT or UPDATE write permissions on database tables. All state changes are processed via cryptographically isolated SECURITY DEFINER stored procedures.
• Anti-Replay Protections: Polygon transaction hashes are guarded by database-level unique constraints (idx_nft_sales_tx_hash) and single-use cryptographic challenges.
• Client Tamper Defense: Balance mutations are prevented by PostgreSQL security triggers (prevent_direct_balance_mutation).

8. Your Privacy Rights (GDPR & CCPA Compliance)

Regardless of your geographic location, Polygon Gaming grants all users full control over their off-chain data:

• Right to Access: You may view all off-chain statistics, wallet linkages, and referral trees directly from your in-game profile panel.
• Right to Rectification: You may update your profile username or unlink your Web3 wallet address at any time.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your off-chain profile and Google Auth mapping by contacting community administration. Upon verification, your profile record will be permanently purged from our active database. (Note: On-chain blockchain transactions cannot be deleted due to the cryptographic nature of distributed ledgers).

9. Children's Privacy

Polygon Gaming is strictly intended for individuals who are 18 years of age or older. We do not knowingly solicit or collect personal information from children under 18. If we discover that an account belongs to a minor, we will take immediate steps to terminate the account and purge associated off-chain records.

10. Data Retention & Archival

We retain active player account records for as long as your profile utilizes Polygon Gaming services. If a guest profile remains completely inactive for more than 12 consecutive months, off-chain temporary session data may be purged to ensure optimal database hygiene.

11. Contact & Data Protection Officer

If you have any questions, feedback, or data erasure requests concerning this Privacy Policy, please reach out to our team:

• Official Website: polygongaming.io
• Discord Community: discord.gg/bdeK7Kv8Y2
• Terms of Service: terms.html