SolRoyale — Privacy Policy
SolRoyale is a non-custodial betting app on the Solana blockchain. This policy explains, in plain terms, what the app and its server can see about you, what they keep, and what they cannot do.
The short version. We never hold your keys or your funds. We do not ask for your
name, email, phone number or address. What we store about you is your wallet's public address, a
display name and picture if you choose to set one, a notification token if you turn
notifications on, and anonymous usage data under a random install id — where new players give up,
which screens get used, and which attempts to play fail and why.
1. Who we are
SolRoyale is operated by Antcat1337 (“we”), contactable at kuma.api1337@gmail.com. The app is distributed through the Solana dApp Store and at unugame.com.
2. What we collect
| Data | When | Why |
|---|---|---|
| Wallet public address | When you connect a wallet | It identifies your seat at a table and where a payout goes |
| Display name and avatar | Only if you set them | Shown to other players in the lobby and on the leaderboard |
Solana name (e.g. you.skr) | If your wallet owns one | Suggested as your display name; we read it from the chain, you may decline it |
| Push notification token | Only if you enable notifications | To tell you that a round you had money in settled, that somebody joined your table, that an opponent invites you to a rematch, that a table opened in a game you asked to be told about, or that a reward was paid to your wallet; and, unless you turn them off in Settings, a come-back reminder when the weekly pool is about to close, the daily quests reset after a break, or somebody you invited places a first bet (at most one a day) |
| Game records | Every round you play | Your history screen, the leaderboards, and settling the round |
| Invite code and referral link | If you share an invite code or enter one | Working out rebates and invite rewards; the link between inviter and invitee is kept for that purpose |
| Rewards ledger (rebates, quest bonuses, weekly prizes and their payouts) | When you earn or receive one | Paying them out and showing them to you |
| Install counter (a random id the app makes up, platform, app version, language, and the moment you first open the app, choose a language and connect a wallet) | Once each, the first time | Counting how many installs reach each step. It carries no identity until a wallet connects, and no IP address is stored with it |
| Usage events: which screens you open (recorded as route names, with wallet addresses, numbers and invite codes replaced by placeholders), the theme and language you choose, how long a session lasts, when the app is opened, and each attempt to open or join a table, buy tickets or play a hand — with whether it went through and, if not, the kind of reason (wallet rejected, insufficient balance, network, table taken, expired, maintenance, or a server or program error code). Tied to the same random install id; after you connect a wallet, to that address | While you use the app | Seeing which parts of the app people use, and where and why attempts to play fail, so we can fix them; raw events are kept for 45 days |
| Device summary: for each install id, the platform, app version, latest theme and language, the wallet it connected, when it was first and last seen, how many times it opened the app and viewed a screen, how long its sessions were in total, and which days it was active (the last 90) | Updated while you use the app | Counting active devices and retention, and the spread of themes, languages and versions |
| Per-game session key | Blackjack and Tower Duel, stored on your device only | Lets you play a hand without signing every move. It can move no funds and is discarded when the round ends |
| Support notes | Only if you write to us, or if we investigate abuse on a wallet | Handling your request; visible only to us |
| Server request logs (IP address, path, time) | Every request | Rate limiting, abuse prevention and debugging |
| Country of the request (supplied by Cloudflare) | Read on every request the app makes for its configuration (which it polls while open) and when a round is started; not stored | Telling the app up front, and refusing at the moment of starting, new rounds from countries where the service is not offered |
| A pause you set (your wallet address and when it ends) | Only if you use Responsible play | Refusing new rounds from that wallet until it ends |
What we never collect
- Your private key, seed phrase or any other secret — the app cannot read them, and no part of it ever asks.
- Email address, phone number, legal name, date of birth, government ID or postal address.
- Location, contacts, photos other than a picture you deliberately upload as your avatar, calendar, microphone or camera.
- Advertising identifiers. There is no advertising, no third-party analytics SDK and no tracker in this app. The only third-party component that talks to anyone is Google's Firebase messaging client in the Android app, used solely to receive notifications; the install counter and usage events above go to our own server and nowhere else.
3. The blockchain part is public and permanent
Every bet, every payout and every settlement is a transaction on Solana. It is public forever, it is visible to anyone, and we cannot delete, edit or hide it — not for you and not for ourselves. Your wallet address is what appears there. If you want a game history that is not linked to the rest of your on-chain activity, use a separate wallet.
4. Who else sees it
- The Solana network. Public by design, as above.
- Your wallet app (Seed Vault, Phantom, Solflare and the like) signs every transaction and message; it has its own privacy policy.
- Our RPC provider (currently Helius) relays our reads and transactions to the network and sees them in the process.
- Cloudflare sits in front of our server and website as a proxy, so it sees the IP address and the requests of every visitor, as it does for a large part of the web.
- Google (Firebase Cloud Messaging) delivers notifications to the Android app: only if you turned notifications on, it receives the device's registration token, the notification title and text, and the id of the table or round the notification is about. The Firebase messaging client is embedded in the Android app for this and nothing else. Tokens issued in the older Expo format are relayed through the Expo push service instead.
- The Solana dApp Store and its storage provider distribute the app itself; they do not receive your game data.
- Other players see your display name, avatar, wallet address and the moves you make in a shared game — that is the game.
We do not sell data, we do not share it for advertising, and we do not run an ad network.
5. How long we keep it
- Profile (name, avatar): until you change or clear it.
- Push token: until you turn notifications off, uninstall the app, or the token stops working — then we drop it.
- Game records held by our server: kept as history so your own past rounds stay readable.
- Rewards ledger: kept as accounting for as long as the service runs.
- Install counter: at most 180 days, then deleted.
- Usage events: raw events 45 days; the device summary 180 days after the device was last seen, then deleted.
- Notification delivery log (that a notification was sent to your wallet, and its title): 7 days.
- Support notes: until the matter is closed, or on request.
- Request logs: rotated automatically — typically a few days, never more than a few weeks.
- A pause you set: kept until it ends, then only as a past entry that no longer blocks anything.
- On-chain records: forever, and outside our control.
6. Your choices
- Stay anonymous. Setting a name and picture is optional; without them you appear as a shortened wallet address.
- Clear your profile in the app to remove the name and picture from our server.
- Turn notifications off in the app or in Android settings; the token is then discarded. Come-back reminders alone can be switched off in Settings while game notifications stay on, and open-table alerts only arrive for games you subscribed to.
- Reset the install counter by clearing the app's data; a fresh random id is made and the old one is never linked to it.
- Walk away. Disconnecting your wallet ends the association immediately. Nothing about the app works without a wallet you control.
- Ask us at kuma.api1337@gmail.com for a copy or deletion of what we hold off-chain. On-chain data cannot be deleted by anyone.
7. Security
Traffic between the app and our server is encrypted (HTTPS). Profile changes are signed by your wallet, so nobody else can rename you or change your picture. Our server holds a hot key used only to sign settlements and pay their fees — it cannot move your funds, and it never touches your keys.
8. Children
SolRoyale is not for anyone under 18. The app asks you to confirm that you are 18 or older the first time you open it. We do not knowingly collect anything from a minor. If you believe a minor has used the app, write to kuma.api1337@gmail.com and we will remove what we hold.
9. Changes
If this policy changes materially we will update the date at the top and, where the change affects what we collect, say so in the app before it takes effect.
10. Contact
kuma.api1337@gmail.com · Telegram t.me/Kuma_1338 · X x.com/Antcat1337
SolRoyale 是 Solana 链上的非托管投注应用。这份政策用大白话说清楚：应用和它的服务器能看到你的什么、 留下什么、以及做不到什么。
一句话版本。我们不保管你的私钥，也不保管你的钱。我们不要你的姓名、邮箱、电话和住址。
我们存的只有：你钱包的公开地址；你自己愿意设的昵称和头像；你开了通知才会有的推送令牌；
以及挂在一个随机安装 id 下的匿名使用数据——新玩家在哪一步走掉、哪些页面有人用、哪些下注尝试没成功以及为什么。
1. 我们是谁
SolRoyale 由 Antcat1337（下称"我们"）运营，联系方式 kuma.api1337@gmail.com。应用通过 Solana dApp Store 和 unugame.com 分发。
2. 我们收集什么
| 数据 | 什么时候 | 为什么 |
|---|---|---|
| 钱包公开地址 | 你连接钱包时 | 它标识你在牌桌上的位置，以及赔付打给谁 |
| 昵称与头像 | 只在你自己设置时 | 展示给大厅和排行榜上的其他玩家 |
Solana 域名（如 you.skr） | 你的钱包持有时 | 作为昵称候选；我们从链上读取，你可以不用 |
| 推送令牌 | 只在你开启通知时 | 用来告诉你：你有钱在里面的一局结算了、有人上了你的桌、对手邀你再来一局、你订阅的玩法有人开桌了、有一笔奖励打到了你的钱包；另外，除非你在设置里关掉，周奖池快收尾、你歇了几天后每日任务又刷新、你邀请的人第一次下注时会提醒你一声（每天最多一条） |
| 对局记录 | 你玩的每一局 | 你的历史页、排行榜，以及完成结算 |
| 邀请码与邀请关系 | 你分享或填写邀请码时 | 计算返利和邀请奖励；邀请人与被邀请人的对应关系为此保留 |
| 奖励账目（返利、任务奖金、周榜奖金及其发放记录） | 你赚到或收到时 | 发放给你，并在应用里展示 |
| 安装计数（应用自己随机生成的一个 id、平台、应用版本、语言，以及首次打开、选完语言、连上钱包这三个时刻） | 各只记一次 | 数一数有多少安装走到了哪一步。连钱包之前不带任何身份，也不随它存 IP |
| 使用事件：打开了哪些页面（记的是路由名，其中的钱包地址、数字和邀请码都换成占位符）、选了什么主题和语言、一次会话多长、什么时候打开应用，以及每一次开桌、加入、买票、出牌的尝试——成没成，没成的话是哪一类原因（钱包拒绝、余额不足、网络、桌子已被占、已过期、维护中，或某个服务器 / 程序错误码）。关联同一个随机安装 id；连接钱包后关联到该地址 | 你使用应用期间 | 了解大家在用应用的哪些部分、在哪一步因为什么没玩成，好去修；原始事件保留 45 天 |
| 设备摘要：每个安装 id 对应的平台、应用版本、最近的主题和语言、连接过的钱包、首次和最近出现的时间、打开应用与浏览页面的次数、会话累计时长，以及活跃过的日期（最近 90 天） | 你使用应用期间持续更新 | 统计活跃设备数、留存，以及主题、语言、版本的分布 |
| 单局会话密钥 | 21 点和爬塔对战，只存在你的设备上 | 让你打一手牌不用每步都签名。它动不了钱，对局结束即丢弃 |
| 客服备注 | 只在你写信给我们，或我们排查某个钱包的滥用行为时 | 处理你的请求；只有我们自己能看到 |
| 服务器访问日志（IP、路径、时间） | 每次请求 | 限流、防滥用、排查故障 |
| 请求来自的国家（由 Cloudflare 提供） | 应用每次拉取配置时（打开期间会定时拉）以及开始新的一局时读取，不保存 | 提前告诉应用、并在开局那一刻拒绝来自不提供服务的国家的新对局 |
| 你设置的暂停（钱包地址和结束时间） | 只有用了「负责任游戏」才有 | 在结束前拒绝这个钱包开始新的一局 |
我们从不收集
- 你的私钥、助记词或任何其他密钥——应用读不到，也从不索取。
- 邮箱、电话、真实姓名、出生日期、身份证件、通讯地址。
- 位置、通讯录、相机、麦克风、日历，以及除你主动上传作头像之外的任何照片。
- 广告标识符。这个应用里没有广告、没有第三方统计 SDK、没有任何追踪器。唯一会和外部通信的第三方组件是安卓应用里 Google 的 Firebase 消息组件，只用来接收通知；上面的安装计数和使用事件只发到我们自己的服务器。
3. 链上那部分是公开且永久的
每一笔下注、每一次赔付、每一次结算都是 Solana 上的一笔交易。它永久公开、任何人可见，而且 我们删不掉、改不了、也藏不住——对你如此，对我们自己也如此。出现在那里的是你的钱包地址。 如果你不希望游戏记录和你其他的链上活动关联，请用一个单独的钱包。
4. 还有谁能看到
- Solana 网络：如上，设计上就是公开的。
- 你的钱包应用（Seed Vault、Phantom、Solflare 等）：每一笔交易和消息都由它签名，它有自己的隐私政策。
- 我们的 RPC 服务商（目前是 Helius）：负责把读取和交易转发到网络，过程中会经手。
- Cloudflare：作为代理挡在我们的服务器和网站前面，所以能看到每位访客的 IP 和请求，和它对很大一部分网站所做的一样。
- Google（Firebase Cloud Messaging）：负责把通知送到安卓应用。只在你开了通知时，它会收到这台设备的注册令牌、通知的标题和正文，以及这条通知对应的桌号或局号。安卓应用里内嵌了 Firebase 的消息组件，只用于此。旧的 Expo 格式令牌则仍经 Expo 推送服务转发。
- Solana dApp Store 及其存储服务商：只分发应用本体，不接触你的对局数据。
- 其他玩家：能看到你的昵称、头像、钱包地址，以及你在同一局里的操作——这就是游戏本身。
我们不出售数据，不为广告目的共享数据，也不经营广告网络。
5. 保留多久
- 个人资料（昵称、头像）：到你自己修改或清除为止。
- 推送令牌：到你关闭通知、卸载应用、或令牌失效为止，之后我们丢弃它。
- 服务器上的对局记录：作为历史保留，好让你能回看自己打过的局。
- 奖励账目：作为账务记录，服务运行期间一直保留。
- 安装计数：最多 180 天，之后删除。
- 使用事件：原始事件 45 天；设备摘要在该设备最后一次出现后保留 180 天，然后删除。
- 推送投递记录（给你的钱包发过一条通知及其标题）：7 天。
- 客服备注：到事情处理完为止，或应你的要求删除。
- 访问日志：自动轮转，通常几天，最多不超过几周。
- 你设置的暂停：保留到结束为止，之后只作为不再生效的历史记录。
- 链上记录：永久，且不在我们控制之内。
6. 你的选择
- 保持匿名。昵称和头像是可选的；不设的话，你显示为一个缩短的钱包地址。
- 清空资料：在应用里清除昵称和头像，服务器上的那份随之删除。
- 关闭通知：在应用内或安卓系统设置里关掉，令牌随即被丢弃。只想关掉回流提醒、留着对局通知的话，设置页里有单独的开关；「有人开桌时通知我」是按玩法单独订阅的，不订就没有。
- 重置安装计数：清除应用数据即可，会生成一个新的随机 id，旧的永远不会和它关联。
- 随时离开。断开钱包连接，关联立即结束。没有你自己掌控的钱包，这个应用什么都做不了。
- 找我们：写信到 kuma.api1337@gmail.com，可以索取或删除我们手上的链下数据。链上数据任何人都删不掉。
7. 安全
应用和服务器之间的流量是加密的（HTTPS）。修改资料需要你的钱包签名，所以别人改不了你的昵称和头像。 我们的服务器持有一把热钥匙，只用来签结算交易并支付它们的手续费——它动不了你的钱，也永远接触不到你的密钥。
8. 未成年人
SolRoyale 不面向 18 周岁以下的人。首次打开应用时会请你确认已年满 18 周岁。我们不会在知情的情况下收集未成年人的任何信息。如果你认为有未成年人 使用了本应用，请写信到 kuma.api1337@gmail.com，我们会删除手上的相关数据。
9. 变更
本政策如有实质性变更，我们会更新顶部的日期；涉及收集内容的变化，会在生效前于应用内说明。
10. 联系我们
kuma.api1337@gmail.com · Telegram t.me/Kuma_1338 · X x.com/Antcat1337