What we collect

• Account. A wallet address and/or an email address, your handle, display name, bio and region if you add them, and when you signed in and from what IP and device.
• Play. Match results, rating, mastery, quest progress, Embers, inventory and purchases. This is the game.
• Payments. On-chain transaction hashes and the paying wallet address. These are public on the Base network whether or not we store them. We never see or store keys.
• Verification. Before random boxes, paid brackets or marketplace sales you verify with our identity provider, Didit. Your documents and face scan go to Didit and never reach our servers; we receive only the outcome, your age bracket, and the issuing country of your ID.
• Fraud signals. Hashed device and network signals used to detect multi-accounting and bots.

What we do with it

Run your Core, match you fairly, pay prizes to the right wallet, keep boxes and brackets out of reach of minors and restricted regions, stop cheating, and meet legal obligations. We do not sell personal data and we do not run advertising.

Who else sees it

• Didit (identity verification), Supabase (database and sign-in), Vercel (hosting). Each processes data only to provide its service to us.
• Other players see your public profile if you leave it on: handle, name, bio, rating, mastery, cosmetics and verified badge. Never your email or wallet.
• The Base network holds your purchases and prizes permanently and publicly; that is how it works and we cannot alter it.
• Authorities, where the law requires it.

Your controls

Edit your profile, switch it private, link or change your payout wallet, and sign out everywhere from Settings. To delete your Core and personal data, email us from the address on the account or sign a request from the linked wallet; we complete deletions within 30 days. On-chain records cannot be deleted because we do not control the chain. Verification records are retained as long as the law requires us to keep them, then deleted.

Cookies

Only the session cookie that keeps you signed in. No tracking or advertising cookies.

Children

Free play is open, but no one under 18 may buy, trade, or enter paid brackets, and verification enforces that. We do not knowingly collect data from children; if you believe we have, tell us and we will delete it.

Changes and contact

Material changes are dated at the top and announced on the dev log. Questions or requests: privacy@fyrecore.app.