scribbz.fun
← Back to game

Privacy Policy

Last updated: June 15, 2026

This Privacy Policy describes how scribbz.fun ("we", "us", "the Service") handles information when you use our platform. We have designed scribbz.fun to collect as little personal data as possible.

1. Information We Collect

Wallet Address

If you connect a Phantom (or compatible Solana) wallet, your wallet's public key is shared with the Service. Wallet public keys are publicly visible on the Solana blockchain by design. We use your public key to verify deposits and send payouts. We do not have access to your private key or seed phrase at any time.

Display Name

You may optionally enter a display name before playing. This name is visible to other players in your game session and is stored temporarily in server memory for the duration of the session only. It is not persisted to any database.

Game Data

We temporarily store in-memory game state (scores, guesses, chat messages) for the duration of each game session. This data is deleted from server memory when the game ends. We do not write game history to any persistent database.

Transaction Signatures

When you deposit SOL, we store the on-chain transaction signature in server memory to prevent duplicate credits within a server session. This data is not persisted across server restarts.

Server Logs

Our server logs standard connection events (connect/disconnect timestamps, errors) for debugging purposes. These logs do not contain personally identifiable information beyond IP addresses, which may be retained for up to 30 days for security purposes.

2. Information We Do Not Collect

  • We do not collect your name, email address, phone number, or any other personal identifiers.
  • We do not use tracking cookies or advertising pixels.
  • We do not use third-party analytics services (Google Analytics, etc.).
  • We do not build user profiles or behavioral advertising databases.
  • We do not sell, rent, or trade any information about you.

3. Blockchain Transparency

All SOL transactions (deposits, payouts, rake transfers) are recorded on the public Solana blockchain and are permanently visible to anyone. This is an inherent property of blockchain technology and is outside our control. If you wish to keep your financial activity private, do not use wagered game modes.

4. Local Storage

We store your display name and avatar preference in your browser's localStorage, encrypted with AES-256-GCM using a session key held only in sessionStorage. The encryption key is generated fresh each browser session and never leaves your device. Your wallet address is not stored in localStorage — it is retrieved directly from your Phantom wallet on each visit. You can clear all locally stored data at any time through your browser settings.

5. Third-Party Services

We use the following third-party services, each with their own privacy practices:

  • Helius — Solana RPC provider used to submit and verify blockchain transactions. Your wallet address is transmitted to Helius when you deposit or withdraw.
  • DiceBear — Avatar generation service. Your display name or a random seed is sent to generate an avatar image. No other data is transmitted.
  • Google Fonts — Fonts loaded from Google's CDN. Standard Google Fonts privacy policy applies.

We use Phantom wallet for transaction signing. Phantom's privacy policy governs any data they collect within their extension.

6. Data Retention

Session data (player names, scores, chat) exists only in server RAM during active games and is deleted upon game completion or server restart. We operate no persistent user database. IP addresses in server logs are rotated after 30 days.

7. Children's Privacy

scribbz.fun is not directed at children under the age of 18. We do not knowingly collect any information from minors. If you believe a minor has used the Service, please contact us and we will take appropriate action.

8. Your Rights

Because we do not maintain a persistent user database tied to personal identifiers, there is no stored profile to access, correct, or delete. If you have concerns about data associated with your wallet address (which is public blockchain data), those concerns are governed by the nature of the Solana blockchain itself rather than our systems.

If you are a resident of the EU/EEA and have GDPR-related questions, or a California resident with CCPA-related questions, please contact us — we will respond within 30 days.

9. Security

We use HTTPS (TLS) for all data in transit. Our server does not store private keys or seed phrases. The escrow wallet private key is stored as an environment variable on our server and is never exposed via any API or log.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above. Continued use of the Service constitutes acceptance of any changes.

11. Contact

Privacy questions can be directed to privacy@scribbz.fun or via @scribbzfun on X.

Terms of Service · Play scribbz.fun