Last updated: June 17, 2026
This Privacy Policy describes how scribbz.fun ("we", "us", "the Service") handles information when you use our platform. Free play is designed to collect as little personal data as possible. Paid contests (when offered) are subject to additional regulatory record-keeping, described in Section 5a.
If you connect a Phantom (or compatible Solana) wallet, your wallet's public key is shared with the Service. Wallet public keys are publicly visible on the Solana blockchain by design. We use your public key to verify deposits and send payouts. We do not have access to your private key or seed phrase at any time.
You may optionally enter a display name before playing. This name is visible to other players in your game session and is stored temporarily in server memory for the duration of the session only. It is not persisted to any database.
We temporarily store in-memory game state (scores, guesses, chat messages) for the duration of each game session. This data is deleted from server memory when the game ends. We do not write game history to any persistent database.
Free play involves no deposits and no transaction data. When you deposit SOL for a paid contest (when offered), the on-chain transaction signature is used to prevent duplicate credits and is also recorded as part of the durable payout/audit record described in Section 5a.
Our server logs standard connection events (connect/disconnect timestamps, errors) for debugging purposes. These logs do not contain personally identifiable information beyond IP addresses, which may be retained for up to 30 days for security purposes.
During free play we do not collect personal identifiers. Paid contests (when offered) require limited identity and compliance records — see Section 5a.
All SOL transactions (deposits, payouts, rake transfers) are recorded on the public Solana blockchain and are permanently visible to anyone. This is an inherent property of blockchain technology and is outside our control. If you wish to keep your financial activity private, do not use wagered game modes.
We store your display name and avatar preference in your browser's localStorage, encrypted with AES-256-GCM using a session key held only in sessionStorage. The encryption key is generated fresh each browser session and never leaves your device. Your wallet address is not stored in localStorage — it is retrieved directly from your Phantom wallet on each visit. You can clear all locally stored data at any time through your browser settings.
We use the following third-party services, each with their own privacy practices:
We use Phantom wallet for transaction signing. Phantom's privacy policy governs any data they collect within their extension.
If you participate in paid contests (when offered), regulatory obligations require us to retain certain records beyond the minimal session data above. These are used only for legal/compliance purposes and are not used for advertising or profiling:
These records are retained for as long as required by applicable law. Free play does not trigger KYC or geographic verification.
Free-play session data (player names, scores, chat) exists only in server RAM during active games and is deleted upon game completion or server restart. We maintain no persistent user database for free play. The paid-contest compliance and audit records described in Section 5a are persisted and retained for as long as required by applicable law. IP addresses in server logs are rotated after 30 days.
scribbz.fun is not directed at children under the age of 18. We do not knowingly collect any information from minors. If you believe a minor has used the Service, please contact us and we will take appropriate action.
For free play, we maintain no persistent profile tied to personal identifiers, so there is nothing for us to access, correct, or delete. For paid contests, the compliance and audit records described in Section 5a are retained to meet legal obligations; you may request access to, or deletion of, records that are not subject to a mandatory retention period by contacting us. Information recorded on the public Solana blockchain (such as wallet addresses and transaction signatures) is inherent to the blockchain and outside our control.
If you are a resident of the EU/EEA and have GDPR-related questions, or a California resident with CCPA-related questions, please contact us — we will respond within 30 days.
We use HTTPS (TLS) for all data in transit. Our server does not store private keys or seed phrases. The escrow wallet private key is stored as an environment variable on our server and is never exposed via any API or log.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above. Continued use of the Service constitutes acceptance of any changes.
Privacy questions can be directed to privacy@scribbz.fun or via @scribbzfun on X.