Privacy

In short

This site has no accounts, no forms, no analytics and no cookies. Your game record stays in your browser's localStorage. Two things reach a server: the page itself (from the hosting provider) and the public leaderboard (from Supabase, our database provider). Your wallet address and your score are sent only if you connect a wallet and sign.

Who is the data controller

SuperWeed project — contact: contact@superweedsolana.xyz.

What is processed, and why

• Nothing you type. There are no input fields and no newsletter.
• Local game data. Your arcade record and the highest stage reached are stored in localStorage on your device. They are not transmitted by themselves, and deleting your browser data removes them.
• Server logs. The hosting provider (Vercel Inc.) may record IP addresses and request metadata to deliver pages and defend against abuse. This is standard hosting behaviour and is kept for the shortest period the provider allows.
• Leaderboard requests. When you scroll to the leaderboard, or after you connect a wallet, your browser asks Supabase for the top ten. If a wallet is connected, the request also carries its address, so the site can show your position. When a game starts, your browser also asks Supabase for a run ticket: a timestamp signed by the server, with nothing about you in it, used to check that a score took real time to make. Like any server, Supabase receives your IP address and request metadata to answer these requests.

Leaderboard and wallet

Playing does not require a wallet. If you connect one and submit a score, the site asks your wallet to sign a message (no transaction, no fee) and sends to our server: the wallet address, the score, the stage, the coins collected, the run ticket and that signed message. The server checks the signature and stores the address, score, stage, coins and the time of the run; the signature itself is not kept. Every submitted run is stored, and the leaderboard shows the best one per wallet.

A wallet address is public on the Solana blockchain, but it can be linked to you, so we treat it as personal data. The leaderboard shows it in shortened form (first and last four characters). Your runs are kept until you ask us to delete them, writing to the contact address above. If you never connect a wallet, no address and no score are sent.

The wallet itself (Phantom, Solflare, Backpack or another) is software you installed; what it does with your data is covered by its own policy.

Cookies and third parties

No cookies are set. Fonts, images and the game are self-hosted. The only external service is Supabase, Inc., which runs the leaderboard database and function for us as a processor, in the Paris (eu-west-3) region. See the cookie page for what stays in your browser.

Legal basis

Server logs and leaderboard requests rely on the legitimate interest of keeping the service available and secure (Art. 6(1)(f) GDPR). Storing your runs relies on your request: you connect the wallet and sign each score to enter the leaderboard (Art. 6(1)(b) GDPR). No consent banner is shown because no non-essential cookie or tracker is used.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and you can object to processing. Write to privacy@superweedsolana.xyz. You can also lodge a complaint with your national data protection authority (in Italy, the Garante — garanteprivacy.it).

Transfers, minors, changes

Leaderboard data is stored by Supabase in the Paris (eu-west-3) region; server logs stay with the hosting provider (Vercel Inc.). The site targets adults; it is not intended for minors of 18. If this policy changes, the version and date above change with it.