Legal

Privacy Policy

Draft Wars is a wallet-only fantasy memecoin drafting contest. We identify you by your public Solana wallet address and how you play — your drafts, balances, ranks, and timestamps. We never see your private keys or seed phrase, never have access to your funds, and never collect real-money or payment information. This policy explains exactly what we collect, why, and the choices you have.

Last updated: June 27, 2026

Minimal data. No keys. No funds access.

We collect only what we need to run contests: your public wallet address, an optional handle, and your gameplay. We cannot view or store your private keys or seed phrase, we cannot move or hold any tokens, and we never ask for payment cards, bank details, or government ID. Connecting your wallet means we read your public address and ask you to sign a plain-text login message — nothing more.

1Overview

This Privacy Policy describes how Draft Wars ("Draft Wars," "we," "us," or "our") handles information when you use our website and play our fantasy memecoin drafting contests (the "Service"). Draft Wars is a skill-based portfolio game: you draft a paper portfolio of Solana memecoins using play-money credits and compete on a live profit-and-loss leaderboard. No real money is wagered or traded.

Our privacy posture is deliberately narrow. Instead of accounts, passwords, and personal profiles, we identify you by the public Solana wallet address you connect. By using the Service, you agree to the practices described here.

2Information We Collect

We collect a small, gameplay-focused set of information:

X (Twitter) account. You sign in with X only. Through our authentication provider (Privy) we receive basic public profile data — such as your X handle and account id — to authenticate you.
Embedded wallet address. On sign-in, a secure embedded Solana wallet is created for you (managed by Privy). We read its public address — this is your identity on Draft Wars.
Optional display handle. If you choose to set a display name for the leaderboard, we store it. This is optional and you can leave it blank.
Gameplay data. Your draft selections (the ten coins you pick and how you allocate your $1,000 in paper credits), your computed balances, your ranks and placements, and the associated timestamps for each contest you enter.
Authentication metadata. When you log in, your wallet signs a plain-text message that includes a timestamp. We use this signed-message metadata to verify that you control the wallet and to prevent replay of old logins. The signature is for identity only — it never authorizes a transaction.
Basic usage & device analytics. Standard, largely aggregate technical data such as pages viewed, approximate region, browser and device type, and error logs. We use this to keep the Service running and to improve it.

3Information We Do NOT Collect

Things we will never ask for or store

These are out of scope by design. If anything claiming to be Draft Wars asks for them, it is not us.

Private keys or seed phrases. We never request, receive, or store them. Signing a login message does not reveal your keys.
The ability to move your funds. The Service never requests a transaction, token transfer, spend, or approval. We cannot move, hold, or access any of your assets.
Real-money or payment PII. No credit or debit card numbers, bank accounts, or other financial payment details — all in-game credits are paper (play money).
Government identification. No passport, driver's license, national ID, or similar identity documents.

4How We Use Information

We use the information we collect to:

Run contests. Register your entry, lock your draft when the live window begins, and resolve each contest.
Score and rank. Snapshot start and end prices, compute your paper balance across your ten picks, and place you on the leaderboard.
Prevent abuse and protect fairness. Enforce one entry per wallet per contest, validate drafts server-side against each contest's real candidate pool, detect sybil and multi-wallet abuse, and expire stale login signatures.
Improve the product. Understand how the Service is used, diagnose errors, and make the experience faster and more reliable.

5On-Chain & Public Data

Your public profile. When you sign in with X, your X username, display name, and profile picture become your public identity in Draft Wars — shown on leaderboards, contest standings, and (where available) your public profile page. Your embedded wallet address is also public, linked to a blockchain explorer for transparency. We never post to X on your behalf without an explicit action you take.

Solana wallet addresses and on-chain activity are public by nature. Anyone can view the transactions, token balances, and history associated with a public address on the blockchain — this is inherent to how Solana works and is not something Draft Wars controls or can remove.

To score contests, we read public price and market data for candidate coins from on-chain and decentralized-exchange sources. If an optional token-holding gate is enabled for a contest, we read your wallet's public token balance through a Solana RPC endpoint to check eligibility. We do not use this access to do anything other than read public information.

Public means public

Because your wallet address links to on-chain activity, your participation in Draft Wars may be publicly associated with that address. Consider this before connecting a wallet you wish to keep private.

6Service Providers & Third Parties

We rely on a small number of infrastructure and data providers to operate the Service. Each receives only what it needs for its role:

Privy. Handles X (Twitter) sign-in and creates and secures your embedded Solana wallet. Privy processes your X profile data and wallet under its own privacy policy.
Supabase. Hosts our database storing wallet addresses, handles, drafts, balances, ranks, and timestamps.
Vercel. Hosts and serves the website and application.
Solana RPC endpoint. Reads public token balances when an optional token-holding gate applies.
DexScreener / Jupiter. Provide public on-chain price and market data used to source candidate coins and score contests.

These providers process data on our behalf and are bound by their own terms and privacy practices. We do not sell your information.

7Cookies & Local Storage

We keep our use of cookies and local storage minimal. Your browser's local storage may hold your wallet-connection state so you stay connected between visits without re-signing every time. We may also use minimal, privacy-respecting analytics to understand usage and diagnose problems.

We do not use advertising trackers. You can clear local storage and cookies at any time through your browser settings; doing so will disconnect your wallet session.

8Data Retention

We retain your off-chain data — your wallet address, optional handle, and gameplay records — for as long as it is needed to operate the Service, maintain leaderboard and contest history, prevent abuse, and meet our legitimate operational needs. Aggregated or anonymized analytics may be kept longer.

You may request deletion of your off-chain data as described in Your Choices & Rights. On-chain data is not ours to delete.

9Security

We use reasonable technical and organizational measures to protect the information we hold, including encrypted transport (HTTPS), access controls on our database, and server-side validation of all drafts and scoring. Because we never hold your keys or funds, the most security-sensitive parts of your wallet stay entirely under your control.

No system is perfectly secure. Keep your seed phrase private, and never share it with anyone — Draft Wars will never ask for it.

10Your Choices & Rights

Disconnect at any time. You can disconnect your wallet whenever you like, which ends your session and removes the connection state from your browser.
Request deletion of off-chain data. You can ask us to delete the off-chain data associated with your wallet address. We may retain limited records where required for fairness, security, or legal reasons.
Access and correction. You may request a copy of the off-chain data we hold about your wallet, or ask us to correct an optional handle.

On-chain data cannot be deleted

We can delete the data we store about you, but we cannot remove anything recorded on the Solana blockchain. Public addresses and on-chain activity are permanent and outside our control.

To exercise any of these choices, contact us at support@draftwars.gg.

11Children

Draft Wars is not directed to, and is not intended for, anyone under the legal age of majority in their jurisdiction. We do not knowingly collect information from minors. If you believe a minor has used the Service, contact us and we will take appropriate steps to remove the associated off-chain data.

12International Users

The Service is operated using infrastructure that may be located in the United States and other countries. If you access Draft Wars from outside those regions, you understand that your information may be processed in jurisdictions whose data-protection laws differ from those of your home country. By using the Service, you consent to this processing.

13Changes to This Policy

We may update this Privacy Policy from time to time as the Service evolves or as legal requirements change. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service where appropriate. Your continued use of Draft Wars after an update means you accept the revised policy.

14Contact

If you have questions about this Privacy Policy or how we handle your data, reach us at support@draftwars.gg.