Privacy Policy

1. Data We Collect

• Account data: email address, hashed password
• Gameplay data: token purchases/burns, game sessions, fixes submitted, scores, tickets
• Technical data: IP address (rate limiting, abuse prevention), user agent, timestamps

2. How We Use Data

• To operate the service (account management, token ledger, game delivery)
• To improve the AI model (only if you opt-in via consent_to_train)
• To prevent abuse and ensure fair play
• To fulfill prize shipments (mailing address collected only if you win a physical prize)

3. Data Sharing

We do not sell your data. We share data only with:

• Stripe: for payment processing (card data never touches our servers)
• Anthropic: for game AI (API key secured, data used per their privacy policy; opt-in required for training)
• Shipping providers: if you win a physical prize (name and address only)

4. Data Retention

• Account data: retained until account deletion request
• Ledger history: permanent (append-only for auditability)
• Game traces: retained for 90 days, then anonymized or deleted
• Opt-in training data: retained per Anthropic's data retention policy

5. Your Rights

• Access your data (request a copy)
• Delete your account and associated data (except immutable ledger rows which are redacted)
• Opt out of training data use (toggle consent in account settings — coming in v0.1)
• Request correction of inaccurate data

To exercise these rights, contact: privacy@metaspn.network

6. Cookies

We use a single session cookie for authentication. No tracking cookies are used.