Privacy Policy
Last updated: April 2026
1. Data We Collect
- Account data: email address, hashed password
- Gameplay data: token purchases/burns, game sessions, fixes submitted, scores, tickets
- Technical data: IP address (rate limiting, abuse prevention), user agent, timestamps
2. How We Use Data
- To operate the service (account management, token ledger, game delivery)
- To improve the AI model (only if you opt-in via consent_to_train)
- To prevent abuse and ensure fair play
- To fulfill prize shipments (mailing address collected only if you win a physical prize)
3. Data Sharing
We do not sell your data. We share data only with:
- Stripe: for payment processing (card data never touches our servers)
- Anthropic: for game AI (API key secured, data used per their privacy policy; opt-in required for training)
- Shipping providers: if you win a physical prize (name and address only)
4. Data Retention
- Account data: retained until account deletion request
- Ledger history: permanent (append-only for auditability)
- Game traces: retained for 90 days, then anonymized or deleted
- Opt-in training data: retained per Anthropic's data retention policy
5. Your Rights
- Access your data (request a copy)
- Delete your account and associated data (except immutable ledger rows which are redacted)
- Opt out of training data use (toggle consent in account settings — coming in v0.1)
- Request correction of inaccurate data
To exercise these rights, contact: privacy@metaspn.network
6. Cookies
We use a single session cookie for authentication. No tracking cookies are used.