CryptoPlanes Privacy Policy

1. Who is responsible

This policy covers the CryptoPlanes site and game. The controller of your data is the CryptoPlanes Team. For anything about privacy, write to suporte@cryptoplanes.fun.

It complements the Terms of Use. The Player guide explains how the game works.

2. Summary

• There is no sign-up: your account is the address of your Solana wallet. We do not ask for your name, an ID, your phone number or your location.
• We do not sell your data and we use no advertising or tracking cookies.
• Your IP is only kept in a protected form (a keyed hash, or just the network part) and for a short time.
• The anti-fraud data protects the reward pool that pays every player; it never bans anyone on its own.
• You download a copy of your data and ask for its erasure in the game itself.
• What is on the Solana blockchain is public, and nobody can erase it.

3. What we keep, why and for how long

The game keeps as little about you as it can. There is no sign-up form: your account is your Solana wallet address. The game never asks for your name, an ID document, your phone number or your location, and it uses no advertising or tracking cookies.

What the game stores, why, and for how long

Why the game looks at these signals

There is no identity check (no KYC). A new wallet is free, so one person could open hundreds of accounts to drain the reward pool that pays every player. Instead of asking who you are, the game looks at how accounts behave and how they are linked. These signals never ban anyone: at most an account earns less, solves a captcha or has a withdrawal checked by a person, and a person can always review the decision. Running your account is part of the service you use; the financial records are kept because the law requires them; the anti-fraud signals are kept in the legitimate interest of protecting the game and its players against fraud.

Other services

Fonts and code libraries come from the game's own server: your browser does not contact other sites to show the pages. The site goes through Cloudflare, which protects it against attacks and delivers the pages: it sees your IP and the requests to the site. The game reads public data about your wallet through a Solana RPC provider. Your wallet app (Phantom, Solflare, Backpack) has its own privacy policy. The game does not sell your data or share it with anyone else.

Public on the blockchain, and permanent

Everything on Solana is public and nobody can change or erase it, the game included: your wallet address, your deposits and withdrawals of the game token and the signatures of those transactions. Erasing your data in the game does not erase them.

Ask for a copy or for the erasure of your data

In the game: open your account (the profile button at the top right) and find MY DATA. DOWNLOAD MY DATA gives you at once a file with the data the game keeps about your account (one every 60 minutes). REQUEST DELETION sends an erasure request to the team, which reviews it first (a withdrawal under review, an anti-fraud decision or a legal duty to keep records can limit it), and you follow its status there. Both ask your wallet to sign a short message first: a signature, never a transaction, so nobody who gets hold of your session can do it without your wallet. The file leaves out the team's internal notes, how the anti-fraud scores your account (showing it would help cheaters) and other people's data, and it says what it left out.

Outside the game, or if you cannot log in: contact suporte@cryptoplanes.fun. Tell us your wallet address and what you want: a copy of your data (also what the in-game file leaves out), a correction, or the erasure of what can be erased. To prove the wallet is yours we may ask you to sign a short message with it: a signature, never a transaction, and never your seed phrase.

• An erasure removes the anti-fraud data about how you play (the times of your actions and the hashed IP addresses), your sessions (you are logged out) and your e-mail address.
• It cannot remove your transactions, deposits, withdrawals and game records, which the law requires us to keep and which keep the game's accounts correct; the decisions already taken about your account to prevent fraud; or the internal audit log of the team's actions. Logs and backups lose the erased data when they rotate.
• If you keep playing after an erasure, new data is recorded in the same way and for the same time.

You can also complain to a data protection authority: in Brazil the ANPD (Autoridade Nacional de Proteção de Dados), or the authority of your country.

4. Legal bases

5. Cookies

The game only uses the cookies it needs to work:

• Session (cp_sid): keeps you logged in. It is a random code; the server keeps only a hash of it. It lasts up to 30 days without use, and at most 90 days.
• Language (lang): remembers the language you chose.
• Team (cp_admin): only for those who sign in to the admin area.

The site goes through Cloudflare, which protects it against attacks and may set technical security cookies (such as __cf_bm). There are no advertising, audience analytics or social media cookies.

6. Automated decisions

The anti-fraud system analyses the signals of section 3 and can, automatically, reduce the rewards of accounts that look like an account farm, ask for a captcha or send a withdrawal to be checked by a person. It never bans anyone or takes any balance on its own: suspending an account is always a decision of a person on the team.

If you think a decision about your account is wrong, ask for a review at suporte@cryptoplanes.fun: a person looks at the case. We do not publish the exact anti-fraud thresholds, because that would teach cheaters how to get around them.

7. Who we share data with

We do not sell or rent your data. Some services process data so that the game works:

• Hosting: the game's server and database are at a server provider.
• Cloudflare: sits in front of the site, protects it against attacks and delivers the pages. It sees your IP and the requests your browser makes to the site.
• Solana RPC provider: through it the game reads public blockchain data, such as your wallet's history, and sends the withdrawal transactions.
• Your wallet app (Phantom, Solflare, MetaMask...): it is your own app, with its own privacy policy.

These services may be in other countries, including outside yours. We may also hand over data when a law or an order of a competent authority requires it.

8. Security

• All traffic uses HTTPS.
• The session cookie is not stored as is: the server keeps only a hash of it.
• The anti-fraud IP becomes a hash with a secret key, which cannot be turned back into the IP; the logs keep only the network part.
• Within the team, access goes by roles, with a wallet signature or a password plus the code of an authenticator app, and every action goes into an audit log that cannot be altered.
• The database is backed up and the backup checked every hour.

No system is fully secure. If a security incident may affect you, we will tell you in the game and, where the law requires it, the data protection authority.

9. Your rights

At any time, you can:

• confirm whether we process data about you and get a copy of it, also as a file you can take to another service;
• correct wrong or outdated data;
• ask for the erasure of what can be erased (section 3 says what the law requires us to keep);
• know who we share your data with (section 7);
• object to processing based on legitimate interest and ask for a review of an automated decision (section 6);
• withdraw your consent to the e-mail by asking for its removal.

The fastest way is in the game, in your account, under MY DATA. Outside the game, write to suporte@cryptoplanes.fun; we answer within 15 days. To prove the account is yours, we may ask you to sign a message with the wallet: a signature, never a transaction. We never ask for your secret phrase.

10. Minors

CryptoPlanes is only for people aged 18 or older, because it involves a token with value and financial risk. We do not knowingly collect data from minors. If we learn that an account belongs to a minor, it is closed and we erase what can be erased. If you are responsible for a minor who used the game, write to suporte@cryptoplanes.fun.

11. Changes and contact

We may update this policy when the game changes or the law requires it. The date at the end of the page shows the version in effect; important changes are announced in the game before they apply.

Contact: suporte@cryptoplanes.fun. You can also complain to a data protection authority: in Brazil, the ANPD (Autoridade Nacional de Proteção de Dados); in the European Union, the authority of your country; elsewhere, the local authority.