Privacy Policy

1. Who we are

[Legal entity name] runs [Website address]. We decide what happens to the information described on this page, so we are responsible for it.

Contact: [Contact email], [Mailing address]. [EU/UK representative, if needed]

2. What we collect and why

A. When you visit any page

Visit logs. Like almost every website, our host, [Hosting provider], records basic technical details when your browser asks for a page: your IP address, your browser and device type, the page you asked for, the page that sent you, and the time. We use these only to keep the site running and safe from attacks. They are kept for [Log retention period].

Lettering and code from other servers. The site’s lettering loads from Google Fonts. When a page opens, your browser asks Google’s servers for the font files, so Google receives your IP address and browser details. Google says its Fonts service does not set cookies. When accounts are switched on, the sign-in code loads from jsDelivr, which receives the same kind of technical details.

No analytics, ads or tracking. There are no analytics, advertising or tracking scripts on this site. We do not use cookies to follow you around the web. If that ever changes, we will update this page first.

B. What is saved on your device

The site saves some things in your browser’s storage on your device, so they are still there next time:

• your progress in our two games: a Traders Trail run in progress, and your Market Run progress, best scores and sound settings;
• if you post a score to the Market Run leaderboard, your nickname and your secret player key (see E below);
• the squad you joined (the crew member you picked), your XP and your rank;
• the House you picked on The Crew page, and the story pages you found in Market Run;
• if you have signed in, which account last used this device, so two players’ saves never get mixed.

This stays on your device. It is not sent to us. If you sign in, only your squad and your game progress are copied to your account. Leaderboard scores are sent to us only when you post them, as section E explains.

To remove it, clear this site’s data in your browser settings.

C. When you sign in with X

Sign in with X is optional. When you use it, X asks for your permission. Then X shares these details from your X account with Supabase, the service that runs our accounts:

• your X account ID (a number that identifies your account);
• your @handle and your display name;
• the link to your profile picture;
• the email address on your X account, if X has a confirmed one;
• the website link on your X profile and the date your X account was created, if X provides them.

Why: we use your account ID to know it is you, and your handle, name and picture to show who is signed in, for example in the account chip at the top of each page. Until you join a squad, the chip shows your X profile picture. Your browser loads that picture from X’s servers, so X receives the usual technical details, such as your IP address.

Supabase also keeps a sign-in token in your browser so you stay signed in, and records sign-in events (the time, your IP address and your browser type) to keep accounts secure.

X’s permission screen may list things like reading posts. We do not read, save or post anything on your X account, and we never post for you. We never see your X password.

We do not use the email address from your X account for launch alerts or any other emails. You only get alerts if you sign up for them yourself.

D. Your squad and game progress, when you are signed in

When you are signed in, we save to your account:

• which squad you joined (one of our crew members) and when you picked it;
• your XP, rank and what your rank has opened, and your Traders Trail best score, number of runs and wins;
• a record of which Traders Trail runs you have played and which Market Run stars and daily runs have earned XP, so each one earns XP only once;
• your game saves: a Traders Trail run you have not finished yet (saved as market-run) and your Market Run progress, best scores and sound settings (saved as candle-run). The story pages you find in Market Run stay on your device.

Why: so your squad and your progress are the same on every device you sign in on.

Our database is set up so each signed-in player can read and change only their own profile and saves.

Share on X opens X with a message you can edit. Nothing is posted until you post it yourself.

E. When you post a score to the Market Run leaderboard

Anyone can play Market Run without signing up. Nothing is sent to us until you choose to post a score. To post one, you pick a nickname (3 to 16 letters, numbers or underscores). We never need your X account, email address, wallet, a purchase or any $DIPPY for this.

Your player key. When you pick a nickname, the site makes a random secret player key and keeps it only on your device, in your browser’s storage. Our database keeps only a one-way scrambled copy (a hash) of it, so the key itself never sits on our side. If you lose the device or clear this site’s data, you lose access to that nickname, and we cannot get it back for you.

What we keep in our database:

• your nickname (this is public);
• for each run you post: the score, distance, sprint meters, Tendies, Paper Hands, crows, the run’s length in frames, your squad character, the random level seed, and an input log;
• when each run started and when it was posted, and the game version;
• a salted, one-way hash of the IP address the run came from. We use it only to stop abuse and limit how often scores can be posted. We never store the IP address itself, and we delete the hash after 30 days;
• claim codes for weekly winners.

The input log is a list of which game buttons were pressed, on which frame. It does not record anything outside the game. We use it to replay runs and check that each score is real.

What is public. The leaderboard shows your nickname, score, distance, number of runs and squad character. Anyone can watch the replays of leaderboard runs. Please do not use your real name, or anything else that identifies you, as your nickname.

Why we use it: to show the leaderboard, to run the weekly rewards, to check runs are real, and to stop cheating and abuse.

If you win a weekly reward. Your device shows a claim code. To claim, you send us your nickname and claim code by DM to @DiponSol_ on X, or by email to [Contact email]. We then keep:

• a winner record: your nickname, the week, your place and whether the prize was claimed;
• the messages you send us to claim, and your X handle or email address if you use one;
• for merch only, the name and shipping address you give us privately, used only to send the prize;
• anything else we need to check you can win, for example your country, that you are 18 or older, and, in Canada, your answer to the skill-testing question.

The Leaderboard rules (coming soon) explain the weekly rewards in full.

We never sell leaderboard data, and we never share it for ads.

F. When you sign up for launch alerts

When you enter your email address in a Launch alerts form, we keep:

• your email address;
• the time you signed up;
• which page the form was on, when the address is kept in our own database.

These are stored either with Kit, the service we use to send email, or in our own database at Supabase. Kit also records technical details about the signup, such as your IP address, to stop fake signups. Sometimes Kit asks for a quick check that you are a person, or asks you to confirm, on a Kit page shown inside the form. Kit runs that page. If Kit emails you to confirm your address, alerts start only after you confirm.

We never save your email address on your device, in a cookie or in a web address.

Why: to email you about Dippy coin launches, because you asked us to. We use your email for nothing else, and we never sell it or share it for ads.

[Email tracking sentence]

Every alert has an unsubscribe link at the bottom. Use it and the alerts stop.

G. When you email or message us

If you write to us by email or by DM on X, we keep your email address or X handle and your message so we can answer you. Messages sent on X are also handled by X under its own privacy policy.

H. What we do not collect

We never ask for your wallet, seed phrase, private keys or payment details. The shop is coming soon and takes no orders or payment on this site. We do not collect your precise location, your contacts or your X posts. We only ask for a shipping address from a weekly winner who claims a merch prize.

3. Our reasons for using your information

Some privacy laws, like those in the EU and the UK, ask us to name the reason for each use:

• To give you the account and saves you asked for. This is needed to provide the service you chose.
• To show your score on the leaderboard and run the weekly rewards you entered, including sending a prize you claim. This is needed to provide the service you chose.
• To check runs, stop cheating and abuse, and keep records of winners in case of questions or disputes. This is our legitimate interest in a fair leaderboard and an honest contest.
• To send the launch alerts you asked for. This is based on your consent. You can take it back at any time by unsubscribing.
• To keep the site running, secure and fair. This is our legitimate interest in a working, safe site with no cheating.
• To follow the law, when the law requires us to keep or share something.

4. Who helps us

These companies handle information for us under data processing terms that limit what they can do with it:

Supabase

our database host: accounts, Sign in with X, saved progress and the Market Run leaderboard. Stored in [Supabase project region] (we pick the region, normally the United States).

Kit

launch alert emails. Stored in the United States.

[Hosting provider]

hosts the site and keeps visit logs.

These receive technical details when your browser loads files from them, and their own privacy policies apply:

Google Fonts

the site’s lettering.

jsDelivr

the sign-in code.

X is a separate company. X’s own privacy policy covers what happens on X, including the sign-in screen, the profile picture your browser loads from X, and DMs you send to @DiponSol_.

Merch prizes. If you win and claim a merch prize, we give your name and shipping address to the company that makes or ships it ([Merch supplier or shipping company]), only so it can be delivered.

We may also share information if the law requires it, to protect people from fraud or harm, or if the project moves to a new owner who agrees to follow this policy.

We do not sell your personal information, and we do not share it for advertising.

5. Where your information is stored

The companies above may store and handle information in the United States and in other countries, including [Supabase project region]. If you are in the EU, the UK or Switzerland, these transfers are protected by safeguards such as the standard contractual clauses approved by the European Commission or the EU-U.S. Data Privacy Framework, as set out in each company’s terms.

6. How long we keep it

• Your squad, progress and saves: until you delete them or ask us to delete your account. If an account is not used for [Inactive account period], we may delete it.
• Your login record (your X account ID, handle, name, picture link and email): until you ask us to delete it.
• Sign-in security logs: [Auth log retention period].
• Your launch alert email: until you unsubscribe or ask us to delete it. After you unsubscribe, Kit may keep your address on a do-not-email list so you are not emailed again by mistake.
• Your leaderboard nickname and best runs: until you delete them or we close the leaderboard.
• Other leaderboard runs: runs that are not your best run and not a weekly top 3 run are deleted after 90 days.
• IP address hashes (used to stop abuse): deleted after 30 days.
• Weekly winner records (nickname, week, place and claim status): up to 3 years, for contest records and disputes.
• A winner’s shipping details: until the prize has arrived and any delivery problem is sorted out. Then we delete them.
• Visit logs: [Log retention period].
• Things saved on your device: until you clear them.
• Emails you send us: as long as we need them to help you.

7. Delete your data, and your other choices

Delete my data. On the Join page, the Delete my data button removes your squad, your progress and your game saves (Traders Trail and Market Run) from our database, and all game saves from this device. On this device it also clears the House you picked, the story pages you found in Market Run and anything left from earlier versions of the site, such as an old shop list or an old game save. You stay signed in on this device until you sign out.

It does not remove the login record that Supabase keeps for Sign in with X. To remove that too, email [Contact email] with your @handle. We will delete it within [Deletion response time]. We may ask you to confirm the account is yours.

Delete my leaderboard data. On the Market Run page, in the Leaderboard section under “Your player”, the Delete my leaderboard data button deletes your player, your nickname and all your runs from our database straight away. You can also ask us to do it by emailing [Contact email] or sending a DM to @DiponSol_ on X. Because the leaderboard does not know who you are, we may ask for details that show the nickname is yours. If you have won a weekly reward, we may keep the winner record (nickname, week, place and claim status) for up to 3 years for contest records and disputes.

Disconnect the site from X. In X, open Settings and privacy, then Security and account access, then Apps and sessions, then Connected apps, and revoke access for this site.

Stop launch alerts. Use the unsubscribe link in any alert, or email [Contact email] and we will delete your address.

Clear your device. Clear this site’s data in your browser settings. This also removes your leaderboard player key, so you lose access to your nickname. If you want your nickname and runs gone from the leaderboard, use Delete my leaderboard data first.

Your rights. Depending on where you live, you may have the right to:

• find out what information we have about you and get a copy;
• correct it;
• delete it;
• object to or limit how we use it;
• take back your consent at any time;
• complain to your local data protection authority.

If you are in the EU or the UK, you have the right to access your information, correct it, delete it, limit how we use it, get a copy to take elsewhere, and object to how we use it, including when we rely on our legitimate interests. You can also complain to the data protection supervisory authority where you live or work. In the UK, that is the Information Commissioner’s Office (ICO).

If you live in California or another U.S. state with a privacy law, you have the right to know what personal information we collect about you and how we use it, and to ask us to delete it or correct it. We do not sell your personal information, and we do not share it for cross-context behavioral advertising (ads based on what you do on other sites). We do not use sensitive personal information to learn things about you. If we say no to a request, you can ask us to look at it again.

To use any of these rights, email [Contact email]. We will answer within [Response time]. We will never treat you differently for using your rights.

8. Children

This site is not meant for children under [Minimum age]. If you are younger, please do not sign in or sign up for alerts.

The Market Run leaderboard is not meant for children under 13. You must be 13 or older to post a score. Weekly rewards can only be won by players who are 18 or older (or the age of majority where they live).

If you are a parent or guardian and think your child gave us information, email [Contact email] and we will delete it. If we learn that we hold information from a child under 13, or under [Minimum age] for the rest of the site, we delete it, including any nickname and runs on the leaderboard.

9. Keeping it safe

• Sign in uses X, so we never see or store your X password.
• Our database lets each player read and change only their own profile and saves.
• Your leaderboard player key stays on your device. We keep only a one-way hash of it.
• We never store the IP address behind a leaderboard run, only a salted one-way hash, which we delete after 30 days.
• Information travels over encrypted connections (HTTPS).

No system is perfectly safe, so we cannot promise that nothing will ever go wrong. If something goes wrong that affects your information, we will tell you as the law requires.

10. Links to other sites

Links to X, pump.fun, Instagram, TikTok, YouTube and other sites take you off this site. Their own privacy policies apply there.

11. Changes to this policy

When we change this policy, we update the date at the top. If we start collecting something new, or using your information in a new way, we will say so here before it happens, and ask for your consent where the law requires it.

12. Contact