Privacy
Last updated: 19 August 2026 Version: 1.0
1. The short version
- We collect your wallet address, a username and avatar, gameplay activity, chat messages, and basic technical data.
- We do not collect your name, address, phone number, ID document, or email. We do not perform identity checks.
- We do not sell your data and we run no advertising.
- Your wallet address and everything you do on chain is public and permanent. Nobody can delete it. Not us, not you. This is the most important thing on this page.
- You have rights over the data we hold. Section 8.
2. Who is responsible
Questions about your data go to info@lowone.app.
3. The blockchain part, which you should read first
Most privacy policies for products like this skip this section. We would rather not.
3.1 Your wallet address is personal data
A wallet address is a persistent identifier that can be linked to you. Directly, if you have ever associated it with your identity anywhere, and indirectly through transaction analysis.
We treat it as personal data. Anyone telling you a wallet address is anonymous is wrong. It is pseudonymous, which is a weaker and quite different thing.
3.2 On-chain records are permanent
When you play, the Solana blockchain permanently records your wallet address, that you took part, the commitment you made, the number you revealed, and the timestamps.
That data is public, readable by anyone in the world. It is permanent and cannot be edited or deleted. It is outside our control, replicated across thousands of independent validators.
3.3 What that means for your rights
We cannot delete anything from the blockchain. Not on request, not by court order, not by choice. Nobody can.
If you ask us to erase your data we will delete everything in our own systems. On-chain records will remain public permanently.
Please understand this before you connect a wallet. It is the one decision here you cannot reverse.
3.4 Reducing your exposure
- use a wallet that is not linked to your identity
- use a wallet dedicated to this Service rather than your main one
- keep identifying details out of your username and avatar
- remember that funding a wallet from an exchange links it to your verified exchange identity
We cannot make on-chain activity private. We can make sure you understand it first.
4. What we collect
4.1 What you give us
Your wallet address when you connect, and a signature proving you control it. A username and an avatar when you make a profile. Chat messages when you write them. Anything you send us by email.
4.2 What playing produces
Rounds you joined, the stake, the number you chose, the outcome, and the transaction signatures. Rooms you created. Which stakes you have played, so the chat rooms know which you may post in. When you were last typing in a room, kept for a few seconds.
4.3 What we collect automatically
Very little, and less than you might expect.
We do not store IP addresses. Rate limiting needs to tell callers apart, so an address is hashed with a secret key the moment a request arrives and only the hash is written down. The hash cannot be read back into an address, and the record expires within the hour.
Our host and our database provider keep their own operational logs, which may contain IP addresses. Those are their records, kept under their terms. Section 6.
Page views are counted with a cookieless tool that sets no identifier and cannot follow you to another site.
4.4 What we never collect
We never collect or ask for your private keys or seed phrase. Nobody legitimate ever will. Anyone who asks, including anyone claiming to be us, is trying to steal from you.
We do not collect legal names, postal addresses, phone numbers, dates of birth, government identifiers, precise location, or biometric data. We do not perform identity verification.
We use no advertising cookies, no tracking pixels, and no cross-site profiling.
5. Why we process it
| Purpose | Data |
|---|---|
| Running the game | wallet address, gameplay, profile |
| Proving it is you | wallet signature, session cookie |
| Chat | messages, username, stakes played |
| Preventing abuse and rate limiting | hashed caller identifier, wallet address |
| Understanding how the Service is used | aggregate page views |
| Answering you | whatever you send us |
Where processing is necessary to provide the game you asked for, that is our basis for it. Where it protects the Service from abuse, we have weighed that against your interests and consider it proportionate. You may object at any time. Section 8.
6. Who else sees it
We do not sell your personal data and we do not share it for advertising.
| Provider | Role | Where |
|---|---|---|
| Vercel | Hosting and content delivery | United States |
| Neon | Database | United States |
| Helius | Solana network access | United States |
Each of them processes data on our instructions. Our scheduler runs on a server in France and holds no personal data at all: it knows one URL and one shared secret.
We may also disclose data to meet a legal obligation or a valid request from an authority, to enforce our Terms, to prevent fraud or abuse, to protect the rights or safety of people, or to a successor in a merger or sale, with notice to you.
7. Data leaving Europe
Our providers are in the United States, and transfers rely on the safeguards each of them offers. Write to info@lowone.app if you want the details for a particular provider.
Separately, and outside our control: the Solana blockchain is a global network. On-chain data is copied to validators everywhere, including countries with no adequacy decision. That is inherent to a public blockchain. See Section 3.
8. Your rights
You may ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, object to processing, or ask for your data in a portable form. You may also complain to a data protection authority in the country where you live.
Erasure is subject to Section 3. We can delete our records. We cannot delete the blockchain.
We make no automated decisions that produce legal or similarly significant effects. Rate limiting and abuse detection may block access, and you can ask us to review a block by hand.
How to ask
Email info@lowone.app. We aim to respond within 3 to 7 days.
We may ask you to sign a message with the wallet in question. That protects you: without it, anyone could request your data by naming your public address.
9. How long we keep it
Your profile and gameplay history stay while your account is active. Chat messages stay while the room does. Anti-abuse records expire within the hour. Anything you email us stays until the matter is closed.
If you ask us to delete your account we remove your profile, chat history and gameplay records from our systems within 30 days, except where we must keep something by law. Backups clear on their normal rotation.
On-chain data is permanent. See Section 3.
10. Security
Data is encrypted in transit and at rest. You sign in with your wallet, so there is no password to leak. Sessions are signed so they cannot be forged. Requests are rate limited and abusive patterns are blocked.
No system is perfectly secure. If a breach affects your personal data and puts your rights at risk, we will notify the relevant authority and tell you without undue delay where the risk is high.
Your wallet's security is yours. We have no access to it and cannot protect it.
11. Children
The Service is for adults of 18 and over. We do not knowingly collect data from anyone younger.
If we find that we have, we will delete it promptly. Parents and guardians: contact info@lowone.app.
12. Cookies and local storage
We set two cookies, and both are strictly necessary.
| Name | Purpose | Life |
|---|---|---|
lowone_wallet | Keeps you signed in. Holds your wallet address and a signature proving we issued it | 30 days |
lowone_nonce | A single-use challenge while you sign in | 5 minutes |
Your browser also stores two things locally. Neither is sent to us.
| Key | Purpose |
|---|---|
lowone.age.ok | That you confirmed you are 18 or over |
lowone.salt.… | The secret that seals your pick until the round closes |
That second one matters. Your pick is sealed with a value generated in your browser and kept there. We only receive it once the round has closed, which is why we cannot see what you chose in advance.
We use no advertising, tracking, or cross-site cookies. Because everything we set is strictly necessary, no consent banner is required.
13. Other people's services
Wallet software such as Phantom and Solflare is run by other companies with their own privacy policies. When you connect, they may process data we never see.
The Solana network is decentralised infrastructure with nobody in charge of it. See Section 3.
Block explorers we link to are third parties with their own policies.
We are not responsible for any of them.
14. Changes
We may update this Policy. Material changes take effect 30 days after we post them, with notice through the Service.
15. Contact
info@lowone.app