Privacy Policy
This Privacy Policy explains what information Capstone Wars (https://www.capstonewars.com) processes when you visit the site, connect a wallet, contribute, list a coin or edit your profile.
Who is responsible
The controller is Dobrescu Alexandru, an individual based in Romania.
Contact for any privacy request: contact@capstonewars.com
The short version
- We do not ask for your name, email, phone number or card details.
- We never see or store your private keys or recovery phrase.
- Your wallet address and your contributions are public, both on the Solana blockchain and on our leaderboard.
- We do not sell data and we do not use advertising trackers.
What we process
Wallet address. When you connect a wallet, we see its public address. It is used to show your rank, attach your contributions to you and let you edit your profile.
Contributions and listings. For each payment we store the transaction signature, the paying wallet, the token, the amount, the coin and the time. This information is also public on the Solana blockchain by its nature, and anyone can look it up there.
Profile. If you choose them: your display name, your avatar choice from our gallery and, if you are King, your message. These are public on the leaderboard and in the Hall of Fame.
Sign-in. When you sign a sign-in message, we store a one-time code (nonce) for a short time and set a session cookie so you stay signed in for up to 7 days.
Reports. If you report a coin: your wallet, the coin, an optional reason and the time.
Technical data. Our hosting and database providers process standard request data such as IP address, browser type and time of request, to deliver and secure the Service. We use the IP address for rate limiting and abuse prevention.
Local preferences. Your browser may store your light or dark theme choice locally. This stays on your device.
Cookies
We use only strictly necessary cookies: the session cookie that keeps you signed in. We do not use advertising or analytics cookies.
Why we use it (legal bases)
- To provide the Service you ask for (contract): counting contributions, listing coins, showing ranks, profiles and the Hall of Fame.
- Legitimate interests: keeping the Service secure and fair, preventing abuse and fraud, handling reports, and keeping a permanent public archive of past battles. You can object to this processing (see your rights below).
- Legal obligations: keeping payment records for tax and accounting.
Who we share it with
We use service providers who process data on our behalf to run the Service:
- Vercel (website hosting);
- Supabase (database and storage);
- Helius (Solana network access, to verify transactions);
- CoinGecko (public coin data and logos; we send coin searches, not personal data).
The Solana blockchain is public and is not controlled by us. Your wallet provider (for example Phantom or MetaMask) processes data under its own privacy policy.
Some providers may process data outside the European Economic Area. Where they do, they rely on safeguards such as the European Commission's standard contractual clauses.
We may disclose information if the law requires it or to protect the Service and its users. We do not sell personal data.
How long we keep it
- Payment records (contributions and listing fees): as long as required by tax and accounting law, and as long as needed for the public leaderboard and the Hall of Fame.
- Profile: until you change or remove it, or ask us to delete it.
- Sign-in codes: a few minutes. Session cookie: up to 7 days.
- Reports: as long as needed to review them and protect the Service.
- Technical logs: for a short period, according to our providers' retention settings.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive a copy of it. Email contact@capstonewars.com from any address and tell us which wallet the request concerns. We may ask you to prove you control the wallet, for example by signing a message.
Please note:
- We can remove your display name, avatar and message, so that you appear only as a short wallet address.
- We cannot delete or change transactions on the Solana blockchain, and we must keep payment records required by tax law. Your contributions therefore remain counted on the board and in the Hall of Fame, without your profile details.
You can also complain to a data protection authority. In Romania this is the ANSPDCP (www.dataprotection.ro). You can also contact the authority in your own country.
Children
The Service is only for people aged 18 or over. We do not knowingly collect data from children.
Changes
We may update this policy. The date at the top shows the current version.