Privacy Policy

What the game keeps

When you play, the game server stores, tied to your wallet address:

• Your public wallet address and a random installation id the app creates on the first start. The address is public on the blockchain already; the id tells one installation from another.
• Your hero: the outfit it wears, the items it owns with their forge levels and locks, its elements, and the free starter weapon.
• Your fights: the trades of your wallet in the world you are in (transaction signature, token, amounts, time), the damage they did, bosses you defeated, loot you won and hits you took. Trades are public blockchain data; the game stores the ones it saw.
• Presence: which world your hero is in and when it was last seen, so other players can see it.
• Callouts: the text you post, with your address and the time.
• Play time: how long the game has been running, for the activity ranking.
• Sessions: a random session token the app keeps after your signature, so it can act for your hero. It expires after thirty days. On your computer it is stored encrypted by Windows.
• Box orders: when you buy an item box, the burn transaction and what the box gave.

The game never has your private key, seed phrase or wallet password, and never asks for them. The one signature you make is checked and discarded; what stays is a random session token, as proof that the address is yours.

Problem reports

When something goes wrong, the game shows a Report button. A report contains the error message, what you were doing, the screen you were on, the app version, a few facts about your computer (operating system, display size and count, memory, a few of your game settings and the world you were in) and the last lines of the game's own log. User names in file paths are removed before sending. Your network address is kept with the report to limit abuse. Reports are deleted after ninety days. The wallet address is included when a hero is linked.

The website

dth.family has no accounts, no sign-ups, no analytics and no advertising. It sets no cookies. The only thing it keeps in your browser is which announcement you saw last, so the bell does not light up for old news.

The header search sends what you type to the game server, with your network address, so searches can be rate limited per visitor. The counters are kept in memory for a few minutes and never stored.

Hero and server pages show public game data: addresses, outfits, items and forge levels, fights and rankings. They are public by design, like the blockchain they come from; any player can open another hero's profile in the game too.

Network addresses and logs

Like any server, the game server and the website log requests with the network address they came from, for security and to find problems. Wallet and token addresses are masked in those logs, so a log line never pairs a wallet with a network address. Request logs are kept by the hosting providers for a short time. Rate limits count requests per network address in memory for a few minutes.

Where data goes

The game and the website run on and talk to these services. Each one sees the network address of the request, as any web request does:

• The game server runs on Railway; the website runs on Vercel. The database lives on the game server.
• A Solana RPC receives your wallet address from the app every few seconds while it reads your trades (solana-rpc.publicnode.com by default, or the provider you set in Settings), and from the game server when it confirms a trade on chain, reads your SOL balance for the top bar, checks what you hold for loot, or prepares and checks an item box burn.
• DexScreener is asked for token names, prices, market caps and pools. The only address it ever receives is one typed into the website search that is neither a hero nor a known world, looked up as a possible token.
• GitHub hosts the installer and the update files; the app and the website read the public releases list from it.

Nothing is sold, rented or shared with advertisers. There are no trackers in the app or on the site.

How long things are kept

• Trades in worlds: fourteen days. Callouts: thirty days. Problem reports: ninety days. Forge history: one hundred eighty days.
• Sessions: thirty days, or until you unlink the wallet in Settings, which ends the session on the server too. Signing links: ten minutes.
• Item box orders: an opened box is kept with its burn, so what you got can always be checked; quotes that were never paid go after seven days. Daily luck counters: one day.
• Boss fights, damage, drops, hits taken and play time: kept, because rankings and item history are built from them.
• Your hero, items and elements: kept as long as the game runs, so they are there when you come back.

Your choices

You can unlink your wallet in Settings at any time; the app forgets the address and the session. You can use your own RPC endpoint so that the public RPC never sees your address. Uninstalling the game removes the app; the settings file in your user profile can be deleted by hand.

To have the records tied to your wallet address deleted from the game server, write to @x0hero on X from an account you control and name the address; you will be asked to prove it with the same kind of signature the game uses. Deleting the records removes your hero, its items and its rankings.

Changes

This page changes when the game changes what it keeps. The date at the top shows the current version. Questions go to @x0hero on X. The Wallet safety page explains, in plain words, what the game can and cannot do with your wallet.