Privacy Policy
Operator: Antity, LLC ("Algo Leagues", "we"). Contact: algoleagues@gmail.com. Algo Leagues is a community passion project, not run for profit. All revenue goes back into the project. This policy covers algoleagues.com, the PVP Arena, Block Wars and Chaos pages, and the Discord Activity. Our Discord bot has its own policy on the bot terms and privacy page. Algo Leagues is for adults 18 and over.
1. What we collect
- Your wallet address. You sign in by signing a message with your Algorand wallet. We never see your private keys or seed phrase.
- What your wallet holds. We read your NFTs and ALC balance from the public Algorand blockchain to build decks and apply bonuses.
- Game records: saved decks, match results and replays, leaderboard stats, quest progress, Block Wars and Chaos entries, and any title plate name you choose. Your title plate and leaderboard position are public.
- Purchases: season passes, shop items and fees you pay in ALC or ALGO, with the on-chain transaction ID.
- Discord links, if you connect Discord: your Discord user ID linked to your wallet, notification preferences, and, if you use Linked Roles, the access tokens Discord gives us and whether you opted in to showing your ALC balance.
- IP address, used only to limit how many requests one visitor can send (rate limiting). See section 5 for how long it is kept. We also read your country from our host's request header to block Chaos in some countries. We do not store your country.
- Admin records: a log of actions our staff take (for example, a prize payout to your address).
We do not collect your name, phone or payment card, and the site does not ask for your email. If you email us (for example for a free entry, a prize claim or a privacy request), we receive your email address and whatever you write. For a prize claim we also keep your country and your confirmation that you are 18 or older.
The blockchain is public. Your wallet address, holdings and every transaction (including entry fees and prizes) are visible to anyone, forever. We cannot change or delete blockchain data.
2. Why we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Sign you in, run matches, keep standings, deliver what you bought | wallet, game records, purchases | performing our agreement with you |
| Verify payments, stop double-spends, fix failed refunds | purchases, transaction IDs | legitimate interests; legal obligations |
| Prevent abuse and keep the site up | IP address (rate-limit counters), admin log | legitimate interests |
| Discord roles and notifications you turn on | Discord data | your request (agreement); consent for ALC balance display |
| Answer your emails, add email entries, check and pay prize claims | email address, message, wallet, country, age confirmation | performing our agreement (the Official Rules); legitimate interests |
| Count page visits in aggregate | analytics (section 4) | legitimate interests |
We do not sell your personal information, share it for cross-context behavioural advertising, or use it to profile you.
3. Who processes it for us
- Vercel (hosting, request handling, cookieless analytics), United States.
- Amazon Web Services (DynamoDB database and our battle server), United States.
- Discord (sign-in via Discord, roles, notifications), if you connect it.
- Google (Gmail), which holds the emails you send us, United States.
- AlgoNode/Nodely (Algorand blockchain access). Your browser also contacts NF Domains (to show your .algo name) and Pera and Vestige (asset and price data). Your wallet app (Pera, Defly, Lute and others) has its own privacy policy.
Our providers store data in the United States. Where a provider offers them, transfers from the EU or UK rely on the standard contractual clauses or the EU-US Data Privacy Framework, as set out in that provider's terms.
4. Cookies, storage and analytics
We use only what the site needs to work:
session(keeps you signed in),auth_challenge(5 minutes, sign-in),discord_mode,discord_stateandlr_oauth_state(Discord sign-in and Linked Roles).- Browser storage for your theme, sound settings, tutorials seen, an unfinished wager or Chaos reconnect, and a short wallet-data cache.
Analytics: we use Vercel Web Analytics, which sets no cookies, identifies visits by a hash discarded after 24 hours, and gives us only aggregate counts (page, referrer, country, device and browser type). We do not use Google Analytics or advertising pixels. If we ever add analytics or marketing tools that use cookies or track you across sites, we will ask for your consent first and honour Global Privacy Control signals.
5. How long we keep it
Some records are short-lived. Each one is stamped with the expiry time shown in the first table when it is written. We cannot promise exactly when an expired record is removed from storage, so a record can stay stored after its expiry time. If you want any of these removed now, email us and we will delete yours by hand.
| Short-lived records | Expiry time set |
|---|---|
| IP rate-limit counters | about 2 to 3 minutes |
| Open match queue entries | 2 to 24 hours |
| Block Wars entries, free-entry tokens | 48 hours |
| Chaos session records | 1 day; Chaos results 90 days |
| Quest progress | 7 days |
| Admin action log | 90 days |
| Payment double-spend locks | 1 year |
| Other records | Kept for |
|---|---|
| Wallet profile, decks, match history, purchases, Discord links | while your account exists; deleted when you ask us |
| Records of failed or manual refunds and payouts, and prize claims | as long as we need them to settle what we owe, show what we paid, or meet the law |
| Emails you send us | as long as we need them to answer you and keep the records above |
6. Your choices and rights
You can ask us to access, correct, delete or export your data, or object to a use. Email algoleagues@gmail.com with the subject "Privacy request", your wallet address and what you want. These rights are open to everyone, wherever you live, including rights under the EU and UK GDPR and California and other US state privacy laws. Because we know you only by your wallet, we may ask you to show that the wallet is yours, for example by sending a zero-amount transaction from it with a code we give you. We do not need your name or any ID document. We aim to answer within 30 days, and in any case within the time the law where you live requires. We do not charge or treat you differently for asking.
Limits: we cannot delete blockchain data, and we keep payment and payout records we need to settle what we owe you, prevent fraud or meet the law. You can disconnect Discord at any time in Discord's settings. EU and UK residents may complain to their data protection authority. Because we do not sell or share data for advertising, there is nothing to opt out of; we still treat a Global Privacy Control signal as an opt-out request.
7. Age
Algo Leagues is for adults 18 and over. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
8. Security and changes
We use signed, httpOnly session cookies, server-side payment checks and access-controlled storage. No system is perfectly secure. Because we do not hold your name or email unless you email us, if a security incident affects your data we will post a notice on the site and our Discord, and tell the authorities where the law requires. If we change this policy we will update the date above and, for material changes, post a notice on the site.
9. Contact
Antity, LLC. Email algoleagues@gmail.com. This email is our only contact for privacy matters. You can also find us on our Discord, but please do not post personal details there.