Skip to content
STAKEWAR

Privacy Policy

Last updated 2026-06-04

What we collect

  • Wallet addresses — public on-chain. Stored only as visible on Ethereum/Base block explorers.
  • Uploaded images— public on IPFS via Pinata; their content hashes are recorded on-chain in the cell’s imageURI field.
  • Report submissions— category, optional details text, the reporter’s wallet address, and the reported cell ID. Stored on our server for admin review.
  • Server logs — request timestamps, blocked uploads (hash + category), errors. Used for moderation and debugging.

What we don’t collect

  • Email addresses, names, phone numbers
  • Passwords (we use wallet signatures, not credentials)
  • Browsing analytics or fingerprints (no Google Analytics, no pixels)
  • Geolocation
  • Payment card data (USDC moves directly between wallet and contract)

Third-party services

  • Pinata — pins your uploaded image to IPFS. They see the image bytes and our API key. See pinata.cloud/privacy-policy.
  • OpenAI — image moderation. Your image is sent to OpenAI as base64 to check for prohibited content. OpenAI states moderation API inputs are not used for training. See openai.com/policies/privacy-policy.
  • WalletConnect / RainbowKit — wallet-connect protocol uses a relay server to bridge mobile wallets. Browser-extension wallets like MetaMask connect directly without WalletConnect.
  • Vercel — hosting. Receives standard server logs (IP, request URL). Hosting provider may change before mainnet.
  • PublicNode RPC— used for ENS reverse lookups. Receives the address you’re resolving but not your wallet identity.

Cookies and local storage

We use localStorageto remember whether you’ve dismissed the testnet banner and confirmed you’re 18+. Wagmi/RainbowKit also store which wallet you connected with, for reconnect-on-reload. No third-party cookies are set by our own code.

Your rights

  • Image removal — submit a report from any cell. Admin will replace the image on-chain via adminSetImage. The original still exists on IPFS (you can’t un-pin third-party copies) but our grid stops referencing it.
  • Report withdrawal — contact admin (e-mail TBD) to remove your own report from reports.json.
  • Account deletion — your wallet address is permanent on the blockchain; we cannot delete it. We can stop displaying your address in our front-end on request.

Children

The Service is not intended for users under 18. We do not knowingly collect data from minors. CSAM uploads are reported to NCMEC and law enforcement.

Contact

Email and DPO contact will be added when the operating entity is finalised.