Privacy

We keep as little as the game needs. We never store your phone number in plain text, we don’t sell data, and this website has no advertising or tracking scripts. Payouts are public on the blockchain, as every blockchain transfer is.

The website needs no account. Our host receives the usual request information (such as IP address and browser) to serve pages and keep the site safe; our own endpoints use the IP address only to limit request rates and do not log it. Token figures are read from the public blockchain.

If you choose to remember settings, they stay in your own browser’s storage.

When you play paid drops in the app, we process:

• Your phone number, to send your sign-in code and to check it is a personal mobile number. We store only a keyed hash of it (HMAC-SHA256) and its country.
• Your wallet addresses: the one created for you at sign-in and any you link. Payouts go to these, and they are public on chain.
• Your game activity: drops, answers, answer times, scores, streaks and payouts.
• Device and connection checks: Apple App Attest or Google Play Integrity results, a browser identifier on the web, and your connection’s country, to keep one person to one player and to apply the country rules.
• Your stated country of residence.

• Privy, for sign-in and the wallet created for you.
• Twilio, to check the type of a phone number before a code is sent.
• Supabase, for our database and private file storage.
• Vercel, to host this website; Cloudflare Turnstile, to tell people from bots on the web.
• Expo, to deliver the notifications you turn on.
• Robinhood Chain, where payouts are recorded publicly.

You can ask us to delete your account and the data tied to it, except what we must keep to prevent abuse or meet legal duties; blockchain transfers can’t be erased by anyone. Contact us at @trydetected.