Privacy Policy.

Scope and contact

This policy describes processing by Trench Arcade through this website and its game, collection and payment features. Public blockchain networks and independent wallet, explorer and social providers also process information under their own practices.

For a privacy question or request, contact the Trench Arcade team through the official Discord server linked on this website. Ask for an appropriate private route before providing personal information or account evidence. Do not post a recovery phrase, private key or password in a support channel.

Account and information you provide

Connecting and signing in provides your public Solana address, login challenge and signature, selected player name and session information. Optional profile images and the account preferences you choose are associated with that wallet. We do not request or store your wallet private key or recovery phrase.

We process the friend, invitation, notification and gameplay information needed for the features you use. In-match messages are processed and relayed to the other player as transient chat; the current chat handler does not create a permanent chat archive. Other players may retain their own copies or screenshots.

The welcome confirmation records your 18+ declaration, Terms version and acceptance time. Signed-in acceptance is recorded for the wallet. The current declaration does not collect a date of birth or identity document or verify your age. Where separately reviewed paid access is used, its record includes scope, an evidence reference and expiry.

Games, collection and payment records

Game records include match assignment, input pool, rules, participants, results, statistics and qualifying settled-entry progress. Collection and market records include item ownership, unopened crates, delivered rewards, listings, signed listing authorizations and ownership generations.

Financial records include wallet parties, amounts, transaction signatures, quoted and accepted terms, fees, blockchain confirmations and the evidence needed to resolve deposits, payouts, seller proceeds and refunds. An unresolved original payment remains linked to its recovery record. These records are distinct from a browser session and are not erased by disconnecting a wallet.

Technical information and diagnostics

Hosting and network services process connection information, including public IP addresses, and may retain their own service and security logs. In application rate limits we use rotating keyed network-address buckets. Fair-play records can associate a stable keyed hash of an edge-supplied public IP address with authenticated wallets; those application association records do not store the raw IP address. A keyed hash remains pseudonymous information, not a promise of anonymity.

First-party operational diagnostics sample device input class, frame and transport timing, matchmaking and payment-preparation stages, outcome categories and service health. Timing records use bounded fields and keyed request references rather than raw wallet addresses or full signed payment bodies. These observations help diagnose failures and do not themselves prove that a payment or match finished.

Fair-play signals and compact match review

The game server processes positions, aim, movement, firing, damage and other authoritative gameplay state to run matches and investigate misuse. Confirmed attempts to alter server-owned state can result in an authenticated-wallet restriction. Suspicious aim and tracking patterns are review signals rather than automatic findings of cheating or automatic payout decisions.

Recent matches can be captured as compact sampled server-state recordings for private owner review. These contain gameplay positions, aim, combat events and relevant signals, not screen video, microphone audio or a recording of everything on your device. Coverage is bounded; not every match or moment is available, and earlier matches cannot be reconstructed retroactively.

A shared network address is evidence for review, not a reason by itself to restrict unrelated wallets. Incident evidence, access decisions and review records can be retained separately from a short-lived match recording.

Why information is processed

We use information to authenticate wallets, maintain sessions, provide social and game features, preserve collections, match players, calculate published progress and fees, display public activity, verify transactions, deliver purchases, settle obligations, investigate abuse and diagnose service problems. We also use necessary records to handle requests, disputes and legal obligations.

Where applicable law requires a legal basis, processing necessary to provide a requested feature is associated with that service; legal duties can require financial or security records, and legitimate interests can support proportionate fraud prevention, security and service maintenance. Consent applies where it is required and obtained for a particular optional use. A Terms checkbox is not blanket permission for unrelated uses of personal information.

What other people can see

Your player name, linked public wallet address, profile image, match statistics, arcade rank, settled-entry progress and public listings can be visible to other users. A player profile includes a public cosmetic inventory with owned skin quantities and sealed-crate counts. An unopened reward is not publicly revealed before opening.

Private purchase history, unpublished listing authorizations and internal payment-recovery evidence are restricted to the authenticated account, authorized operators and the services that need them. A wallet address is pseudonymous and may still be linked to you through public records or information you share. Do not put sensitive personal information in names, profile images, chat or blockchain memos.

Cookies, local storage and wallet returns

An essential session cookie keeps you signed in. Ordinary sessions last up to 24 hours; choosing Keep me signed in can extend that to 30 days. Browser storage also keeps preferences, graphics choices, selected wallet, current welcome confirmation and recovery information. Signed-in preferences can be stored against the wallet to restore them on another device.

For paid-match access, the browser can retain a separate application-generated signing key and match binding. Original payment terms and signed transaction evidence can be stored in IndexedDB so an interrupted approval is checked as the same original payment. These are application recovery records, not your Solana wallet private key.

On supported mobile Phantom flows, the device retains application transport encryption keys and pending request information. The first-party wallet-return bridge temporarily handles Phantom's encrypted response envelope; decryption occurs on the requesting device. Pending requests are valid for five minutes and a local mobile-wallet connection can last up to 24 hours. Acknowledging a received bridge response clears its result; expiry and later cleanup limit further availability.

You can control cookies and website storage through your browser. Blocking essential storage can prevent sign-in, wallet return, match access or reliable recovery. Clearing local data does not reverse a blockchain transaction, delete server records or cancel an outstanding obligation. The current arcade features do not introduce advertising trackers.

Providers, disclosures and international processing

Hosting, storage, game-server, settlement-verification and restricted signing services process information needed to operate the arcade. Wallet providers handle wallet connection and signing. Price providers supply quotes, and Solana services receive the requests needed to submit or verify transactions. Authorized operators can access the records necessary for support, security review and payment recovery.

Information may also be disclosed where reasonably necessary to comply with applicable law, respond to a valid legal request, protect rights or investigate fraud or abuse. Any such disclosure remains subject to applicable privacy requirements. Service providers can operate in countries different from yours; contact the team for information about relevant providers and transfer arrangements.

Solscan and community links open independent services. Public Solana addresses, transfers, signatures and transaction memos are replicated on a public blockchain. Trench Arcade cannot remove that chain history or control copies held by explorers, recipients or other independent participants.

Retention and deletion limits

Owner audience charts retain aggregate counts, without copying browser, wallet or session identifiers into their history. Current rolling windows are about 24 hours for minute counts, seven days for five-minute counts and 90 days for hourly counts. Server-health charts retain bounded minute samples for about 24 hours and hourly samples for seven days. Successful observations perform bounded expiry and pruning; unavailable observations remain gaps.

Retention depends on the feature and purpose. Sessions and login challenges expire. Current operational defaults retain bounded matchmaking and performance samples for about two hours. Compact match-review storage is capped per game server at 200 recordings, 64 MB and seven days; capacity limits can remove recordings sooner. Network-address associations older than seven days are eligible for bounded application cleanup.

These limits describe operational expiry and pruning rules, not a guarantee that every storage copy is physically erased at an exact second. Cleanup can occur on subsequent operations, and hosting providers apply their own log and backup practices.

Account, preference, ownership, listing, game-history, payment and enforcement records can persist after sessions end. Retention criteria include providing an ongoing account or collection, proving ownership, preventing duplicate payments, resolving an outstanding obligation or dispute, investigating misuse and meeting applicable legal duties. The current application does not automatically erase all long-lived records after one fixed period.

A request to remove account information is assessed against those needs and applicable rights. An unresolved financial obligation, necessary evidence or public blockchain record may limit what can be erased immediately. Local browser payment journals remain on that browser until its storage is cleared; clearing them does not remove the corresponding server or chain records.

Your choices and privacy rights

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to certain processing, withdraw consent for processing that relies on it, or complain to an appropriate authority. These rights are subject to legal conditions and exceptions; this policy does not waive them.

Send a request through the official Discord contact. We may ask for information reasonably needed to find the record and verify control of the relevant wallet, using a suitable private route. Do not send a wallet recovery phrase or private key. We will address requests as required by applicable law. The website does not currently provide a universal automatic account-deletion control.

You can choose not to connect a wallet, avoid optional purchases, edit supported profile details, disconnect or sign out, and manage browser storage. Public profiles and inventories are part of the current service; there is no private-inventory switch represented by this policy. Restricting processing necessary for a feature can prevent that feature from being provided.

Adults only

Trench Arcade is intended for adults 18 and over. Do not use it if you are under 18. The current age declaration is self-reported; it is not proof that every visitor is an adult. If you believe a child has provided personal information or is using the service, contact the team so the issue can be assessed and handled under applicable law.

Security and policy changes

We use measures including restricted authenticated access, session and same-origin checks, ownership validation, bounded diagnostic fields and restricted financial signing to protect the service. No system can guarantee protection from every attack, device compromise, data exposure or technical fault. Protect your device and wallet and report suspected unauthorized access promptly.

The effective date and version identify this policy. Material changes are published here and renewed acceptance is requested where required for new paid activity. A new policy does not erase an original purchase or an outstanding settlement record, and it does not authorize an undisclosed unrelated use of information.