Privacy Policy

Effective date: 1 March 2026  ·  Last updated: 1 March 2026

This Privacy Policy explains how HODL Dog collects, uses, discloses and protects information about you when you use our game and website (the "Service"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms, please discontinue use of the Service.

1. Information We Collect

1.1 Information you provide directly

• Email address — only if you voluntarily enter it in the "Notify Me" form for Level 2 updates. This is optional and not required to play.
• Wallet address — if you choose to connect a Web3 wallet (MetaMask, Coinbase Wallet, etc.) using the EIP-6963 standard. We receive only the public wallet address; we never have access to your private keys, seed phrase or funds.

1.2 Information collected automatically

• Browser localStorage / sessionStorage — used to remember your language preference, sound settings, game progress and wallet connection status locally in your browser. This data never leaves your device unless explicitly described below.
• Technical data — browser type, operating system, screen resolution and rough geographic location (country/region via IP address) collected through our hosting infrastructure logs for security and performance purposes.
• Usage data — pages visited, time spent, game actions (level completion, coin count, score) stored temporarily in server logs for aggregate analytics. These logs are anonymised after 30 days.
• Cookies — we use only strictly necessary session cookies. We do not use third-party advertising cookies or tracking pixels.

1.3 Information we do NOT collect

• We do not collect your name, phone number, postal address or national identity information.
• We do not collect payment card or bank account details.
• We do not use Google Analytics, Facebook Pixel, or similar third-party tracking scripts.

2. How We Use Your Information

Purpose	Legal basis (GDPR)
Provide, maintain and improve the game and Service	Performance of contract / legitimate interests
Remember your preferences (language, sound, progress)	Legitimate interests
Send Level 2 release notifications (email — opt-in only)	Consent
Detect and prevent fraud, abuse and security threats	Legitimate interests / legal obligation
Aggregate analytics to understand usage patterns	Legitimate interests
Comply with applicable law and legal requests	Legal obligation

We do not sell, rent or trade your personal data to any third party for marketing purposes.

3. Web3 Wallet Connection

HODL Dog supports voluntary connection of Web3 wallets. When you connect a wallet:

• We receive only your public wallet address (e.g. 0xABCD…1234).
• We use this address solely to display your identity in-game (shortened form), track your in-game score on the leaderboard, and associate reward credits with your session.
• No on-chain transactions are initiated by us without your explicit confirmation in your wallet application.
• We have no custody over any cryptocurrency or digital assets in your wallet.
• Wallet connection data is stored in your browser's sessionStorage and cleared when you close the tab.

4. Cookies and Local Storage

We use the following storage mechanisms:

Storage	Key	Purpose	Duration
localStorage	preferredLang	Remember chosen language	Permanent (until cleared)
localStorage	soundEnabled	Remember sound on/off preference	Permanent (until cleared)
sessionStorage	gameCompleted	Track level completion in session	Session (tab close)
sessionStorage	connectedWallet	Wallet address during session	Session (tab close)
ServiceWorker Cache	hodl-dog-v*	Offline game availability (PWA)	Until next update

You can clear all stored data at any time through your browser settings (Settings → Privacy → Clear browsing data).

5. Third-Party Services

The Service uses the following third-party services:

• Google Fonts — to load the Orbitron and Press Start 2P typefaces. Google may log your IP address when fetching font files. See Google Privacy Policy.
• Web3 wallet providers (MetaMask, Coinbase, Trust, etc.) — if you choose to connect. Each provider has its own privacy policy governing their software.
• Hosting provider — our server infrastructure provider may collect IP addresses and access logs as part of their service.

We have no control over third-party services and encourage you to review their respective privacy policies.

6. Data Retention

• Server logs — retained for up to 90 days, then deleted or anonymised.
• Email addresses (Level 2 notifications) — retained until you unsubscribe or request deletion.
• Wallet addresses — not stored server-side; session only.
• Local browser data — retained in your browser until you clear it manually.

7. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. These include:

• HTTPS/TLS encryption for all data in transit.
• No storage of sensitive personal data (no passwords, no payment data, no private keys).
• Restricted access to server infrastructure.
• Regular security reviews of our codebase.

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (EU/EEA residents)

• Right to access — request a copy of data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data ("right to be forgotten").
• Right to restrict processing — request we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent at any time (e.g. unsubscribe from email notifications).

Under CCPA (California residents)

• Right to know what personal information we collect and how it is used.
• Right to request deletion of personal information.
• Right to opt out of the sale of personal information (we do not sell data).
• Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing requests.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will promptly delete such information.

Users in the EU/EEA under the age of 16 should not provide personal information without consent from their parent or guardian.

10. International Transfers

HODL Dog is operated from Singapore. If you are located in the European Economic Area, the United Kingdom or Switzerland, please be aware that your information may be transferred to and processed in countries that may not have the same data protection laws as your jurisdiction.

Where we transfer personal data from the EEA to third countries, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date. We encourage you to review this policy periodically.

Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at the details above. We aim to respond to all privacy-related inquiries within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.