SolRace — Privacy Policy

The data controller responsible for processing your personal data is:

3D Print Corner · Anastasiia Miroshnichenko
Ehrenbergstraße 8, 10245 Berlin, Germany
Email: coffeeonchainsol@gmail.com

We collect:

• Solana wallet address (used as your identity)
• Username — an optional, unique display name you choose (shown on leaderboards and above your kart)
• Race results: lap times and per-track best times
• Ghost replay data: recorded kart positions/inputs of a lap, used to race against a "ghost"
• Combat results: wins, kills, matches played, and placement in Survival / Battle Royale
• Real-time multiplayer state: kart position, speed and chosen name, relayed to other players in your room (transient, not stored long-term)
• On-chain records: owned heroes & stat upgrades, purchases, and scores you choose to submit on-chain

We do NOT collect:

• Email addresses, passwords, or phone numbers
• Real names (unless you voluntarily set a username)
• Precise location or device fingerprints
• Private keys or seed phrases

IP addresses: Your IP address is processed transiently by our backend solely for rate-limiting and abuse prevention. It is not used to identify you and is not stored in our game database alongside your profile.

• Art. 6(1)(b) — Contract performance: Storing scores, ghosts, combat results and processing purchases to provide the Game.
• Art. 6(1)(f) — Legitimate interest: Leaderboard integrity, anti-cheat, rate-limiting, security, and improving the Game.
• Art. 6(1)(a) — Consent: Optional features such as claiming a username, joining multiplayer, and submitting a score on-chain.

SolRace is a blockchain game. When you register, buy an item, or submit a score on-chain, data is permanently recorded on the Solana blockchain and is publicly visible, including your wallet address, the heroes and upgrades you own, purchase amounts (SOL / $SKR), and any on-chain scores. On-chain data cannot be deleted or modified due to the immutable nature of blockchain technology. Solana network fees for these transactions are your responsibility.

• Scores, ghosts, combat results, usernames: Retained while your profile is active; you may request deletion of off-chain data at any time.
• Multiplayer session state: Held only for the duration of a live room, then discarded.
• On-chain records: Permanent (the blockchain is immutable).

Off-chain data is stored on servers provided by Neon (PostgreSQL database, US) and Netlify (serverless functions, US); real-time multiplayer is relayed via Fly.io.

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("right to be forgotten") (Art. 17) — except on-chain data
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)

To exercise any of these rights, contact us at coffeeonchainsol@gmail.com.

Your data may be transferred to and processed in the United States (Neon database, Netlify hosting, Fly.io relay). We rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

• Solana blockchain: On-chain ownership, purchases, and score submissions
• Solana Mobile Wallet Adapter (MWA): Wallet connection & transaction signing
• Neon (PostgreSQL): Leaderboard, ghost, combat and username storage
• Netlify: Backend hosting and serverless functions
• Fly.io: Real-time multiplayer relay server

SolRace is not directed to children. You must be at least 18 years old to use the Game (see Terms). We do not knowingly collect data from minors.

SolRace does not use automated decision-making or profiling that produces legal effects concerning you (Art. 22 GDPR). Leaderboard rankings and statistics are purely informational.

We implement appropriate technical and organizational measures including wallet-signature-based authentication, parameterized database queries (SQL-injection prevention), CORS restrictions, request rate-limiting, server-side score validation (anti-cheat bounds), and on-chain purchase verification.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin, Germany
Email: mailbox@datenschutz-berlin.de

We may update this Privacy Policy from time to time. Material changes will be communicated through the App.