Privacy Policy

Last updated: July 26, 2026

1. Controller

The controller of your personal data is GetPlasma (the "Game"). For inquiries regarding your data, please contact us through the in-game support channels.

2. Data We Collect

• Account data: Username, email, password (bcrypt-hashed), device ID
• Identity data: First name, last name, birth date, birth place, gender, home country
• Wallet data: Ethereum wallet address, encrypted keystore JSON (for both main chain and CC chain)
• Game data: Level, stats, inventory, energy, quiz results, ambassador history
• Transaction data: Cash events, CC transactions, market trades, share claims
• Session data: Login timestamps, IP address (for sessions), last activity
• Logs: Action logs, request logs, cheat detection flags

3. Legal Basis (GDPR Art. 6)

• Art. 6(1)(a) — Consent: You consent to data processing by accepting this policy during registration
• Art. 6(1)(b) — Contract: Data is processed to provide the game service you requested
• Art. 6(1)(f) — Legitimate interest: Cheat detection, security, and service integrity

4. Blockchain Data (Immutable)

Important: Wallet addresses and on-chain transactions (including PlasmaShares/DAO share claims) are recorded on the blockchain and cannot be deleted. This is a fundamental property of blockchain technology. When you request account deletion, your off-chain data will be anonymized, but blockchain records will persist permanently.

5. Data Retention

• Active account data: Retained while your account is active
• Session data: Deleted after 30 days of inactivity
• Action logs: Retained for security and audit purposes
• Deleted accounts: Personal data is anonymized; referential data (e.g., market trade history) may be retained with nullified user references

6. Your Rights (GDPR)

• Art. 15 — Right of access: You can download all your data via Settings → Data & Privacy → "Download My Data"
• Art. 17 — Right to erasure: You can delete your account via Settings → Data & Privacy → "Delete My Account"
• Art. 20 — Right to data portability: The data export is provided in JSON format
• Art. 7(3) — Right to withdraw consent: You may delete your account at any time

7. Data Sharing

We do not sell your data. Data is shared only:

• With blockchain networks (wallet addresses, transaction data) — publicly visible and immutable
• With service providers (database hosting, email delivery) under data processing agreements
• When required by law or to protect against fraud/cheating

8. Security

• Passwords are hashed with bcrypt (industry standard)
• Keystore files are encrypted with your password
• Identity hashes use SHA-256 with a server-side salt
• All connections are encrypted via HTTPS/TLS

9. International Transfers

Your data may be processed on servers located in the European Union. Blockchain data is globally distributed and cannot be geographically restricted.

10. Children's Privacy

The game is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe we have collected such data, please contact us for deletion.

11. Changes to This Policy

We may update this policy from time to time. Continued use of the game after changes constitutes acceptance of the updated policy.