Privacy policy

Template copy · replace before publishing

What we collect

The details you put into your profile, a hashed password, account and session identifiers, guard configurations, chat messages, API request records, usage and outcomes, support messages and payment references. Hosting and network providers process IP addresses and request metadata. If you connect a Solana wallet, we process the public wallet address you approve: it is stored in your browser and used as your account identifier, and it is never published.

How we use it

To run the arena, authenticate accounts, evaluate policies, show your history and handle payments. Security records are used to prevent abuse and investigate failures. Accounting records may be retained where the law requires it.

Who receives it

Messages, context and guard policies are sent to the model providers that answer them and to any guardrail evaluation service in use. Hosting, authentication and storage run on third-party infrastructure providers, email is delivered by an email API, and card details are handled by the payment processor — never stored by us.

Guard creators can review attempts against their own listings. Published names, attribution, objectives and aggregate results are public. Email addresses and API credentials are not published.

Retention

Account records, listings, support requests and API usage records are kept so history and disputes can be resolved. Game transcripts are kept without automatic expiry so protection can be improved and outcomes re-checked. Ask for deletion at any point; we retain only what legal obligations or open disputes require.

Cookies and local storage

First-party cookies carry sign-in and game sessions; browser storage remembers interface preferences such as the light or dark theme and the wallet address of a wallet you connected. Blocking them may break sign-in, saved sessions or wallet reconnection.

Your choices

You can ask to access, correct, delete, restrict or export your data, and object to processing based on legitimate interests. Automated scoring can be wrong, and eligible bounty claims always pass through human review — ask us to re-check an outcome.