This page summarizes what CoinDuel actually collects and stores today. It is not a substitute for a formal legal privacy policy — a complete policy reviewed by counsel will replace this page before public launch.
Email address, username, and a securely hashed password (never stored or transmitted in plain text) are collected at signup.
If you verify a wallet, we store its public address and the time it was verified. Verification proves you control the wallet via a signed message — we never request or store a private key or seed phrase, and no on-chain transaction is ever made on your behalf.
To run ranked matches, we fetch your verified wallet's publicly-visible all-time trading profit/loss from a third-party data provider (Solana Tracker) and store a snapshot of it against each match you play.
If you upload a profile picture (CoinDuel Pro), the image is stored in our cloud storage provider (Supabase) and is publicly visible, like the rest of your profile.
Subscription payments are processed entirely by Stripe. We never see or store your card details — only your subscription status and billing dates.
A single httpOnly session cookie keeps you signed in. It is not used for tracking or advertising.