Privacy Policy

This policy explains how Trenches handles information when you use our website, game, account and wallet services.

Information we use

Account information: your game account identifier, username, linked public wallet addresses, login provider identifiers and authentication records. If you choose Google sign-in, Google provides an identity token containing your account identifier and basic profile information, which may include your email address, name and profile picture. We use the identifier and verified email to authenticate you and, where appropriate, locate your existing Trenches account. Google sign-in does not give us your Google password or access to Gmail, Drive or your contacts.

Game information: match participation, kills, deaths, results, progression, inventory, social interactions and reports. For security and fair-play enforcement, we also process gameplay and technical evidence, which can include positions, movement and combat actions, timing, connection health, IP information and device identifiers.

Wallet and payment information: public addresses, transaction signatures, amounts, deposits, withdrawals, reservations, winnings holds, token purchases and associated accounting records. Wallets created and managed by Trenches require us to protect their signing keys. Our in-house service stores these keys encrypted in a separate signing service. Connecting an external wallet does not give us that wallet's private key or recovery phrase.

Technical and support information: session cookies, browser storage identifiers, device/browser information, service logs, errors and information you provide when contacting support or reporting a problem. Essential authentication and security storage is required for the relevant service to work. If you allow optional analytics, we use PostHog's EU service to understand visits, actions, progress and errors. Analytics can recognize returning browsers and link signed-in activity across devices. It excludes typed text, wallet details and gameplay recordings and is retained for up to one year. You can change your choice through Analytics preferences on the landing page or Main Menu.

Why we use it

We use this information to provide accounts and gameplay; authenticate users; maintain balances and inventory; process and reconcile payments; protect accounts; investigate suspicious play, abuse and disputed transactions; provide support and recovery; and meet applicable legal obligations. When we move an existing account to our in-house login system, we verify ownership and preserve that account's records and balances. Separate accounts remain separate.

We use Google account information for sign-in, account linking and recovery. We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models. Any use or transfer of Google user data must comply with the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Who receives information

Service providers process information needed to run Trenches. These include Google for sign-in and database services, Privy while its login/wallet services remain in use, Photon for multiplayer connectivity, and our hosting, storage and blockchain infrastructure providers. Access is limited to the purposes for which those services are used. Authorized Trenches operators can access information needed for support, security, payment reconciliation and account recovery.

Public game features can display your chosen username, gameplay results and leaderboard information. Blockchain transactions and wallet addresses submitted to Solana are public. A public address is not anonymous if it can be linked to you, and we cannot remove confirmed transactions from the blockchain.

We may also disclose information when required by applicable law or when necessary to investigate abuse, protect the service or establish and defend legal claims. Providers may process information in countries other than yours; applicable transfer safeguards depend on the relevant provider and jurisdiction.

Account restrictions and review

Automated security and fair-play checks may restrict gameplay, place withdrawals on hold or flag an account for review. We retain relevant evidence so authorized operators can investigate and correct mistakes. You can ask Trenches support to review a restriction. This policy does not guarantee that every restriction will be removed.

Retention and security

We retain information for as long as needed to provide the service, maintain accurate financial records, investigate disputes, prevent abuse and satisfy applicable legal obligations. Retention varies by record type. Deleted information may remain in restricted backups until those backups expire. Public blockchain records remain on-chain.

We use measures such as encrypted connections, restricted service access, protected signing keys and account security controls. No system can guarantee absolute security. Keep your external wallet recovery phrase and account recovery codes private.

Your choices and requests

You can choose an available sign-in method, disconnect an external wallet and sign out. You can revoke Google access in your Google Account settings; this does not itself delete your Trenches account or transaction records.

Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, object to or restrict certain processing, or withdraw consent where processing relies on consent. Requests can be made through Trenches support. We may need to verify ownership before acting on a request. Some information may need to be retained for outstanding payments, security, disputes or legal requirements. You may also have the right to complain to your local data-protection authority.

Changes

We will update this policy when our practices change. Where required, we will provide additional notice or request consent before using information for a new purpose.