Cazamuertos is built to collect as little as possible. Here's what we store, and what we don't.
What we store
Wallet address— if you connect a wallet and sign in, we store your public wallet address to credit your roundups and let you edit your profile. It's shown only in shortened form (e.g. 0x1234…abcd), never the full address in a URL or on a page.
Gameplay attribution— which muertos have been wrangled, and whether a roundup is credited to a wallet or (if you don't connect one) to the muerto you played, plus the global community roundup total.
Optional profile — a username, an avatar choice, and the nicknames you give your compañeros. Only what you choose to enter.
Giveaway entries — if you enter a Game Vault giveaway (by wrangling the Lost One while signed in), we store your wallet address, your ticket count, and the UTC days you entered. Aggregate ticket totals are public; if you win, your wallet address is displayed publicly in shortened form on the winner wall, and the draw record is retained permanently so the result stays verifiable. See the Giveaway Terms.
Share cards— when you mint a Cazamuerto Card, we store that night's stats (score, roster, nicknames you chose) to render the public share page behind its link.
Contact messages — if you use the Contact page, we store your message and any contact handle you include, so we can respond.
On-chain data
NFT ownership and Graveyard staking are public blockchain information, read live from the Ethereum network. We don't control or store the chain; we just read it to personalize play.
Cookies & storage
When you sign in (SIWE) we set a functional, httpOnly session cookie plus a short-lived nonce cookie to prevent replay. These keep you signed in — they aren't used for advertising or cross-site tracking. Wallet libraries (e.g. WalletConnect / RainbowKit) may use your browser's local storage to manage the connection. The Game also keeps a few preferences in your browser's local storage — your chosen map, compañero, and personal bests — which stay on your device and are never sent to us.
Analytics
We use Vercel Analytics for aggregate, privacy-friendly usage stats (such as page views). It doesn't build advertising profiles of you.
What we don't collect
No email, password, or traditional account — your wallet is your identity.
No real name, phone number, or precise location.
No payment information — the Game never processes payments or asks you to approve a transaction.
We don't sell or rent your data, and we don't share it for advertising.
Beta & data deletion
This is beta software: your data may be reset or deleted at any time as the Game evolves. You can also request deletion of your profile and roundup attribution at any time — message us via the Contact page or x.com/arcbuilds(include your wallet address or short id), and we'll remove it. One exception: completed giveaway draw records (winning address, ticket totals, block hash) are retained so past draws remain publicly verifiable.
Changes
We may update this policy; material changes will be reflected here.