Privacy Policy
This Privacy Policy describes how Cobble ("we", "us", "our") collects, uses, stores, and protects your information when you use the Cobble mobile application ("the App"). By using the App, you agree to the practices described in this policy.
1. Our Commitment to Your Privacy
We do not sell, rent, trade, or share your personal data with any third party for marketing or commercial purposes. Cobble is designed to operate with minimal data collection. We do not require email addresses (unless using Privy email login), real names, phone numbers, or physical addresses.
2. Information We Collect
- Wallet Addresses: Your Solana wallet public key is collected when you connect a wallet. This is your account identifier, used to process wagers, settle on-chain transactions, and maintain your profile. Wallet addresses are already publicly visible on the Solana blockchain.
- Game Scores & Match History: Match results, scores, words found, and wager outcomes are recorded for leaderboards, dispute resolution, and platform integrity.
- Display Name & Avatar: Your chosen profile information is stored to personalize your experience.
- Swipe Telemetry (Anonymized): During wagered matches only, anonymized touch interaction patterns (swipe velocity, timing, path shape) are collected for anti-cheat verification. This data is not linked to your identity and is discarded after each game session.
- Authentication Data: If you sign in via Privy (email or social login), Privy handles authentication data under their own privacy policy. We receive only a wallet address and display identifier.
3. Data We Do NOT Collect
We explicitly do NOT collect:
- IP addresses (we do not log or store IP addresses)
- Private keys, seed phrases, or wallet passwords
- Precise geolocation data
- Contacts, photos, camera, microphone, or device sensor data
- Browsing history outside the App
- Data from other apps on your device
4. How Data Is Stored
- On-Device: Game settings, preferences, and wallet credentials are stored encrypted on your device using Android Keystore (biometric-protected). This data never leaves your device unless you participate in wagered games.
- Server-Side: For wagered games, match results, wager records, and player profiles are stored in a PostgreSQL database. Data is encrypted in transit (TLS) and at rest.
- Blockchain: Wager transactions are recorded on the Solana blockchain and are publicly visible by nature of the blockchain. Blockchain transactions are permanent and cannot be deleted.
5. User Consent & Declining Consent
By using the App you consent to the data practices described in this Privacy Policy. If you decline to consent to data collection, you may still access features of the App that do not require such data. Solo (non-wagered) gameplay requires no server-side data storage.
Some functionality (wagered matches, leaderboards, profile features) requires storing data associated with your wallet address to function.
We do not use coercive measures, dark patterns, or deceptive interfaces to force consent.
6. Data Sharing & Third-Party Services
We do not sell, rent, trade, or provide your data to any third party.
The only third-party services that process data as part of App operation are:
- Privy: Wallet authentication and embedded wallet creation. Privy's privacy policy governs their handling of authentication data. Visit privy.io/privacy for details.
- Solana Blockchain: Wager transactions are processed on the Solana network. All blockchain transactions are public and immutable by design.
- Railway: Server hosting for game infrastructure. Railway's infrastructure is encrypted in transit and at rest.
We ensure that all third-party service providers who have access to User Data are contractually or legally obligated to provide at least the same level of privacy protection as required by this policy and applicable Solana Publisher Policies. These providers are prohibited from using any data beyond what is strictly necessary for their operational purpose.
7. Government & Law Enforcement Requests
We will not voluntarily provide any user data to any government, law enforcement agency, or governmental body.
We will only disclose user data if ALL of the following conditions are met:
- A valid court order or warrant is presented that has been signed by a judge with proper jurisdiction
- The court order has been reviewed and challenged for validity by legal counsel
- The request is specific and narrowly tailored to the data necessary for the stated legal purpose
- All available legal remedies to challenge or narrow the request have been exhausted
We will notify affected users of any data disclosure unless legally prohibited from doing so. Informal requests, subpoenas without judicial oversight, and non-judicial demands will be refused.
8. Data Retention & Deletion
- Game History: Match results and leaderboard data are kept indefinitely to maintain historical leaderboards and provide dispute resolution records.
- Swipe Telemetry: Anonymized anti-cheat data is computed per game session and immediately discarded. It is not stored permanently.
- Account Data: If you request account deletion, we will remove all personal data associated with your wallet address within 30 days, except where retention is required by law or for legitimate dispute resolution.
Users may request deletion of their account and all associated data by emailing Nic@degensend.com. Blockchain transactions cannot be deleted as they are part of the permanent public ledger.
9. Data Security
We employ the following security measures:
- All financial data writes are processed server-side through authenticated WebSocket connections
- JWT session authentication prevents unauthorized access
- On-device wallet credentials are protected by Android Keystore with biometric authentication
- Seed Vault integration ensures private keys never leave the secure enclave on Solana Seeker devices
- FLAG_SECURE prevents screenshots and screen recording during wagered gameplay
- All communications use TLS encryption
10. Cookies & Local Storage
Cobble is a mobile application and does not use browser cookies. No tracking cookies, advertising cookies, or similar technologies are employed. On-device storage (AsyncStorage, SecureStore) is used only for game settings and encrypted wallet credentials.
11. Children's Privacy
Cobble is not intended for users under 18 years of age. We do not collect User Data from minors (as defined by applicable law) without the verifiable consent of a parent or guardian.
Because Cobble involves optional cryptocurrency wagering, all users must be at least 18 years old and legally permitted to participate in their jurisdiction.
If we learn that we have collected data from a user under 18 without verifiable parental or guardian consent, we will delete that data immediately. If you believe a minor is using the App, please contact us at Nic@degensend.com.
12. Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you
- Deletion: Request deletion of your account and all associated data
- Correction: Request correction of inaccurate personal data
- Portability: Request your data in a machine-readable format
- Opt-out: Opt out of non-essential data collection
- Withdraw Consent: Withdraw consent at any time by discontinuing use of the App
To exercise any of these rights, contact us at Nic@degensend.com. We will respond to all valid requests within 30 days.
13. International Users
Data is processed and stored on servers that may be located outside your country. By using the App, you consent to this transfer. We aim to comply with applicable data protection laws including GDPR (for EU users) and CCPA (for California residents).
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App. Continued use after changes are posted constitutes acceptance of the updated policy.
15. Contact
For privacy-related questions, data deletion requests, or to report concerns, contact us at:
Nic@degensend.com
@NicsHODLN on X (Twitter)
Last updated: April 5, 2026