Privacy Policy
Tiny Terrapins (“we”, “us”) is a game where players race virtual terrapins that follow real cryptocurrency price movements, using a play-money currency called Shell Coins. This policy explains what information we collect, why, and the choices you have. Questions or requests: support@tinyterrapins.com.
Information we collect
- Account details. Your email address and a password. We never store your password itself, only a salted one-way hash of it.
- Gameplay records. Your Shell Coin balance and history, the bets you place, refills you claim, whether you joined the ranked league, and your weekly ranked points.
- Payment records. If you buy Shell Coins with USDC, we record the purchase (package, amount, time) and the details of the matching on-chain transfer: the sending wallet address, transaction hash and amount. This information is already public on the Base blockchain. We never receive or store your wallet keys or seed phrase, and we will never ask for them.
- Session cookie. When you log in we set a cookie that keeps you signed in for up to 7 days. It is strictly necessary for the site to work while you are logged in.
- Technical data. Like any web service, our hosting provider and servers process your IP address and basic request information (browser type, pages requested) in ordinary logs used to run and secure the service.
How we use it
- To run the game: sign you in, place and settle bets, credit refills and purchases, and calculate leaderboards.
- To prevent abuse, such as multiple accounts or automated claiming of refills.
- To support you if something goes wrong, such as a payment that did not credit.
- To show advertising (see below), which helps pay for the service.
We do not sell your personal information, and we do not use your email for marketing.
What other players can see
The public leaderboard shows an anonymous handle (for example “Racer42”), your rank and your weekly points. It never shows your email address.
Advertising and third parties
- Google AdSense. We use Google’s advertising products to offer optional rewarded ads. Google and its partners may use cookies and similar technologies to serve and measure ads, which can include personalised ads. Learn more in how Google uses information from sites that use its services, and manage your ad settings at adssettings.google.com. If you are in the European Economic Area, the UK or Switzerland, Google’s consent tool asks for your choice before personalised ads are shown, and you can change or withdraw that choice at any time using the privacy settings link it adds to the site.
- Google Fonts. Your browser loads our typefaces from Google, which receives your IP address when it does.
- Infrastructure. The site is hosted on Render, and its domain and network traffic pass through Cloudflare. These providers process data on our behalf to deliver the site.
- Market and blockchain data. Our servers read public cryptocurrency prices from Coinbase and public transfer data from the Base blockchain through a public node. These requests do not include your personal information.
How long we keep it
We keep your account and gameplay records for as long as your account exists. Payment records may be kept longer where needed for accounting or to resolve disputes. Anything written to a public blockchain, including your transfer to us, is permanent and outside our ability to erase.
Your choices
- Access or deletion. Email support@tinyterrapins.com from your account’s email address to ask for a copy of your data or to have your account and personal data deleted. Deleting an account also forfeits its Shell Coins, which have no cash value.
- Cookies. You can block or clear cookies in your browser, but you will not be able to stay logged in without the session cookie.
- Ads. You can change personalised-ad settings with Google as described above.
Depending on where you live, you may have additional rights over your personal data. Contact us and we will respond to reasonable requests.
Security
Passwords are hashed, sessions use a signed, HTTP-only cookie, and traffic is encrypted in transit. No system is perfectly secure, so please use a unique password.
Children
Tiny Terrapins is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has created an account, contact us and we will remove it.
Changes
We may update this policy as the service changes, for example when new features launch. The date at the top shows the latest version, and continued use after a change means you accept the updated policy.