Privacy Policy
What we keep, and what we do not
Foil is built to need very little about you. There is no account balance, no identity check and no advertising tracker. This page lists everything the service stores.
What we collect
| Data | Why | Kept |
|---|---|---|
| Wallet address | To draw your packs, pay you, and show your own history back to you | While your account exists |
| Email address, only if you give one | Waitlist place and invite codes | Until you ask us to remove it |
| Country you select, and your confirmation that you are not a US person | To apply the issuer's restriction | While your account exists |
| Payments, draws, settlements and payouts | To run the game, prove fairness and keep accurate books | Permanently, and also public on the blockchain |
| A random session id and event names, for example "pack opened" | To count how the product is used and find where it breaks | 12 months |
| Your IP address, briefly, for rate limiting | To stop abuse and spam | Not stored in our database; held transiently by our hosting provider |
What we do not collect
No advertising or cross-site trackers. No cookies for analytics. No private keys or seed phrases, ever, and Foil will never ask for them. No identity documents. No contact list, camera, microphone or precise location.
The blockchain part
Payments, draws bound to transactions and payouts happen on a public blockchain. Anyone can see those transactions and the addresses involved, and neither Foil nor you can delete them. Treat your wallet address as public information.
Who processes data for us
Foil runs on a small set of providers, each handling only what it needs: our hosting and serverless platform, our database provider, our wallet sign-in provider, and public blockchain nodes. They act on our instructions and do not receive your data for their own advertising.
Your choices
- See what we hold. Ask and we will send it.
- Remove your email. Ask and it is deleted from the waitlist and from your account.
- Remove your account. We delete your account record and your email. Blockchain transactions and the settlement records tied to them are kept, because they are financial records and are public in any case.
- Opt out of counting. Usage events carry no identifier beyond a random per-session id. If you would rather we did not count your sessions at all, tell us and we will exclude your wallet.
Security
Access to our database is limited to the service itself; no browser can read it directly. Secrets are held in encrypted environment storage. Foil never holds your funds, so a breach of our systems cannot move your money.
Children
Foil is not for anyone under 18 and we do not knowingly collect data about children. If you believe a child has used Foil, contact us and we will remove the record.
Changes
If this policy changes materially, the new version is published here and announced on the site.
Contact
Privacy requests and questions: [email protected].
Foil is operated by Pappygold.