This Privacy Policy explains what information Solotto (“we”, “us”) collects when you use the Service, and how we use it.

1. Information We Collect

• Wallet & account data: your public Solana wallet address, and the identifiers our authentication provider (Privy) issues when you log in — which may include an email address or social-account identifier if you chose that login method.
• Activity data:tickets purchased, quests completed, referrals made, and draw participation, so we can operate the game and calculate what you're owed.
• Technical data: IP address and request metadata, collected to secure the Service (for example, rate-limiting abusive requests) and to diagnose problems.
• Local storage:a referral code may be stored in your browser's local storage when you arrive via a referral link, so it can be attributed if you sign up.

2. How We Use Information

• To operate ticket sales, run draws, and deliver prizes.
• To detect and prevent fraud, quest abuse, and other violations of our Terms.
• To communicate with you about your account, purchases, or prizes.
• To comply with legal obligations, including tax reporting where applicable.

3. On-Chain Data

Solana is a public blockchain. Any transaction you send to Solotto's treasury address — including your wallet address, the amount sent, and the transaction signature — is permanently and publicly visible on-chain, independent of anything Solotto does. Winning tickets and the seeds used to draw them are also published so results can be independently verified (see Docs).

4. Third Parties We Rely On

• Privy — authentication and embedded-wallet infrastructure. Privy processes your login and may store credentials/session data under its own privacy policy.
• Supabase — database hosting for account, ticket, and draw records.
• Railway — application hosting for our website and API.
• Solana RPC providers — used to read and verify on-chain transactions.

We do not sell your personal information.

5. Data Retention

We retain account and transaction records for as long as needed to operate the Service and to meet legal, tax, and anti-fraud obligations, after which they are deleted or anonymized where feasible. Note that data already recorded on the Solana blockchain cannot be deleted by us or anyone else.

6. Your Rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal data (excluding on-chain records, which are immutable). To make a request, contact us at [insert contact email].

7. Children

The Service is not directed to anyone under 18 and we do not knowingly collect data from them.

8. Changes to This Policy

We may update this Policy from time to time; the “Last updated” date above reflects the most recent revision.

9. Contact

Questions about this Policy: [insert contact email].