Privacy Policy

The BotCoin Arcade is a free website with browser games, currently BOTZ Coin Rush and Robo's Moon Mission, run by BotCoin ("we", "us"). This page explains what the Arcade and its games collect and why. It covers the Arcade website, each game and the combined weekly rewards board. We keep it short and only describe what they actually do.

What we collect

• Policy acknowledgement: when you explicitly agree, we record the current Terms and Privacy content versions, server time, acknowledgement method, account reference and existing hashed device identifier. A short-lived, host-only HttpOnly cookie protects the acknowledgement action. No new IP or wallet data is collected by this acknowledgement.
• X sign-in (optional for guest play; required for new combined rewards): your X username and X user id, plus your account creation date, follower count and post count, which we use to check prize eligibility and stop fake accounts. We ask X for read-only access to your basic profile. We never post for you, never read your DMs, and never see your password. The access token is used once to read your profile and is then revoked; we do not store it.
• Display name: the handle you play under (your X username if you signed in, or the name you typed if not). It appears on the public leaderboards (each game and the combined weekly board) with your score or scores, rank, and a check mark if you signed in with X.
• Solana wallet address (optional): only if you type one into the Arcade (when you submit a Moon Mission score, or in the Prize wallet box on the Arcade home page), into Coin Rush, or send it to us by DM on X, so we can send prizes. It is a public address. We never show it on any leaderboard, and only the BOTZ team can see it. We keep a count of how many times a saved address is replaced. We never ask you to connect a wallet or sign anything, and we never ask for a seed phrase or private key.
• Game data: your scores, runs and in-game actions, game version and timing, and whether you agreed to the Terms of Service. In Coin Rush this includes jumps, slides, lane changes and power-ups, and your character choice. In Robo's Moon Mission this includes the thrust taps and run timing of each ranked run, which our server replays to check your score, and we keep that record so a run can be re-checked later. We use this data to build the leaderboards and catch cheating.
• Linking your scores across games: when you sign in with X in both games, we match the verified account references stored by our servers, not just typed names, so your best scores for the same week can be added together. The Arcade reads our Coin Rush score and eligibility records directly, without changing them. Existing account references and hashed device identifiers, and any optional prize wallet, are used privately for identity, eligibility and one-prize-per-person review. Public boards contain handles, scores, ranks and verification/eligibility indicators only; they never contain account IDs, wallets or device identifiers. We do not add scores together solely because typed names match.
• Device and network data: a random device key created by your browser, stored on your device (we keep only a hash of it), and a hash of your IP address (a one-way scrambled value, not your IP). We use these to stop cheating, multiple accounts and abuse, including checking whether several handles share the same wallet address, device or network.

Cookies and local storage

• Two short-lived cookies are used only for X sign-in: one that ties the login to your browser, and one (botz_xc) that lets you finish claiming your handle. Both expire in 10 minutes. We use no advertising or tracking cookies.
• Your browser also stores your handle, optional wallet address, best score, device key, whether you ticked the Terms of Service box and settings (such as sound and vibration) so the Arcade remembers you. You can clear this any time in your browser settings.

How we use it

• To run the games and the weekly leaderboards, including the combined weekly rewards board that adds your best score in each game.
• To check prize eligibility, pick winners, pay each prize once, and send prizes to the wallet address you provided.
• To prevent cheating, multiple accounts and abuse, including by comparing wallet addresses, device keys and network hashes across handles.
• To share results: top players' handles, scores and prizes may be posted on X and in the BOTZ Telegram. Our team also gets private alerts about new leaders.

Who sees it

We do not sell your data and we do not run ads. Only the BOTZ team can see wallets, X ids and the other private fields. Public pages show only handle, score or scores, rank, prize amount and the sign-in check mark.

We may share data if the law requires it, or when needed to investigate or prevent fraud, cheating, abuse or security problems.

The Arcade and its database are hosted on Cloudflare, which processes requests (including IP addresses) to deliver the site and may keep standard technical logs. X handles the sign-in on its own pages under its own privacy policy.

Blockchain is public

Wallet addresses and transactions on Solana are public by nature. When we send a prize, the payment, your wallet address and the amount can be seen by anyone on the blockchain, and nobody (including us) can remove or edit them.

International transfers

Cloudflare runs servers in many countries, so your data may be processed outside the country where you live. By using the Arcade you accept this.

How long we keep it

Sign-in attempt records are deleted after about an hour. Moon Mission run replay data (the tap log of each run) is deleted after 90 days; the score and result stay. Player, score and run records (including a saved wallet address) are kept for as long as the Arcade and its leaderboards run, or until you ask us to delete them.

Security

We use reasonable measures to protect your data (for example, we hash IP addresses and device keys and never store X access tokens), but no website or database is 100% secure, and we cannot guarantee security.

Your choices and requests

• You can play as a guest without signing in. For weekly periods starting November 8, 2026, Arcade rewards require the same verified X account connected in both games and a separate explicit agreement to each game’s current Terms of Service and acknowledgement of its Privacy Policy. Guest or manually named scores do not qualify for those combined rewards. Earlier Coin Rush weekly periods retain their announced eligibility rules. X sign-in verifies identity only; it does not accept these documents.
• To ask what data we hold about you, or to have it corrected or deleted, send us a DM on X (@GoodBotBadMemes) from the account you played with, so we can confirm it is you. We will answer within a reasonable time. We may keep a minimal record (for example a banned handle) to prevent abuse. Posts already published on X or Telegram, and blockchain records, are outside our control.
• You can remove X access any time in your X settings under Connected apps.

Kids

The Arcade is not for children under 13, and we do not knowingly collect data from them. If we learn we have, we will delete it. If you think a child under 13 has used the Arcade, contact us and we will delete their data.

Changes and contact

We may change this policy. The effective date at the top shows the latest version, and reward eligibility under a revised policy requires separate explicit acceptance of its current versions. Questions or requests: DM @GoodBotBadMemes on X.