URA privacy policy

Summary

URA does not ask for your name, email, phone or ID. The game works with your wallet address. We use no ads and no tracking (analytics).

What we keep on the server

• Your wallet address (a public blockchain address).
• Your game records: tap count, total URA earned, amount waiting to be withdrawn, lucky prizes.
• Your nickname if you choose one; the inviting address if you came through an invite; the Nimiq address you link for Garura Hive (Garura Hive can look up which wallets are linked to it).
• A session token (valid 24 hours, kept only in server memory).

What we do not keep

• Your IP address is not logged: the URA server’s access log is off; to prevent abuse the IP is kept only in memory in a one-minute rate-limit counter.
• Your private key or recovery phrase never reaches our server.

What is public

• The leaderboard shows your nickname (or shortened address) and tap count.
• Withdrawals are public on the Polygon blockchain and cannot be deleted.

On your device

Your session and language choice are kept in your browser’s local storage. If you used the game’s old built-in wallet, its key is also stored only on your device and is never sent to us.

Third parties

• Polygon RPC providers (to read balances and transactions; your wallet address is sent).
• Your wallet (Heylogram Wallet, MetaMask, etc.) follows its own privacy policy.

Deleting data

You can ask for your game record on the server to be deleted at ura@heylogram.com. Unwithdrawn URA in a deleted record is lost; on-chain transactions cannot be deleted.