Privacy Policy

Last Updated: 03/01/2026

1. Data Controller

Identity: SolArena Operations Team (Decentralized Entity / White Label Admin). Contact: Accessible via the official Admin Wallet signature or support channels listed on the Platform.

2. Types of Data We Collect

We are committed to data minimization principles (GDPR Article 5). We collect:

• Wallet Addresses (Public Keys): When you connect your wallet, we process your public address. Under GDPR, this is considered Pseudonymous Personal Data.
• On-Chain Activity: Records of IDs minted, battles fought, and marketplace transactions. This data is public by nature of the blockchain.
• Technical Data/Telemetry: IP addresses (strictly for Geo-blocking and security logs), browser User-Agent, and session timestamps.
• KYC Data (If applicable): For high-volume users (>1000 EUR), we collect Name, DOB, Address, and ID Number. This data is encrypted and stored off-chain.

3. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds (GDPR Article 6):

• Contractual Necessity: identifying your account (wallet) to allow you to play the game and access your assets.
• Legal Obligation: complying with Anti-Money Laundering (AMLD6) directives and Sanctions laws (Geo-blocking).
• Legitimate Interest: maintaining network security, preventing botting/cheating, and analyzing platform usage.

4. Blockchain & Data Immutability

CRITICAL NOTICE: Data written to the Solana blockchain (e.g., transaction history, token ownership) is immutable and permanent.

• We cannot delete or modify data stored on-chain.
• By using the Platform, you acknowledge that your wallet address and transaction history will be permanently publicly visible.

5. Data Retention

• Off-chain Personal Data (e.g., logs): Retained for 12 months for security audit purposes, then anonymized.
• KYC Data: Retained for 5 years as required by AML regulations.
• On-chain Data: Retained indefinitely by the blockchain network.

6. Your Rights

Subject to the limitations of blockchain technology, you have the right to:

• Access: Request a copy of the personal data we hold about you (off-chain).
• Rectification: Correct inaccurate off-chain data.
• Erasure ("Right to be Forgotten"): Request deletion of your off-chain data (e.g., IP logs, KYC records). This does NOT apply to immutable on-chain data.
• Restriction/Objection: Object to processing based on legitimate interests.

To exercise these rights, please contact the Data Controller.

7. Cookies

We use strictly necessary cookies to manage your session and compliance status (e.g., remembering you accepted this policy). We do not use third-party tracking pixels without consent.