RATPOOLPrivacy Policy
Last updated 21 October 2026
This policy explains what RatPool ("we", "us") collects when you use the RatPool app, the game at ratpool.xyz/play and this website, why, and what you can do about it.
The short version: we keep your rat, your game progress and your wallet address. We do not keep your email address, we do not sell anything about you, and we do not run advertising or tracking.
1. What we collect
| What | Why |
|---|---|
| Your wallet address | It is your account: it identifies you in pools, the store and the leaderboard. |
| Your rat's name and look | So other players see your rat, in matches and on the leaderboard. |
| Game progress: settings, weapons owned and equipped, skulls, match history, stats, which pools you have opened, whether you have seen the walkthrough | So your progress follows you to another device and is not lost. |
| Match and payout records: each pool's entries, finishing order, payouts and transaction signatures | To run and settle pools, show results and history, and resolve disputes. |
| Store purchases: item, amount and transaction | So what you bought is yours on every device, and never charged twice. |
| Invites: your invite code, and who joined with it | To pay invite rewards. |
| An identifier for your Google sign-in, checked during a pool | To make sure each seat in a pool belongs to a different person. It is not stored in our database; the match server keeps it only with the room's latest match. |
| Your IP address, briefly | To limit abuse and keep the servers stable. Where we store it for rate limits, it is stored only as a one-way scrambled code. |
| Gameplay signals during a match: positions, shots and hits | To play the match and check it for cheating. |
| Freeze reports: a count, with no name or account attached | To find and fix performance problems. |
| Emails you send to support | To answer you. |
Why we may use it. To give you the game you signed up for (our agreement with you), to keep it fair and secure for every player (our legitimate interest), and where the law requires.
Google sign-in. When you sign in, Google shares your name and email address with Privy, our sign-in and wallet provider, under Privy's own privacy policy. RatPool's database does not store your email address.
On your device. The game keeps your settings and progress in your device's storage so it starts quickly and remembers you. There are no advertising or tracking cookies.
2. What is public
Some things are public by design:
- The leaderboard and results show your rat's name, wallet address, skulls, matches played, finishing places and payouts.
- Store purchases: which weapons a wallet bought, for how much, and when.
- The Solana blockchain records every pool entry, payout, refund, transfer and store purchase, with the wallet addresses involved. Anyone can read it, and no one, including us, can change or delete it.
Your wallet address is not your name, but anything that links you to it (for example, sharing it publicly) links you to its history. Choose a rat name that does not identify you if you prefer not to be identified.
3. Who processes it
We use these services to run RatPool. Each handles only what its job needs:
- Privy: sign-in and your wallet's keys.
- Google: the sign-in itself.
- Supabase: our database.
- Vercel: the website, the game and its services.
- Cloudflare: the match servers, network protection and our support email.
- Solana RPC providers (including Helius): sending and reading blockchain transactions.
Our hosting providers also keep the usual short-lived access logs, such as IP addresses and the pages requested, to run and protect their services.
These providers may process data outside your country, including in the United States and the European Union. We do not sell or rent personal data, and we do not share it for advertising.
We may disclose information where the law requires it, or to protect players and RatPool against fraud and cheating.
4. How long we keep it
Your rat, progress and purchases are kept while you play. Match, payout and purchase records are kept as long as they are needed for history, disputes and our legal obligations. Data used only to run a match is replaced when that room's next match begins. Support emails are kept while the conversation is open and for a reasonable time after.
5. Your choices and rights
You can ask us to show you the data we hold about you, correct it, or delete it. Write to [email protected] from any address, and include your wallet address. We may ask you to prove the wallet is yours, for example by signing a message.
We will delete your rat, progress and invite code, and remove your name from the leaderboard. We cannot delete what is on the blockchain, and we keep the records we need for payouts, disputes and the law.
If you are in Nigeria, the Nigeria Data Protection Act 2023 gives you these rights, and you can complain to the Nigeria Data Protection Commission. If you are in the European Union or the United Kingdom, the GDPR gives you similar rights, and you can complain to your local data protection authority. We would like the chance to put things right first.
6. Children
RatPool is for players aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child is using RatPool, tell us and we will remove their data.
7. Security
Your wallet's keys are held by you through Privy, not by us. Our database is locked so that players can change only their own records, every request that changes your data must be signed by your wallet, and our code and escrow are reviewed for security. No system is perfectly secure; if a breach affects your data, we will tell you.
8. Changes
We will post any change here with its date, and tell you in the game about significant ones.
9. Contact
[email protected]. See also our terms of use.