Privacy

No account, no password, no email address, no name, no phone number. No analytics, no advertising, no third-party trackers, no fingerprinting, no session recording. Nothing is sold or shared for marketing, because nothing is gathered to sell.

Every fight is a public record on Solana: the wallet addresses involved, the stocks, the stakes, the prices that settled it and the result. That is how anyone can check a fight without trusting us, and it is the point of the whole thing.

It also means those records are not ours to change. We do not hold them, we cannot edit them, and we cannot delete them for you. Anyone can read them at any time, now and in years to come.

Connecting an X account is optional. It puts a handle next to your record on the leaderboard, and that is all it does.

We use X's own sign-in. We ask for permission to read your public profile and nothing else: we never post, never read your messages, never follow or unfollow anyone, and never see your password. We do not request offline access, so X gives us no refresh token and we cannot act as you later.

At the moment you connect we read two things, your numeric X account id and your handle. The access token that let us read them is discarded immediately and never stored.

Your handle and your numeric X id are then written onto the Solana blockchain, beside your wallet address, in a transaction you sign yourself. That record is public and permanent. Unlinking closes the account and returns its rent, but the transaction that created it stays in the chain's history for good. If you would rather not have an X account tied publicly to a wallet, do not connect one.

Two, both short-lived, both only during the few seconds you are connecting an X account. One carries the one-time security values that stop somebody else's sign-in being swapped for yours. The other carries the handle X just confirmed, from the moment you come back to the moment you sign. Both expire within minutes and neither is readable by scripts in the page.

There are no analytics cookies, because there are no analytics.

On test clusters the site can make you a guest wallet so you can play without installing an extension. Its key is generated in your browser and kept in your browser's local storage. It never reaches our servers and we never see it. Clearing site data destroys it, and anything it holds.

The site runs on Vercel, which keeps ordinary request logs for a short time as part of serving pages: IP address, the page asked for, a timestamp, a browser string. That is Vercel's standard operation, we use those logs only to keep the site working, and we do not join them to wallets or handles.

Loading a page or settling a fight means talking to a Solana node, to Pyth, and to a market data source for prices. Connecting an account means talking to X. Those services see the requests we make on your behalf, and their own privacy policies govern what they do with them.

Stonk Wars is not for anyone under 18, and we do not knowingly collect anything from children.

If this changes, the date at the top changes with it. The how it works page describes what the program does and where prices come from, in more detail than belongs here.