Privacy

In short

• The Android app works fully offline. Progress is saved on your device.
• When it can reach our server, the app creates an anonymous account (a random ID) so your progress, rating and figures are kept and ranked.
• A Solana wallet address is only stored if you choose to link a wallet on the website. We never see or store private keys or seed phrases.
• We do not sell data, show ads, or share data with advertisers or data brokers.

Stored on your device

• Your local profile: progress, stars, times, streak, shards, figures, and settings (sound, haptics, motion, reduced motion).
• A session token for the anonymous account, when online.
• On the website, your browser keeps the sign-in session and a short list of purchases that were paid but not yet confirmed, so they can be finished if the tab closes.

Uninstalling the app or clearing its storage deletes this data.

Stored on our server (when online)

• Account: a random user ID created by anonymous sign-in (Supabase Auth). No email or password.
• Profile: a handle and display name (generated for you; you can change them), avatar figure, rating, shards, streak and counts of completed dailies.
• Game results: level stars and best times, daily and boss results, and a compact record of your answers and moves. The server replays these to check results are genuine.
• Social and shop: friend requests, figures you own, marketplace listings, and a ledger of shard and SOL transactions.
• Wallet (website, optional): the public address you link by signing a one-time message, and the signatures of purchases you make.

What other players can see

Your handle, display name, avatar figure, rating and streak appear on leaderboards and your profile page. Friends see each other in their friend lists. Anything you do on the Solana blockchain (wallet address, transactions, figures minted as NFTs) is public by nature of the blockchain and cannot be deleted by us.

Technical data

• Like any web service, our server sees your IP address and basic request details. We use them only to deliver the service, rate-limit abuse and keep it secure. Rate limits are kept in memory, not in a database.
• The app requests two Android permissions: Internet (online play) and Vibrate (haptics). The motion sensor used for the parallax effect is read on the device and never sent anywhere.
• Unity Analytics, Unity crash reporting, Unity Ads and all other third-party analytics are switched off.

Who processes data for us

• Our hosting provider, which runs the server and database (Supabase, self-hosted or hosted).
• When you use wallet features on the website: your wallet app and a Solana RPC provider, which receive your transactions and IP address under their own privacy policies. NFTs are minted on Solana devnet, a test network with no real money.

Keeping and deleting data

We keep account data while the account exists. To delete your online account and everything linked to it, contact us at the support contact listed on our app store page with your player handle (shown on the ME tab). We delete it within 30 days. Local data is removed by uninstalling the app. Data already written to the blockchain cannot be removed.

You can also ask us for a copy of your data or to correct it, and you can complain to your local data protection authority.

Children

Odlet is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has an account, contact us and we will delete it.

Changes and contact

If this policy changes, we update this page and the date above. Questions: the support contact listed on our app store page. See also the terms of use.