astro

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how astro ("we", "us", "our") collects, stores, and uses information when you use the Platform. astro is a blockchain-native application: by design, much of your activity is publicly recorded on-chain and cannot be made private.

1. Information We Collect

1.1 Blockchain data (public by design)

All bets, cashouts, vault deposits, and withdrawals are recorded on the Unichain blockchain. This data is immutable, public, and permanently visible to anyone. It includes your wallet address, bet amounts, cashout multipliers, round IDs, and vault share transactions. This transparency is a core feature of the provably fair system — it cannot be disabled.

1.2 Profile data (user-provided)

  • Username (pseudo): 4–25 characters, chosen by you. Publicly visible to other players. You can change it once every 7 days.
  • Avatar: Optional profile image. Publicly visible. Avatar images are stored via Pinata (IPFS).
  • XP, levels, and achievements: Derived from your gameplay activity. Publicly visible on leaderboards.

1.3 Chat messages

In-game chat messages are stored in our database alongside your wallet address and username. Chat is public — all players in the game can see your messages in real time.

1.4 Optional linked accounts (via Privy)

If you choose to link an email address or social account through Privy for wallet recovery purposes, Privy collects and stores that data subject to their own privacy policy. astro does not require email or social login — this is entirely optional.

1.5 Technical data

We may log standard server-side technical data (timestamps, request metadata) for security and reliability purposes. We do not collect device fingerprints, advertising IDs, or persistent tracking cookies.

2. What We Do NOT Collect

  • Government-issued ID or KYC documents.
  • Physical address or phone number.
  • Payment card or bank account information.
  • Email address (unless you voluntarily link one via Privy).
  • Browsing history or cross-site tracking data.

3. How We Use Your Data

  • To operate the game, process bets, and calculate payouts.
  • To display leaderboards, player profiles, and round history.
  • To broadcast live cashouts and game events via WebSocket to all connected players.
  • To detect and prevent fraud, abuse, or prohibited conduct.
  • To maintain the integrity and security of the Platform.

We do not sell, rent, or trade your personal data to third parties.

4. Data Sharing and Third Parties

We work with the following third-party providers to operate the Platform:

  • Privy — Wallet authentication and optional social/email account linking. Subject to Privy's Privacy Policy.
  • QuickNode — Blockchain RPC provider used to read and write on-chain data.
  • The Graph — Fallback indexer for on-chain event data.
  • Pinata — IPFS pinning service used to store player avatar images. Subject to Pinata's Privacy Policy.

We do not share your data with advertising networks, data brokers, or analytics platforms.

5. Data Storage and Retention

  • PostgreSQL: Stores bet history, round results, chat messages, and player profiles. Retained as long as your account exists and for a reasonable period after inactivity.
  • Redis: Short-lived cache for real-time game state. Not used for persistent personal data storage.
  • On-chain: Immutable — cannot be deleted by us or you.

Deposits and withdrawals use USDC (ERC-20). All related transactions are permanently visible on-chain.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete the personal data we hold about you (excluding on-chain data, which is immutable). To make a data request, contact us at contact@bustabit.com.

Note: because astro uses a wallet-only authentication model, we may ask you to sign a message with your wallet to verify ownership before processing a data request.

7. Cookies

astro may use strictly necessary session cookies or local storage to maintain your wallet connection state. We do not use tracking, advertising, or analytics cookies.

8. Children's Privacy

The Platform is not directed at anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has used the Platform, contact us at contact@bustabit.com.

9. Governing Law

This Privacy Policy is governed by the laws of Curaçao. Any disputes regarding data privacy shall be handled under the applicable regulations of Curaçao.

10. Changes to This Policy

We may update this Privacy Policy at any time. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the Platform after changes constitutes acceptance of the revised Policy.

11. Contact

For privacy-related questions or data requests, contact us at contact@bustabit.com.