Privacy policy

“We” and “us” in this policy mean skech, the team that runs this website, the web app and the Android app.

skech is a Bitcoin price prediction game. You draw where you think Bitcoin’s price goes over the next few seconds. The parts of your line the price passes through pay a set multiple. The parts it misses, you lose what you put on them.

This policy covers this website (skech.trade), the web app (app.skech.trade) and the skech Android app.

• Your email address or phone number, if you sign in with Privy. On the web you can also sign in with a Google or Apple account. Privy holds these details. We can see them in Privy’s dashboard. They are not sent to our own servers.
• What you write to us, and the address or account you write from, if you email us or message us on Telegram.
• Your email address, if you joined our waitlist.

• Your wallet address. It is how skech knows you. Our servers, PostHog and Sentry know you by it, never by your email or phone number.
• Your balance, and every deposit, withdrawal and payout.
• Every piece of every line you draw: where it sits on the chart, what you put on it, and how it settled.

All of this is recorded on a public blockchain, Solana. Anyone can read it, and it stays there for good. We cannot change it or delete it.

Our servers also keep a running count for each address: how many transactions and pieces it has, and its last few transactions, so the app can show your history.

• Your IP address, when the app connects to our servers. We use it only to limit how many connections and requests one address can make. By design it is kept in memory and not written to disk. Our hosting providers’ logs may hold it for a short time.
• A drawing key, made and kept on your device so you can play without a prompt for every piece. On Android it is in the phone’s secure storage (the Android Keystore). On the web it is in your browser’s storage and cannot be read out of it. Only its public half leaves your device.
• Settings and practice balance, kept on your device.
• The camera, on Android, only if you scan a QR code for an address to withdraw to. The picture stays on your phone.

On the web only, we also collect how the app is used, through PostHog, and error reports, through Sentry. Both are described below.

The Android app has no analytics or crash reporting.

These companies process data for us, only to run skech:

• Privy (privy.io) runs sign-in. It holds your email or phone number and the key shares that secure your embedded wallet. We never see or hold your wallet’s private key. Privy may use Cloudflare to check that a sign-in is not a bot.
• PostHog, web app only, for product analytics: the screens you open, steps like signing in, depositing and withdrawing, each round’s result, how long you play, and how fast pages load. It also records sessions of the screen. Everything you type is masked in recordings, and so is the sign-in panel. Text that shows your email or phone number is left out.
• Sentry, web app and our servers, for error reports: what broke, the steps in the game that led to it, and, on the web, a recording of the last minute on screen before the error, masked the same way. Our servers send errors with no user details, cookies or request bodies.
• QuickNode and other blockchain RPC providers, which pass our requests, and on the web your browser’s, to the blockchain. They see the IP address that sends each request.
• Amazon Web Services, which hosts our game servers (in India).
• Vercel, which hosts this website and the web app.

Bitcoin’s price comes from Coinbase’s public feed. Nothing about you is sent to Coinbase.

• To run the game you asked for: sign you in, place your pieces, settle them, and move your money in and out.
• To keep it working and safe: limit abuse, find and fix errors, and spot fraud.
• To make it better: see which parts of the app are used and where people get stuck.
• To answer you, when you write to us.
• To meet the law, where it requires us to keep or share something.

Where a law asks for a legal basis, ours are: running our agreement with you (the terms), our legitimate interests in keeping skech secure and improving it, meeting legal obligations, and your consent where we ask for it.

We do not show ads. We do not sell your data.

• The service providers above, only to do their job for us.
• Anyone at all, for what is on the blockchain. That is how public blockchains work.
• Authorities, where the law requires it.
• A buyer of skech or its business, if that ever happens. This policy would still apply to your data.

• On the blockchain: forever. No one can delete it.
• Your Privy sign-in: until you ask us to delete your account.
• Our records tied to your address: until you ask us to delete them, or we stop running skech.
• Your IP address: only while the rate limit needs it, in memory. Hosting logs keep it for a short time.
• PostHog and Sentry data: for a limited period set by our plan with each, then deleted.
• Emails and messages: as long as we need them to help you.
• Anything the law requires us to keep, for as long as it requires.

• Your balance is held by the game’s smart contract, not by us.
• Withdrawals need your wallet’s signature. The drawing key on your device cannot withdraw.
• Everything between the app and our servers is encrypted in transit.
• We keep access to our servers and providers to the people who need it.

No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.

Depending on where you live, you can ask us to:

• show you the data we hold about you, and give you a copy;
• correct it;
• delete it;
• stop or limit using it, including for analytics.

Email team@skech.trade from the address or phone number you signed in with, and include your wallet address. We may need to check it is you. We reply within 30 days.

We cannot change or delete anything on the blockchain. To delete your account, follow the steps on Delete your account.

You can also complain to your local data protection authority.

skech is for people 18 and over only. We do not knowingly collect data from anyone younger. If we learn we have, we delete what we can.

Our providers process data in the United States, India and other countries, which may have different data protection laws from yours. Where the law requires it, we rely on safeguards such as standard contractual clauses.

When we change this policy, we update the date at the top. If a change matters, we also say so in the app or on this site before it takes effect.

Questions or requests: team@skech.trade.