Draft – pending legal review
Privacy
What Observed keeps, sends and makes public.
Written from the code, not from a template. Where something depends on a service we have not switched on yet, it says so.
Who is responsible
[CONTROLLER]
Contact for anything on this page: observedsol@gmail.com.
On your phone
The app keeps its data in the phone’s encrypted storage (Android Keystore, through
expo-secure-store). It is excluded from Android backup and is removed when you
uninstall the app. It holds:
- your sealed numbers, with the round, the time you sealed and the transaction signature;
- a random secret created on the phone, from which each round’s seal is derived;
- the session with your wallet app (an authorisation token and your wallet address), so you do not have to connect again each time;
- small settings: whether the first start was shown, notifications on or off, sound, which results you have already seen;
- a short diagnostics log of the app’s own steps. It leaves the phone only if you tap
Copy diagnostics, and it never contains keys, the secret, addresses or your number.
Notifications (“When results are ready”) are scheduled on the phone. The app asks for no push token and sends nothing to a push service.
There is no analytics, no crash reporting and no advertising code in the app.
What the app sends, and to whom
| To | What |
|---|---|
A Solana RPC node — today the public endpoint api.mainnet-beta.solana.com | Reads of public accounts (the game, rounds, your entry, your Genesis Token, your SOL balance) and the transactions you sign. The node’s operator sees your IP address, the time, and the accounts asked for, which include your wallet address. That holds for any Solana app. |
| Our RPC proxy, once it is switched on (Cloudflare Worker) | The same requests, passed on to an RPC provider. Your IP address is used only as the key of a rate limit (120 requests a minute); our code writes it to no log and no counter, and the counters keep only network, method and outcome. Cloudflare, which runs the proxy, keeps its own request logs under its own terms. |
| Your wallet app, on the phone (Mobile Wallet Adapter) | The app’s name and the transaction to sign. You approve every transaction in the wallet. |
| Our public file storage, if configured (Cloudflare R2) | Plain downloads of the round archive and the sponsor list. Cloudflare sees your IP address as with any download. |
The app loads no code over the air in the builds for players, and its fonts are inside the app.
What is public on Solana
A blockchain is public by design. Once you seal a card, this is readable by anyone, permanently:
- your wallet address, as the signer of each transaction;
- your Seeker Genesis Token (its mint address);
- that you sealed a card for a round, and when;
- your sealed card — encrypted until the opening at 12:00 Berlin;
- after the opening, your number, next to your wallet and Genesis Token;
- your player record on chain (misses and wins of the season), and whether you took a pot.
After each round our settling service also writes a public round file with every card’s number, Genesis Token, wallet and device mark — the same data, kept after the round’s accounts are closed. In the app, other players appear only as a device mark.
This website
The site is static and served by Cloudflare Pages. It sets no cookies, has no analytics and loads nothing from other sites: fonts and images are part of the page. To deliver it, Cloudflare processes your IP address and request data under its own terms. The live numbers come from a file next to the page, not from your wallet.
Your rights
Write to observedsol@gmail.com to ask what we hold about you, or to have it corrected or deleted. Data on your phone is deleted when you uninstall the app. Data on Solana cannot be deleted by us or by anyone.
Draft of 4 October 2026.