WATCHFIRE

Privacy Policy

Last updated 18 October 2026

01 Overview

This policy covers watchfire.one, app.watchfire.one, the testnet game at app.dev.watchfire.one, related sites, and the Watchfire app for iOS and Android (the "Service"). We collect what the game needs to run, plus cookieless statistics on how the site is used. We do not sell your data or track you across the web or across apps.

02 What we collect

  • Sign-in data: the account ID from Google, Apple, Discord, or Farcaster, plus the name, email address, and profile picture the provider shares.
  • Your public wallet address. If you sign in with a social account, we create a game wallet for you and store its private key encrypted. If you lose access to your sign-in, we can decrypt that key to help you recover your village. Every such access is logged.
  • Your village and in-game activity.
  • If you buy bFIRE in the app: the product, price, currency, store, and transaction ID. Apple or Google takes the payment. We never see your card or bank details.
  • Your push subscription or device push token, and your notification settings, if you turn notifications on. On Android, Google's Firebase library also registers the app for push when it starts.
  • Session and security logs, and cookieless aggregate site statistics. No advertising profiles.

03 Google user data

Sign in with Google requests only the openid, email, and profile scopes. We receive your Google account ID, email address, name, and profile picture, and use them to sign you in, show the linked account in your settings, and restore your game wallet on a new device. We do not access any other Google data.

We do not sell Google user data, use it for advertising, or use it to train AI models. We share it only with the hosting providers listed below, or when the law requires it.

Watchfire's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

04 How we use it

To sign you in, run the game, credit the bFIRE you buy and handle refunds, send the notifications you enable, stop cheating and abuse, and see how the site is used.

05 Storage and sharing

Data is stored with Convex, our backend provider. The Service is hosted on Vercel and Cloudflare, and site statistics come from Cloudflare. Browser push services, Apple Push Notification service, and Google Firebase Cloud Messaging deliver notifications you enable. RevenueCat processes in-app purchases and receives your account ID and the purchase details. OtaKit delivers app updates and receives the app version and your device's IP address. The blockchain nodes the game reads from receive your wallet address and IP address: Conduit for Ronin and Saigon, Base and dRPC for Base and Base Sepolia, and Robinhood for the Robinhood Chain testnet. Goldsky serves the public game activity feed and receives your wallet address and IP address. Alerts about purchases, refunds, and account holds, with your wallet address and village name, go to private staff channels on Discord. So do app crash reports, which carry only the error text and your platform, with wallet addresses and emails removed, and a notice of each new sign-up with only its platform and sign-in method. Our public Discord activity feed posts village names, short wallet addresses, and the Discord name of players who link Discord. If you link Discord, we give you roles in our Discord server that match your village. On the web, WalletConnect connects outside wallets, Neynar looks up Farcaster profiles for wallet addresses, and the Buy FIRE window gets the RON price from CoinGecko, which receives your IP address. Farcaster profile pictures load from imagedelivery.net, wrpcd.net, and i.imgur.com, which see your IP address. In the Base App, Base delivers the notifications you enable and receives your wallet address and the alert text. In Farcaster, Farcaster delivers them and receives the alert text and a notification token. We share data with no one else except when the law requires it.

06 Blockchain data

Wallet addresses and game actions are recorded on the blockchains the game runs on, Ronin and Base, and on its testnets, where anyone can see them and nobody can delete them. The node providers named in section 05 see your wallet address and IP address, and we look up public ENS names for wallet addresses through public Ethereum nodes. We never put your name, email, or sign-in data on-chain.

07 Retention and deletion

We keep your data while your account exists. Unlinking a sign-in provider in settings detaches it from your account. You can delete your account yourself in settings. That removes your account, its sign-ins and passkeys, your alerts and settings, and, for a social account, the wallet key we hold for you, right away. It first unlinks any sign-in that was moved between your account and a wallet account, so that sign-in returns to its own village. If you signed in with a crypto wallet, the wallet stays yours, because we never hold its key. Your village stays on the blockchain, because it is soulbound and on-chain records cannot be erased (see section 06). Without a copy of the wallet key, nobody can reach that village again. We keep records of in-app purchases and refunds after deletion, because we need them for accounting, refunds, and fraud checks. We also keep a one-way code made from your sign-in account with those records and with free-gas limits, so refund holds and limits still apply if you sign up again with the same account. Removing the app from your phone does not delete your account. To access, export, or delete your data, including data from Google, email legal@watchfire.one from your linked address; we delete within 30 days, except the purchase and refund records and the one-way code described above. You can revoke access anytime in your Google account permissions.

08 Children

The Service is not directed to children under the age of digital consent in their jurisdiction, and we do not knowingly collect their data.

09 Changes

We may update this policy from time to time. The date above shows the latest version.

10 Contact

Questions about privacy? Reach us at legal@watchfire.one.