RANDOZE
Play now

Privacy

What we keep, and why.

The short version: we collect what we need to run fair arcade duels: your email, your IP address and location, your wallet and your moves. We don't sell it. Email us to see it or delete it.

01Who we are

  • Randoze runs randoze.com and is responsible for your data (the "controller" under GDPR). Reach us at hi@randoze.com.
  • We don't sell your data, and we don't share it for advertising. There are no ad trackers on Randoze.

02What we collect

  • Account details: your email address and username. For retired automated accounts we retain the existing bio and API-key hash so owners can recover their wallet and account history. We do not create new automated accounts or API keys.
  • Your IP address and approximate location (country, region, city and network), which Cloudflare reads from each request to our servers. We keep your latest location on your account, and a record of where you were at sign-up, sign-in, paid-room joins, deposits, top-ups and withdrawals.
  • A random visitor id in your browser's localStorage, used to count visits and steps (for example page views and queue joins).
  • A session cookie (rd_session) that keeps you signed in. It is needed for the site to work.
  • Wallet data: your deposit address, the addresses you withdraw to, and your on-chain USDC transactions.
  • Verification data: partner applicant reference, verification status, birth date, residence country and state, and verification timestamps. Identity documents, selfies and full home addresses stay with the verification partner.
  • Game data: your matches, results, balances, and every move you make in a duel, which we use to decide the winner, check fair play and draw replays.
  • Analytics events: which pages you open and which steps you take, with your device type, country and referring site.
  • Anything you send us by email.

03Why we use it

  • To run duels: match you with opponents, decide results, pay winners and show your history and replays.
  • To prevent fraud and cheating: spot shared accounts, collusion, automated play and stolen funds.
  • To apply eligibility rules: paid entry checks your current location using Cloudflare's IP location. Withdrawals check verified identity, age and residence claims. Free play is available in every location.
  • To handle payments: credit deposits and top-ups, and send withdrawals.
  • To give support, answer your emails, and fix bugs.
  • Under GDPR our legal bases are: our contract with you (running your account and duels), our legitimate interests (security, fraud and cheat prevention, improving the site), and legal obligations (sanctions, payment and tax records).

04Who processes it

  • Cloudflare hosts Randoze and processes all of the above for us: servers, database, analytics, and the sign-in emails we send.
  • Payment partners, when you use them: for example an x402 client or wallet you pay with, and the Base network providers we use to read and send transactions.
  • When identity verification is available, Sumsub collects your identity documents, selfie and proof of home address directly. We send your account identifier and verified email to start that check. Activation depends on partner onboarding and validation.
  • When you buy USDC with MoonPay, we send MoonPay your deposit address, an account identifier and a hash of your IP address to secure the checkout. MoonPay collects payment and identity-verification details directly under its privacy policy.
  • The blockchain is public. Deposits, top-ups and withdrawals on Base, with their addresses and amounts, can be seen by anyone, and nobody (including us) can delete them.
  • We may disclose data when the law requires it, or to protect players and Randoze from fraud.

05How long we keep it

  • Account, match, move and payment records: while your account exists, and afterwards for as long as the law requires us to keep payment and fraud-prevention records.
  • Location records tied to account events are kept with those records. Per-request analytics are kept by Cloudflare for about three months.
  • Sign-in codes expire after 10 minutes. Server logs are kept for a short time, for debugging.

06Your rights

  • You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Email hi@randoze.com from the address on your account. We answer within 30 days.
  • When we delete an account we remove your email and personal details. We keep what the law or fraud prevention needs, such as payment records, and on-chain transactions can't be removed.
  • California (CCPA/CPRA): you have the right to know what we collect, to delete and correct it, and to opt out of the sale or sharing of your data. We don't sell or share it. We won't treat you differently for using these rights.
  • EU, EEA and UK (GDPR): you also have the right to data portability, to object to processing based on legitimate interests, and to complain to your data protection authority.

0718+ only

  • Randoze is for adults. We don't knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we close it and delete its data.

08Changes

  • When this policy changes, we update this page and its date. For important changes we also tell you on the site, and by email if we have yours.

Contact

Privacy questions and requests: hi@randoze.com. Include your username so we can find your account. The rules & terms cover everything else.

Last updated 8 October 2026.