Privacy Policy
Rexie stores very little, and this page says exactly what. It is a placeholder until counsel has reviewed it, but every fact below is true of the running service.
What we store
One functional cookie, __Host-dino_id (dino_id on a plain-http deployment). It holds a random identifier signed by our server, no personal data, and it keeps your runs together. It lasts one year.
A salted hash of your network prefix, the first part of your IP address. We use it only to rate-limit abuse; it cannot be turned back into an address.
For each run that counts: what you pressed, the score, the time survived and whether it counted.
Bot check
When the Cloudflare Turnstile bot check is switched on, Cloudflare processes the request data needed to run it under its own privacy policy. It is off by default.
What we do not do
No ads, no third-party analytics, no tracking pixels, no sale of data.
How long we keep it
Run records are kept for {{REPLAY_RETENTION}}. Clearing your cookies gives your device a fresh identity; your account and its scores are unaffected.
Sign-in and your wallet address
Signing in is a signature, not an account you hand over. You prove you control a wallet address by signing a short message we generate; the signature proves control and nothing else. It is not a transaction, it moves no funds, and it grants no permission to spend.
We store the address itself, which chain you proved it on, when we first saw it and when you last signed in. That is the whole record. We never receive a private key, a seed phrase or a password, and there is no third party in this: no sign-in provider, no social account and no profile of any kind is read, requested or stored.
Your address is public information on the blockchain it belongs to, and a shortened form of it is shown next to your scores on the leaderboard. A signed-in run is linked to that address; a run played without signing in is not, and is never moved onto an address later.
Contact
Privacy questions go to {{CONTACT_EMAIL}}.