Privacy policy

What we collect

From Telegram, when you sign in. Telegram passes us a signed block of information about your account: your Telegram user ID, your first name, your username if you have one, your language setting, and whether you have Telegram Premium. We verify that this block genuinely came from Telegram before we use it.

Your profile photo. We ask Telegram’s Bot API for your current profile picture and store an identifier for it so we can show your face in the app. We do not copy the image into our own storage; it is fetched from Telegram each time it is displayed.

Your timezone. Read from your device when you first sign in, because a day in VOLTA ends at midnight where you are rather than at one fixed hour for everybody. It is fixed at sign-up and can be changed only occasionally.

Sessions and devices. A record of each sign-in: a short description of the device type, and when it was last seen. This is what lets you see and sign out of your own sessions.

How you play. Your node, its condition and history, your daily shifts, experience points and what you spent them on, rewarded ads you watched, sponsored tasks you completed, and who invited you or was invited by you.

Wallet activity. A Solana deposit address derived for your account, any withdrawal address you supply, and a record of deposits, withdrawals and balances. If you set a passcode, we store only a salted hash of it and never the code itself.

What we do not collect

We do not ask for or receive your email address, phone number, legal name, contacts, or precise location. We do not use advertising identifiers such as IDFA or GAID, because a Telegram Mini App cannot read them and we do not attempt to. We do not sell personal information.

Who else sees it

Telegram authenticates you and delivers messages from our bot. Your use of Telegram is governed by their privacy policy.

Advertising partners. Rewarded ads are served by Adsgram and Monetag. When an ad plays, those networks receive the information their software needs to serve and count it, and may set their own identifiers. They are separate companies with their own privacy policies.

Infrastructure. The application runs on Railway, the database is hosted by Supabase, and Solana network access is provided by Helius. These providers process data on our behalf in order to run the service.

The Solana blockchain. Deposits and withdrawals are transactions on a public blockchain. They are visible to anyone, permanent, and cannot be deleted by us or by you.

How long we keep it

Account and gameplay records are kept while your account exists, and financial records for as long as we are required to retain them. Sessions expire on their own. Because blockchain transactions are permanent, deleting your account does not remove them from Solana.

Your choices

You can sign out of any device from within the app. You can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete your account, by writing to [contact address, to be completed]. Deleting an account removes your gameplay records; it does not reverse blockchain transactions already made, and it forfeits any unwithdrawn balance.

Children

VOLTA is not intended for anyone under 13, and Telegram’s own terms require the same minimum age. We do not knowingly collect information from children.

Changes

If this policy changes materially we will update the date at the top and, where the change affects how your information is used, say so in the app.

Contact

[contact address and, if applicable, legal entity and registered address, to be completed]