Privacy Policy

This policy covers the website mintlands.world, the Mintlands game played in your browser, and the Mintlands Android app, which opens the same website. "We" and "us" means the team that runs Mintlands.

In short: you can play without an account, an email address or a wallet. We keep what the game needs to run: your guest account, your characters and their progress, and your chat for 30 days. If you link a wallet we keep its public address, never its keys. We show no ads, use no analytics or tracking tools, and never sell your data.

We never ask for your name, email address, phone number, date of birth or payment card. What we do keep:

• Guest account and sessions: When you first press Play, our server creates a guest account and gives your browser a random session key. We store only a scrambled (hashed) copy of that key, when the session was created and last used, and the user agent your browser reports (its name and version).
• Characters and progress: The names and looks you choose, and what happens as you play, including where you are in the world, health, gold, items and equipment, skills and XP, quests, achievements, places discovered, towns visited and favorited, deliveries, help given to town projects, friends, guilds, citizenships, notifications and time played.
• Chat: What you write in chat, with your character name, the channel and the time, including whispers to another player. An automatic filter masks blocked words and common scam requests (such as asking for a seed phrase), and marks the messages it masked.
• Linked wallet: If you connect a Solana wallet, we store its public address and when it was linked. To prove the wallet is yours, it signs a short sign-in message: we keep that message until it expires five minutes later, and we check the signature without keeping it. Signing sends no transaction and costs nothing.
• Trades, foundings, votes and prizes: When you trade a town's coin, found a town, vote as a citizen or receive a prize, we record the wallet address, the amounts, the transaction signature and the account or character involved. For a town you found (or prepare to found) we also keep what you entered: the coin's name and ticker, the town's name, description, story, image, emblem, place on the map, fee split and links.
• Public blockchain data: We read public Solana data about coins and wallets, such as trades, holdings and how long a wallet has held a coin. For a linked wallet this decides citizenship and who can vote.
• IP address: Our servers see your IP address with each request. The game server uses it only to limit how many requests one address can send (rate limiting), in counters that last a few minutes. We do not write IP addresses into our own logs, which record errors and service events. Our hosting provider keeps its own request logs, which can include IP addresses, for a limited time.

We never ask for, receive or store your seed phrase or private key. Anyone who asks you for them is trying to steal from you.

Mintlands sets no cookies of its own and uses no advertising or analytics cookies.

The site keeps a few things in your browser's local storage: your session key, the character you last played, your game settings (sound, graphics, camera and tips), your Getting started checklist and which tips and hints you have already seen, whether you have opened the founding form yet (for a guide marker in the game), the wallet you last connected, and a founding in progress so it can continue after a reload. The draft of the founding form, including its image, stays in session storage for that tab only.

Clearing your site data removes all of it. A guest account without a linked wallet then cannot be reached again, although its characters stay on our server until they are deleted (see Keeping and deleting data).

• To run the game you asked for: save your characters and progress, and sign you back in.
• To let a linked wallet sign you in on another browser or device.
• To show the public parts of the world: player pages, rankings, town pages and chat.
• To work out citizenship, votes and prize eligibility, and to pay prizes to linked wallets.
• To keep the game fair and safe: rate limits, chat filtering, and finding cheating, bots and scams.
• To fix bugs and keep the service running.
• To meet legal duties.

We do not use your data for advertising, we do not build marketing profiles, and we never sell or rent your data to anyone.

Where the law asks for a reason: we use your data to provide the game you asked for, because we have a legitimate interest in keeping it fair, safe and working, and where the law requires it.

• Your character's name, look, levels, skills, achievements, towns founded and whether it is online, in the world, on its player page and in rankings.
• Your chat messages, to the players in that channel.
• For a founder: the founding wallet address, on the town page and the founder page.
• Prize payouts and treasury spends, listed publicly with the wallet and the transaction.
• What you enter when you found a town. It also goes into the coin's public metadata on Solana, where it stays for good.

Everything you do with a wallet on Solana (trades, foundings, transfers, holdings) is public on the blockchain and can be seen by anyone, with or without Mintlands.

We use a small number of service providers, only to run Mintlands:

• Railway: hosts the website, the game server and the background worker, and runs our database (and, when used, a store for rate limit counters).
• Helius: is our Solana RPC provider: our servers read the blockchain and send transactions through it. The few blockchain requests the website makes for you (for example checking that a founding transaction confirmed) pass through our server to it. It sees wallet addresses and transactions, which are public anyway.
• Pinata: when IPFS storage is turned on, stores a founded town's image and coin metadata on IPFS, where they are public and permanent.
• Jupiter price API: our server asks it for the price of SOL in US dollars. It receives nothing about you.

Some parts of Mintlands are run by others, under their own terms and privacy policies: pump.fun and the Solana network (every coin and trade is a Solana transaction that uses pump.fun's programs), your wallet app, the block explorers and social links we point to, and, for the Android app, Google Play and Chrome. Some coin images load from the address their creator chose, such as an IPFS gateway.

We may share data when the law requires it, or when needed to protect players or the service from fraud or abuse.

Our providers may process data in countries other than yours, including the United States.

• Chat messages are deleted after 30 days.
• A session ends after 30 days without use and is then deleted.
• Sign-in messages are deleted shortly after they expire, five minutes after they are made.
• Trade quotes are deleted about an hour after they expire.
• Rate limit counters last a few minutes.
• Your account, characters, progress and linked wallet are kept while the game runs, until you ask us to delete them.
• Records of towns, trades, treasury spends and prize payouts are kept as part of the world's public history, and to account for treasury funds.

To ask for a copy of your data, a correction, or deletion of your account and characters, contact @MintlandsMMO on X (opens in a new tab). Tell us your character names and, if you linked one, the wallet address. We may ask you to prove the account is yours, for example by signing a message with the linked wallet.

Nobody, including us, can delete anything from the Solana blockchain or from IPFS.

Depending on where you live (for example the EU, the UK or California), the law may give you further rights over your data, such as to object to how we use it, and to complain to your data protection authority.

Mintlands is for people aged 18 and over, because it involves real crypto tokens and trading. We do not knowingly collect data from anyone under 18. If you believe someone under 18 is using Mintlands, contact us and we will delete their account.

Session keys are stored only in hashed form, town treasury keys are encrypted, and access to our systems is limited to the people who run Mintlands. No system is perfectly secure, so keep your wallet and your device safe too.

When we change this policy we post the new version here and change the date at the top. Important changes are also announced on @MintlandsMMO on X (opens in a new tab). See also the Terms of Use.

Questions about privacy, or a request about your data: contact @MintlandsMMO on X (opens in a new tab).