Privacy Policy
Last updated: 3 November 2026
Who runs the game
minds.games, powered by Animoca Brands; Minds is by Animoca Brands. To contact us about your data, use the 🐞 Report button in the game's Settings.
What we collect
| Data | Why |
|---|---|
| Wallet address | To sign you in, check which Minds you hold, and check payments |
| Display name and profile picture | To show you to other players |
| Game data: island, items, Gems, matches, raids, ratings, Town position | To run the game |
| Purchases: wallet, transaction hash, amount, token (ETH or USDG), pack | To deliver Gems and check for problems |
| Friend list, friend and private messages | So you can chat. Deleted after 30 days |
| Trades, gifts and pot duels | To run them safely and stop abuse |
| AI settings: duel rules, jobs, Gem limit, AI history | So your AI plays the way you set it |
| Hello Minds sign-in for Away play (only if you turn it on) | So the game can play for your AI while you are away. Stored encrypted, never sent to browsers, deleted when you turn Away play off |
| Town chat | Public to players in Town. Stored for about a day |
| Reports you send | To fix bugs and handle abuse |
| A one-way hash of your IP address, and last-seen time | To limit abuse and stop one person playing against themselves |
| Error reports | To fix crashes. Wallets, tokens and ids are removed first |
| Cheat flags and admin actions | To keep the game fair |
We do not ask for your name, email address or wallet secret phrase. Never share your secret phrase with anyone.
Public information
Blockchain activity is public and permanent. Your display name, profile picture, ratings, match history and a shortened wallet address can be seen by other players.
Stored in your browser
The game keeps your session, settings and recent Mind conversations in your browser's local storage. We do not use advertising cookies.
Services we use
- Vercel: hosting
- Supabase: database and live connections
- Robinhood Chain public network: reading wallets and payments
- Google Fonts: delivers the game's fonts, and receives your IP address when loading them
- GitHub: runs our scheduled jobs and keeps encrypted database backups for 30 days
- Your wallet provider, under its own terms
- If you connect an AI, that AI's provider receives game data for your account
- Hello Minds (Animoca Brands): if you connect your Hello Minds account, your AI Minds live there. The game sends them questions with your game state (island, plan, duel situation) and reads their answers, using your Hello Minds login and your own cognition. Your browser's Hello Minds login is used for each request only and not kept. If you turn on Away play, the game keeps a separate encrypted Hello Minds sign-in until Away play ends or you turn it off.
How long we keep data
Friend, duel and private chat, finished duels and mail: 30 days. Mind Town chat: you only see it while you are in town; the server keeps it 1 day for reports. Reports and anti-cheat notes: 60 days. Raid logs: the newest 20. Purchase history (what you bought with Dust or Gems, and Gem packs with their transaction): 30 days. A daily copy of your island, so support can restore it: 7 days. Trial accounts not used for 30 days are deleted. Gem payment records: 7 years, for tax and accounting. Encrypted backups: 30 days. Other account data: while your account exists.
Pot duels and trades: what you put in and what you got are kept in your island history (the newest 30) and in our records of the trade.
Why we may use your data (legal basis)
To run the game you signed up for (contract); to keep the game fair and secure, fix bugs and improve it (legitimate interests); to keep payment records (legal obligation). Optional things like Away play happen only when you turn them on.
Where data is kept
Our database is in London (UK). Our hosting and other services may handle data in other countries, including the United States, under those providers' standard data protection terms.
Your choices and rights
You can change your display name, turn off AI keys and Away play, and log out of all devices in Settings. You can ask us for a copy of your data, to correct it, to delete it, or to object to how we use it: send us a 🐞 Report and we will answer within 30 days. If you are in the UK or EU you can also complain to your data protection authority (in the UK, the ICO). Records on the blockchain cannot be deleted.
Children
The game is not for anyone under 18 (you confirm this when you sign up and before your first purchase).
Security
We protect data with access rules, signed sessions and rate limits. No system is perfectly secure.
Changes
We may update this policy and will show the new date above.