This Policy explains what personal information BulldogGX collects, why, who we share it with, how long we keep it, and the choices you have. It applies to our websites, apps and support channels. It does not make public blockchain transactions private, and it does not cover the independent practices of game publishers, console networks, Discord, or funding providers, each of which has its own policy.
1. Information we collect
Account and profile. Email address or social sign-in identifier (through Privy), username, avatar, console platform, gamertag or PSN ID, declared state of residence, and your acceptance records for these Terms and notices.
Eligibility and identity. Date of birth or age confirmation; declared and inferred location; and, where required for a payout, a limit, a compliance review or by law, identity and taxpayer information collected through a designated verification or payment provider. Where a provider collects a document directly, we normally receive only a status or reference, not the document.
Wallet and transactions. Your wallet address, network, USDC balance, entry fees, settlements, refunds, transaction hashes and contract events from the Base network. Where a funding or cash-out provider is used, the transaction reference, status and any risk or eligibility result the provider returns.
Competitions. Matches created and joined, opponents, settings, results declared and confirmed, disputes, reviewer decisions, connect-flow timestamps and evidence you submit.
Verification recordings. Short silent video recordings you make in the app when declaring, confirming or disputing a result, with the match ID, usernames and claimed result stamped into the frames. These may show your hands and, depending on how you hold the camera, your face and surroundings. Section 4 covers these in detail.
Device and usage. IP address, browser and device type, operating system, app version, session identifiers, timestamps, request and error logs, page and feature use, and notification interactions. If you enable push notifications, a push subscription token.
Support and communications. Messages you send us and records of our responses.
We do not collect precise device location, biometric identifiers or templates, or payment card numbers.
2. How we use information
- To create and secure your account, sign you in, and provide the embedded wallet.
- To run competitions: match you with opponents, display the connect flow, record declarations, run challenge windows, settle results on-chain and pay winners.
- To verify age, location and eligibility, and to apply entry-fee and activity limits.
- To review disputes and enforce the Competition Rules and Fair Play Policy, including detecting cheating, collusion, multiple accounts and abuse.
- To prevent fraud, money laundering and payment abuse, screen against sanctions lists, and meet legal, tax and reporting obligations.
- To send account, security, transaction and competition notifications, including push notifications when your opponent declares a result and reminders before a deadline closes.
- To provide support, resolve complaints, and investigate incidents.
- To measure and improve the Service (aggregate analytics such as activation, retention and play times).
- To send marketing where you have opted in or where law permits, with an opt-out in every message.
Automated processing. Gesture detection during a verification recording runs on your device to advance the prompts. On-chain settlement of an unchallenged result is automated by the escrow contract under the Competition Rules. Dispute decisions are made by a human reviewer. Where we use automated flags for fraud or abuse, a flag alone does not decide an outcome; you may contest any decision through support and a human will review it.
3. Legal bases (where applicable)
Where a law requires a legal basis, we rely on performance of our contract with you (running the Service and competitions), our legitimate interests (security, fraud prevention, dispute review, service improvement), compliance with legal obligations (tax, sanctions, lawful requests), and your consent where we ask for it (verification recordings, marketing, optional device permissions). You can withdraw consent at any time without affecting processing already carried out.
4. Verification recordings
Verification recordings exist to settle disputes. They are captured by you, in the app, only when you choose to declare, confirm or dispute a result, after a notice and an unchecked consent control that includes a written release.
- What is captured: silent video from your camera with an overlay of the match ID, usernames, claimed result and gesture prompts stamped into the frames. No audio.
- On-device processing: hand-landmark detection to confirm each gesture runs in your browser. Landmark coordinates are used only to advance the prompts and are never transmitted or stored.
- What is uploaded: the finished recording, to private storage operated for us by Supabase, accessible only to BulldogGX reviewers through time-limited links, and only when the match is disputed or under a fraud or compliance review.
- What is not done: we do not create or store a face or hand template, do not match recordings against any identity database, do not use them to infer emotion or traits, and do not use them for advertising or to train general-purpose AI.
- Retention: recordings for a match that is settled without dispute are deleted 30 days after settlement. Recordings for a disputed match are deleted 90 days after the dispute is closed. Recordings placed under a legal hold or needed for an open fraud or compliance case are kept until that matter closes and then deleted. The Data Retention Schedule sets these periods.
If you decline to record, you cannot declare or dispute a result through the app; the Competition Rules explain the consequence for the match. Contact support if you need an alternative method for accessibility reasons.
5. Who we share information with
Service providers acting for us. Privy (authentication and embedded wallets), ZeroDev and Pimlico (smart-account and gas sponsorship infrastructure), Supabase (database, storage and realtime backend), Vercel (hosting), push-notification delivery, email delivery, and any identity-verification, sanctions-screening, blockchain-analytics or analytics provider we engage. Providers may use information only to provide their service to us and are bound by contract to protect it.
Funding and cash-out providers. If you use a card, bank or exchange integration, that provider processes your information under its own terms and policy, may verify your identity itself, and exchanges transaction status, references and risk results with us.
Other players. Your username, avatar, record, rankings and public competition statistics are visible to other users. Your gamertag is shared only with a confirmed opponent so you can connect on the console network. Match history is not shown on public profiles. Your opponent can see the result you declared.
Commissioners and organizers. The information needed to run an event you have joined (username, gamertag for connection, results). Organizers do not receive payment, identity or contact information.
Legal and safety. Regulators, law enforcement, courts and professional advisers where reasonably necessary to comply with law, respond to a valid legal request, enforce our agreements, investigate fraud or abuse, or protect the rights, property or safety of BulldogGX, our users or the public.
Business transfers. If BULLDOGGX LLC is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction subject to this Policy.
We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use advertising pixels or upload audience lists.
6. Public blockchain data
Entry fees, settlements and refunds are recorded on the Base network, a public blockchain. Anyone can see transactions associated with your wallet address. BulldogGX cannot delete or alter blockchain records. We do not publish the link between your username and your wallet address, but a determined observer may be able to infer it from public activity.
7. Cookies and device storage
We use cookies, local storage and similar technology for sign-in sessions, security, wallet operation, remembering preferences and measuring performance. Installing the app stores application files on your device. We do not use third-party advertising cookies. We honor Global Privacy Control signals where the law of your location requires it. Clearing storage signs you out but does not close your account or delete server records.
8. Notifications and marketing
Push notifications are controlled by your device or browser settings. If you turn them off you will not be alerted when an opponent declares a result; check the app for deadlines. Marketing emails include an unsubscribe link; opting out does not stop transactional or security messages.
9. Retention
We keep personal information only as long as needed for the purposes above and then delete or de-identify it. Our Data Retention Schedule sets a period for each category. In summary: account and profile data for the life of the account and 12 months after closure; competition and transaction records for 5 years to meet tax, dispute and financial recordkeeping needs; verification recordings for 30 or 90 days as described in section 4; technical logs for 90 days; identity and compliance records for 5 years after the relationship ends; and sanctions screening records for 10 years, as federal sanctions recordkeeping rules require. Backups are retained on a rolling cycle and are deleted in the ordinary course. Public blockchain records are permanent and outside our control.
10. Security
We protect information with access controls, encrypted transmission, private storage with time-limited access links, role-based access to administrative tools, multi-signature control of contract administration, logging and provider due diligence, as described in our Information Security Policy. No system is perfectly secure. If you suspect a security problem, email support@bulldoggx.com immediately; never include a password or recovery phrase.
11. Your rights and choices
You can review and update your profile in the app. You may contact us at any time to access, correct, receive a copy of, or delete your personal information, to restrict certain processing, or to object to processing based on legitimate interests. Depending on where you live, some of these rights are guaranteed by law and others we provide voluntarily; we honor requests from all users on the same terms.
We verify requests in proportion to their sensitivity, normally by confirming control of your account email, and never by asking for a recovery phrase. We respond within 45 days or the shorter period required by law, and will explain any extension or denial. You may appeal a denial by replying with the subject "Privacy appeal". We do not discriminate against anyone for exercising a privacy right.
Deletion requires closing your account. We must retain some records after deletion where law or an open matter requires it (for example, transaction records, tax records, sanctions records, and evidence in a dispute or investigation); we will tell you which. Deletion does not affect blockchain records or your wallet, which you control independently.
Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, Florida and other states with privacy laws have the rights described above to the extent those laws apply to BulldogGX. We do not sell personal information or use it for targeted advertising or profiling with legal effects, so no opt-out is required for those purposes.
12. Children
The Service is for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that a child has created an account we will close it and delete the information, retaining only what is needed to prevent re-registration. If you believe a child has provided information, contact support@bulldoggx.com.
13. Where information is processed
BulldogGX operates from the United States and our providers process information in the United States and other countries where they operate. If we offer the Service outside the United States we will put in place any transfer safeguard the law of that location requires before doing so.
14. Changes and contact
We will post any updated Policy with a new version and date and notify you of material changes in the app or by email before they take effect. Where a change would allow a materially new use of information already collected, we will ask for your consent first.
Questions and requests: support@bulldoggx.com (subject "Privacy").