Privacy Policy

Who controls the information

One Arena, Inc. (“One Arena,” “we,” “us,” or “our”) operates One Arena and is the controller of personal information covered by this policy. Contact privacy@onearena.xyz for privacy questions and requests. Product and transaction support is available at support@onearena.xyz.

This policy applies to One Arena websites, the Seeker application, games, pack-opening experiences, rewards, and related services that link to it. Independent wallets, blockchains, marketplaces, card custodians, and linked services have their own privacy practices.

Information we collect

• Wallet and profile information: public wallet address, wallet provider, public profile name, preferences, equipped items, and signatures or signed messages used to verify wallet control.
• Transaction and product information: transaction signatures, pack purchases and outcomes, supported cards, sellbacks, game entries and results, rewards, balances, referrals, recovery state, and related reconciliation records.
• Device and network information: IP address, request time, browser and device details, user agent, language, referring page, security events, diagnostics, and server access logs.
• Local application information: necessary browser storage for wallet selection and authorization state, locale, audio and interface preferences, pending transaction recovery, referral attribution, legal-policy acceptance, locally hidden profile names, and session continuity.
• Profile-name safety information: a reporter wallet, target public wallet, reported public profile name, bounded report reason, wallet-control signature, report status, and moderation timestamps.
• Support and voluntary information: messages, attachments, wallet address, transaction details, and other information you choose to provide through support, feedback, promotional, or business interactions.

Sources of information

We receive information directly from you and your device, from the wallet you choose to connect, from public Solana records, and from providers used to supply card inventory, metadata, RPC access, storage, security, hosting, and support.

One Arena never needs or requests your seed phrase or private key. Do not send wallet secrets through Support or any One Arena form.

Why we use information

• Provide and personalize profiles, collections, purchases, games, rewards, referrals, recovery, and support.
• Build, verify, reconcile, and display transactions without treating an uncertain network result as authority to charge or act again.
• Prevent duplicate payments, enforce limits, investigate fraud, abuse, or profile-name reports, secure the service, and protect users and platform integrity.
• Maintain, debug, evaluate, and improve reliability, compatibility, accessibility, and performance.
• Comply with law, sanctions, tax or accounting duties, lawful requests, and enforceable agreements, and establish or defend legal claims.

Legal bases where required

Where a law requires a legal basis, we process information as needed to perform our agreement with you, comply with legal obligations, protect vital interests where applicable, and pursue legitimate interests such as transaction reconciliation, security, fraud prevention, service operation, support, and improvement. We rely on consent where a law specifically requires it, and you may withdraw that consent for future processing.

Public blockchain information

Wallet addresses, transaction signatures, token and card ownership, program interactions, and other blockchain activity can be public. Information written to Solana is maintained by a decentralized network and cannot be deleted or changed by One Arena. Avoid placing personal information in public transaction fields.

Public blockchain information may be copied, indexed, and used by third parties independently of One Arena. A request to delete One Arena profile data does not erase blockchain records or information held independently by others.

Providers and disclosures

We disclose information as needed to providers that host, secure, store, support, or deliver One Arena. Current categories include Vercel hosting and request infrastructure, Supabase data services, Helius Solana RPC and asset data, Namecheap email, wallet and Mobile Wallet Adapter providers, and content-delivery or storage services used for card and application media.

Collector Crypt provides card inventory, metadata, custody, sellback, redemption, and fulfillment services. Solana, wallet applications, marketplaces, Arweave or other storage networks, and linked services process information independently under their own policies.

Solana Mobile operates the dApp Store as an independent service. We may provide Solana Mobile with application activity or transaction information it requests under the dApp Store Developer Agreement so it can operate, secure, display, and improve the dApp Store and related device features. Solana Mobile handles that information under its own privacy policy.

Providers acting for One Arena must be subject to binding data-protection terms consistent with these commitments, applicable law, and the Solana Mobile Publisher Policy. Independent services remain responsible for their own practices.

We may disclose information to comply with law or lawful process, protect rights and safety, investigate fraud or abuse, enforce agreements, complete a corporate transaction with appropriate safeguards, or act with your direction or consent.

No sale or targeted advertising

One Arena does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. One Arena does not send marketing email or text messages. If these practices change, this policy and any required choices will be updated before the change applies.

The public Seeker release keeps copied analytics event collection disabled. Necessary hosting, security, transaction, and support records are not advertising analytics.

Browser storage and cookies

One Arena uses local storage, session storage, and similar device storage that is necessary for wallet selection and authorization, language and interface preferences, referral attribution, transaction recovery, legal-policy acceptance, locally hidden profile names, and session continuity. The Seeker release does not use advertising cookies.

You can clear browser storage through your browser or device, but doing so may disconnect your wallet, remove preferences, or erase local recovery context. Clearing local data does not reverse a blockchain transaction or delete server or blockchain records.

Retention

We keep information for the shortest period reasonably necessary for the purpose collected. The period varies based on account activity, transaction and recovery needs, fraud and security risk, support history, legal requirements, and the need to establish or defend claims.

Eligible off-chain profile information is targeted for deletion within seven calendar days after wallet-control verification. Transaction, settlement, security, fraud-prevention, legal, and deletion-verification records may be retained when deletion would compromise reconciliation, safety, legal compliance, or the rights of others. Public blockchain records are permanent outside One Arena’s control.

Security

We use administrative, technical, and organizational safeguards designed to protect service information, including access controls, encrypted transport, scoped service credentials, capability restrictions, and transaction reconciliation. No online service, blockchain, or wallet system can guarantee absolute security.

Protect your device and wallet, review every signature request, and report suspected compromise promptly. One Arena will never ask for your seed phrase or private key.

International processing

One Arena is based in the United States, and information may be processed in the United States and other countries where providers operate. Those countries may have different privacy laws. Where required, we use an approved transfer mechanism or other legally recognized safeguard.

Your rights and choices

Depending on where you live, you may have rights to know, access, correct, delete, or obtain a copy of eligible personal information, and to object to or restrict certain processing. You may disconnect your wallet and change available settings at any time. We will not unlawfully discriminate against you for exercising a privacy right.

Email privacy@onearena.xyz with the type of request and the public wallet address involved. Do not send a seed phrase or private key. We may require a wallet signature or other proportionate proof of control before acting. Authorized agents must provide legally sufficient authority. If we deny a request, you may reply with the subject “Privacy appeal” and explain why you believe the decision should be reconsidered.

Account and data deletion

For account deletion, email support@onearena.xyz with the subject “Account deletion request.” After wallet-control verification, we target deletion of eligible off-chain profile information within seven calendar days and will explain any information that must be retained.

Deletion may make recovery, history, rewards, or support more difficult. It does not reverse completed transactions, recover transferred assets, delete public blockchain records, or require an independent provider to delete information it controls.

Age restriction

One Arena is intended only for people aged 21 or older and is not directed to children. If you believe a person under 21 provided personal information, contact privacy@onearena.xyz so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the service, providers, or law changes. Material changes will be identified by a revised effective date and, where required, additional notice.

Email privacy@onearena.xyz for privacy questions or requests, support@onearena.xyz for product and transaction support, and legal@onearena.xyz for legal notices.