PRIVACY POLICY
Last updated 12 August 2026
This describes exactly what City of Stonks stores and sends, written from what the
software actually does rather than from a template. If something here stops being true,
it is a bug in this page.
We never ask you to connect a wallet, sign a message, or approve a transaction
to view a city. You paste a public address; we read public chain data about it.
There is nothing we could do with your funds even if we wanted to, because we never hold
a key or a signature.
What we store
- Wallet addresses you enter. A public address you paste is stored so a
city can remember its own history — how it has grown, which places it has visited, its
peak value.
- Game scores. If you play something here with an address set, the score
is stored against that address.
- A display name, only if you give one. Used solely to label you on the
leaderboard instead of a truncated address.
- Server logs. Requests are logged, and those log lines can include the
address that was looked up, for debugging and abuse handling.
- Pageview analytics. When you load a page we record the page, the site
that linked you here (the domain only), any campaign tag in the link, a broad device and
browser class, and the edge server that answered. This is measured on our own server and
stored in our own database — there is no third-party analytics script on this site, and
nothing about you is sent to an analytics company.
What we do not store
- No private keys, seed phrases or signatures. We never ask for them.
- No email address, name, or account. There is no sign-up.
- No advertising trackers, and no third-party analytics. No Google
Analytics, no Meta pixel, no ad network, no data broker. Nothing on this site reports to
anyone but us.
- No analytics cookie, and no tracking across days. Counting visitors
needs some way to tell one from another, so we hash your IP address together with a
secret that is thrown away and replaced every day. Only that hash is stored. It cannot
be turned back into your address, and because the secret changes at midnight, you are a
different value tomorrow — so nothing can be linked up into a profile over time.
- No IP address, and no user-agent string. Neither is written down.
The IP is hashed as described above and discarded; the browser string is reduced to
something like "mobile / chrome" before anything is stored.
- No full referring URL. We keep the domain that linked you here and
throw away the rest, because the rest of a link can contain someone else's information.
- No geolocation. Cities have weather and a time of day, but the place is
derived from the wallet address itself — it is a property of the city, not a measurement
of where you are. Your browser is never asked for your location.
Stored in your browser
Some things are kept locally on your device with localStorage and are never
sent to us: the last address you used, your personal high scores, and whether you muted
game audio. Clearing your browser storage removes them.
One cookie. While the site is behind its entry password, a single cookie
named cos_gate remembers that you got through, so you are not asked again on
every page. It holds nothing but a signed marker — no address, no identifier, nothing about
you — and it is not used for analytics or shared with anyone. It is the only cookie this
site sets.
The leaderboard is opt-in
Your address does not appear on any public board unless you choose to join, and you can
leave at any time from the visualizer. Scores are recorded whether or not you have joined;
opting in is what makes them publicly visible next to your address or chosen name.
Third parties we call
- Blockscout (
robinhoodchain.blockscout.com) — reads public
chain data for the address you enter.
- Robinhood Chain RPC — reads on-chain contract state.
- Open-Meteo — weather for the city's assigned location. It receives
coordinates derived from the address, never from you.
- Supabase — the database where the above is stored.
Each has its own privacy practices, which we do not control.
Public by nature
Blockchain addresses and their transactions are public and permanent by design. Anything
you choose to publish here — a display name against an address, a score on a board — is
similarly visible to anyone. Consider that before linking a name to an address you would
rather keep separate from your identity.
Removal
You can leave the leaderboard yourself at any time. To have a stored city record or its
scores deleted entirely, get in touch from an address you control and we will remove it.
What is already recorded on the blockchain itself is outside our control and cannot be
deleted by anyone.
Changes
If this changes, the date at the top changes with it.