Privacy notice
What Blotto Cup holds about you, why, how long, and what you can ask us to do about it. It is short because we hold very little: no name, no date of birth, no documents, no phone number and no address.
Last updated 2026-09-19.
Who holds your data
The entity named below is the controller of the data described in this notice. Where a value reads “not yet set”, the operating entity does not exist yet.
The operating entity is not yet incorporated, so the entries below that name the controller read “not yet set”. No real-money tournament runs until they are filled in.
- Controller
- not yet set
- Company number
- not yet set
- Registered address
- not yet set
- Address for data requests
- not yet set
What we hold
Everything we hold is tied to a wallet address rather than to a person: we never ask for your name, and nothing in this list identifies you unless your address does.
Your wallet address
It is how the program knows whose entry, whose prize and whose refund. It is on the chain, in the operator’s own records of the chain, and in the published results.
How long: Permanently. It is on a public blockchain and in published results; nobody can remove it, the operator included.
Your email address, where there is one at all
We hold one only where you asked for the single message that tells you a tournament has finished. Otherwise the sign-in provider holds any email and our own stores never see one.
How long: Until the message is sent. We delete it in the same statement that records the send.
A location verdict when an entry is authorised
To apply the published territory rules. Your address is sent to the location provider; we keep the verdict and two octets of the network address, never the whole of it.
How long: The verdict rides with the entry authorisation. The full address is held in memory for 15 minutes so a second entry does not cost a second lookup, and is never written to a column or a log line.
Your confirmation of age and of these terms, and its signature
The program requires a recorded confirmation at the current terms version before it will authorise an entry.
How long: While the address can still enter. It is the evidence that the confirmation was given.
Your encrypted entry
Your seven battles, a random salt, how long you spent on each battle, and a marker derived for that tournament from your device. All of it is encrypted on your device before you pay, and no battle in the tournament can be read, by us or by anyone else, until the tournament closes.
How long: See the retention section. Nothing in the product serves it to anyone: the read interface has no route that returns an encrypted entry, before or after the reveal.
Detection reports
The five published signals, computed over every tournament, naming the addresses a signal fired on. Seen by the operator and by nobody else.
How long: See the retention section.
Decisions, and complaints
A decision about a flagged entry, with the criterion cited, in an append-only record. A complaint, with what you wrote and whether your wallet signed it.
How long: A decision is permanent by design: it is the record the operator can be checked against. A complaint: see the retention section.
- We run no analytics and no error-tracking script of any kind. Nothing on these pages reports your behaviour to anyone.
- The random salt that goes into your entry’s fingerprint is discarded by your own browser the moment the fingerprint is computed.
What we never hold
We do not ask for, and have nowhere to put, any of the following.
- Your name.
- Your date of birth. You confirm you are over eighteen; we do not record when you were born.
- Identity documents of any kind. There is no identity check at entry and none at payment.
- Your phone number.
- Your postal address.
- Your full network address in any durable record. Two octets survive, in logs and in the record a sanctions refusal leaves.
What becomes public, permanently, when you enter
This is the most important thing in this notice, and it is said here rather than in the section about deleting things.
When a tournament closes, we publish its full results to permanent storage. That published file carries, for every entry in the tournament: the seven battles as they were played, the salt that was sealed with them, the player’s wallet address, the rank, and the amount paid. It is the file anyone can use to recompute the whole result and check it against what the program committed to — that is why it exists, and it is what makes the outcome checkable rather than a matter of trusting us.
It cannot be edited and it cannot be deleted by anyone, including the operator. If that is not acceptable to you, do not enter.
Two things are deliberately kept out of it: how long you spent on each battle, and the marker derived from your device. Those reach the operator’s own detection process and are published nowhere.
Why the device marker is different for every tournament
One of the five integrity signals looks for the same device behind more than one entry in a single tournament. For that, a marker is derived from your device and sealed with your entry.
It is derived freshly for each tournament, so the marker in one tournament cannot be matched against the marker in another. Your entries cannot be linked across tournaments, by anyone, the operator included — the signal works inside one tournament, which is the only place it needs to.
Why we hold it, and on what basis
Three reasons cover everything in this notice.
- To do what you have paid for — authorise your entry, run the tournament, score it and pay the prize. That is the agreement these terms record.
- Because the law requires it. Screening every address against published sanctions lists, and keeping the record of a refusal, is an obligation rather than a choice.
- Because the competition has to be fair to the other players. The five integrity signals and the decisions taken on them exist so that a tournament cannot be won by running several entries from one hand. That is a legitimate interest of ours and of every honest entrant.
Decisions about you, and who takes them
Detection profiles entries: it computes the five published signals over a whole tournament and reports which entries a signal fired on. A decision that follows can withhold a prize, which is a decision with a real effect on you.
No decision to withhold a prize is taken by software alone. The detection process flags nothing at all — it reports, and a person decides, against the criteria published on the rules page, and the decision and the criterion cited are recorded.
If no decision is taken within 12 hours, the flag is cleared and the prize is paid; after 7 days anyone at all can release a held prize to the player it belongs to, without our involvement.
You may challenge a decision through our complaints route, and a person will answer it. That is not a formality: it is the point of having a route at all.
How long we keep it
Two of these are enforced by code. The rest are policy, applied by hand until the code that enforces them is built — said plainly, because a period nobody enforces is not a protection.
- Your full network address: 15 minutes, in memory, then gone. Enforced by code.
- An email address given for a tournament-finished message: we delete it in the same statement that records the send. Enforced by code.
- Your encrypted entry, and the detection report for its tournament: until that tournament’s challenge window has closed and every decision on it is final. Policy.
- Your confirmation of age and terms: while your address can still enter. Policy.
- The record of a sanctions refusal: the period the obligation requires, which counsel will set. Policy, and not yet a number that can honestly be published as one.
- A complaint and what you wrote in it: answered within 30 days, then kept for a reasonable period afterwards so the answer can be shown. Policy.
- A decision about a flagged entry: permanently. It is the record that lets anyone check the decision against the criterion cited, and removing it would remove your protection along with the operator’s.
These periods are our published policy. Except for the location cache, they are not yet enforced by code: nothing in the system deletes anything automatically, and until that is built each period is a rule we apply by hand.
What you can ask us to do
You can ask us for a copy of what we hold about your address, to correct it if it is wrong, to object to our holding it, or to erase it. You may challenge a decision through our complaints route in the same way, and a person will answer.
One limit is real and is stated rather than glossed: what is on the blockchain, and what is in a published results file, cannot be erased by anyone — not by you, not by the operator, not by a court order, because no mechanism exists that could do it. The records are held by every copy of the network and by permanent storage. What we can erase is what we hold off the chain, and we will.
An erasure request does not take back an entry you have made or a result that has been published, and it does not affect a prize you are owed.
How to reach us
Every route in this notice is the same one: the complaints page, linked from the foot of every page of this site. A person reads what arrives, and for anything that asks for an outcome to be changed your wallet signs the request, which is what proves it is yours.