Privacy notice | NyFTee

Account information

We collect your account name and email, password hashes for email sign-in, verification status, connected sign-in identifiers, wallet addresses, adult-entry confirmation and agreement records. We receive profile information you authorize X, Discord, Google, Facebook or a wallet provider to share, such as an identifier, display name or email. Google sign-in uses its verified account identifier and email; it does not request your profile name or permission to publish content. We do not request wallet private keys or recovery phrases. A matching provider email alone does not merge accounts. Optional Facebook sign-in uses Meta’s verified app-scoped account identifier and an email when Meta supplies one. We request basic account and email access, not friends, photos or posting permission. Provider access credentials are used transiently for verification and are not retained. You choose your public game screen name separately and verify your game email. You can unlink Facebook from Account and request account data deletion through Privacy & support; required reward and anti-duplication evidence is retained under this policy. Instagram sharing does not connect an Instagram account to NyFTee.

Gameplay and purchases

We store progress, stars, scores, submitted actions, run timestamps, friend-match participation and activity, cosmetics and assistance purchases. We also store verified XP receipts, seasonal mission progress and claims, helper grants and use, equipped cosmetics and your chosen public player name, avatar and earned title. Your public screen name is separate from your sign-in and account name and must be unique under our normalized comparison. New players choose it during registration. Returning players without a safe, unique chosen name receive a provisional gamertag and are prompted to choose one; we do not publish a provider or account name as their default. Your player card displays your public player name, avatar, earned title, rank, lifetime XP, completed-puzzle count, milestone achievements and equipped cosmetics to participants in friend challenges. It does not disclose your email, wallet addresses or token balances. Reward records include helper checkpoints, applicable policy versions, result finalization times and reasons, verification decisions, awards, withdrawal destinations and transaction signatures. These records resume games, resolve results, deliver items, prevent duplicate spending and reconcile rewards. Account exports include these new records; account closure removes editable preferences while preserving required purchase and reward evidence. Chess records include accepted move histories, clocks, opponents, matchmaking ratings, placement and season results, owned and equipped chess cosmetics, quotes, entry reservations, settlements and per-game rating receipts. Opponents see your public screen name, rank and equipped cosmetics, not your sign-in name, email or token balance. These records support game recovery, result verification, account connections and financial reconciliation.

Connected accounts and optional X verification

When you choose to connect accounts, we verify control and retain the account relationship, review and security history to provide one player profile without duplicating rewards. To verify a win post, we use authorized read access to check its author, creation time, text and win link. X sign-in and Link X disclose and request posting and offline access so you can authorize once and share later victories after reviewing the exact text. Each post requires your explicit Share action. Posting permission does not authorize private messages, follows or silent publication. Access and refresh credentials are encrypted on the server and never returned to the game client. We use the refresh credential to renew expired access while your X connection remains authorized. Disconnecting X or closing your account removes these active credentials; you can also revoke authorization through X. X may require reconnection if its authorization becomes invalid. Older links may need a one-time permission update. We retain the reviewed caption, request identifier, publication status, post identifier and verification evidence to recover interrupted requests without posting twice and to prevent duplicate claims. Your shared post is public according to your X settings. Public level leaderboards display your chosen screen name or provisional gamertag and score, not your email or withdrawal address. For the X welcome bonus, we read checkmark status and type. We retain first-seen X identifiers, original account associations, enrollment timestamps and awarded checkmark evidence to prevent duplicate registrations, including after disconnection or deletion. These records are included in account exports and handled through Privacy & support. Facebook and Instagram victory shares carry a signed public victory link and your reusable friend invitation. The shared image includes the invitation. Posting takes place through the sharing option you explicitly choose and the social platform controls its audience and navigation. NyFTee does not read or verify Facebook or Instagram posts. Opening a composer, exporting an image or dismissing a share sheet is not proof of publication.

Support and security

We process contact information and text submitted to Support, request status and responses. Sessions, authentication attempts, device or browser request information, IP addresses and rate-limit or audit records operate and protect the service. Keep passwords, recovery phrases, government identifiers and unrelated sensitive information out of support messages.

Why we use information

We use information to provide gameplay, save progress, authenticate you, deliver purchases, verify results and process withdrawals. Security records help detect abuse and unauthorized access; support records help answer requests and disputes. Where data-protection law requires a legal basis, we rely on providing the requested service, legitimate interests in a safe and reliable game, legal obligations, or consent for optional analytics.

What other players see

Players in a friend challenge can see your display name, score, live board and match activity. Share an invitation code only with intended players. Your email and withdrawal wallet are not displayed to opponents as part of a match. Public blockchain records are separate from the match display.

Providers and disclosure

Providers support hosting, database storage, transactional email, authentication, Solana network access and encrypted backups. The application integrates Vercel hosting and optional analytics, database infrastructure and Resend email delivery. Identity and wallet providers receive information needed for the sign-in or transaction you initiate. We also disclose information when legally required, to address fraud or security incidents, or in a lawful business transfer with appropriate protections. We do not sell personal information or use it for cross-site targeted advertising.

Device storage and optional analytics

Browser or application storage holds preferences, the private first-puzzle resume proof, adult-entry state and sign-in continuity. Anonymous trial records expire after seven days; completed results saved to an account become retained gameplay evidence. Clearing storage can prevent you from resuming or claiming an anonymous trial or sign you out. Optional Vercel traffic and performance analytics run only after you choose Allow analytics. They measure permitted game-page visits, selected feature events, browser/device characteristics and loading performance. Account, rewards, support and operations routes are excluded; custom events do not contain message text, wallet addresses or account identifiers. Change Analytics preferences in the footer. Global Privacy Control and Do Not Track disable optional analytics. Required network, authentication and security processing continues.

Wallets and public records

Solana withdrawals publish addresses, token amounts and transaction information. Network operators and explorers can retain or display those records, and others may associate an address with you. We cannot erase or change a finalized blockchain transaction. External wallets and exchanges apply their own privacy practices.

Retention

Account and progress information is retained while the account is in use. Deletion removes eligible data or proceeds through reviewed removal when financial or other retained records exist. Reward, purchase and withdrawal ledgers are retained to prevent duplicate claims and preserve financial integrity. Security, support and dispute records are retained for their purpose and applicable legal obligations. Encrypted backups can retain earlier records until replaced or removed under the backup process. Deletion does not erase financial audit records or blockchain history. Retained records from earlier NyFTee services remain protected and do not reactivate those services.

Your choices and rights

Use Privacy & support to download account information or request access, correction, deletion or other applicable privacy rights. Depending on your location, rights can include portability, objection, restriction, withdrawal of consent, appeal or a complaint to a data-protection authority. We verify ownership before disclosing or changing information. An authorized representative can contact the privacy address with evidence of authority. We respond under applicable deadlines and exceptions and do not penalize the exercise of protected rights. Declining analytics does not stop gameplay.

International processing and security

The operator is based in the United States. Providers can process information in other countries with different laws. Applicable legal safeguards for international transfers continue to apply. Access controls, authentication safeguards, encryption and backups help protect information, but no service can guarantee absolute security. Report unauthorized access through Support and secure your sign-in provider and wallet.

Adults, updates and contact

The game is for adults 18 and older. We do not knowingly accept underage accounts; report one through Support for investigation. This notice is dated to identify changes. Material updates are communicated in the game or through account contact details. Contact the privacy address below or use the request form.

Friend invitations

We retain unique friend codes, the account relationship created at registration, the accepted offer version, verified completion of levels 1 through 10, and qualification and award records. Your inviter can see your public screen name, the number of qualifying levels completed and referral reward status; they do not receive your email, sign-in identifiers, wallet address or token balances. A referral link stores its code on your device for up to 30 days so you can complete registration. You can clear or change it before registering. A website code does not automatically transfer through installing the Android app; the install page shows a code you can enter there. We retain hashed sign-in identity evidence and relevant account relationships to prevent self-referrals and recreated-account claims. Required anti-duplication and financial records survive disconnection or account closure; use Privacy & support for reviewed removal requests.

Wallet trading records

When you use optional wallet trading, we process your connected public wallet address, token balances, quote details, transaction bytes and signatures, transaction status and account-linked trade history to prepare your reviewed trade, prevent duplicate submissions and recover interrupted requests. Public blockchain data is queried through the configured Solana RPC service. Transactions approved by you are public on Solana. Retained trade evidence is included in account exports; deletion requests involving retained financial or pending transaction evidence are handled through Privacy & support. We never ask for or store your wallet private key or recovery phrase.

NOGA membership verification

When you voluntarily register, we bind a short-lived signed wallet-control message to your authenticated player and linked Discord identity. We store encrypted membership wallet addresses, proofs and Discord mapping, check finalized official NOGA balances and current market prices, and use Discord to add or remove the membership role. Eligibility requires at least US$3 estimated current NOGA value. Membership proofs authorize no transactions and do not change reward withdrawal wallets. Wallet signatures prove control, not unique personhood. Existing sign-in records keep their current security and retention rules. Inactive membership mappings are removed after30days only after role removal is confirmed; earlier encrypted backups follow the backup retention process. Solana holdings are public. Discord administrators and permitted operators can access restricted channels; recipients can copy content. Use Privacy & support for access, correction or removal requests.

Community assistants

Buffer is the automated public community assistant on Telegram and Discord. Addressed questions, recent exchanges and maintained public project information may be sent to OpenAI to compose replies. Separately, posts in the official Telegram group, captions, supported images and limited replied-to text may be sent to OpenAI for spam review even without mentioning Buffer. Content may be shared with OpenAI for service and model improvement; we do not promise zero provider retention. Spam review does not add group posts or images to conversational memory or retain image text. Bounded fingerprints, action records and content-free diagnostics support moderation, with human moderators available for incorrect removals. AI cannot access private game records or grant membership. Raw queued question and delivery data are cleared after processing or expiry. Limited event identifiers, public bot replies and operational records support delivery recovery and abuse controls. Telegram and Discord apply their own retention policies. Keep passwords, private wallet keys, recovery phrases and private support details out of bot conversations.

Naval games and shared friends

We store Sunken Treasure room membership, private ship placements and seed, accepted actions, server clocks, results, naval XP, equipment, purchase entitlements, entry reservations, immutable settlements and reward verification records. During play, each captain receives only their own full fleet and permitted public combat information; private scans belong to the captain who performed them. Other players see public player names and gameplay state, not email addresses, wallet addresses or balances. Account exports include your own participation, results and financial evidence, excluding opponents’ hidden deployments and private game seeds. Shared social records include friendship requests and decisions, accepted relationships, blocks and game invitations with their status and expiry. Blocking and relationship changes take effect across supported games. These records support requested contact, game recovery, abuse prevention and connected-account reconciliation. Eligible account closure removes editable social preferences and relationships while required gameplay and financial evidence is retained. Active games or unsettled entries must resolve before connecting accounts.

Holder wallet checks

For the optional Holder Play Bonus, we record your selected wallet relationship, message-signature proof, wallet revisions, exact official token, pre-game valuation and minimum quantity, timestamps and chain references, token-balance history needed to verify the 24-hour holding period and gameplay, post-win balance evidence, eligibility decisions and separate bonus records. These checks are read-only and do not authorize spending or transfers. Public blockchain balances are linked privately to your player account for verification; other players and community bots do not receive that link. Changing the holder wallet does not change the withdrawal destination. Necessary proof and financial records are retained to prevent duplicate claims, settle saved obligations and investigate disputes, including after disconnection. Never provide a private key or recovery phrase.

NyFTee Original LLC

11 E. Orange Grove Rd., Tucson, Arizona 85704, United States

Legal: nyfteeoriginal@gmail.com

Privacy: nyfteeoriginal@gmail.com

Support: nyfteeoriginal@gmail.com

Contact the company / submit a request