This Privacy Policy is available in English. A Spanish version is provided below.
1. Information We Collect
Onlycoin Game collects the following information when you use our services:
- Email address — used for authentication, account creation, OTP verification, and communication
- Display name — the in-game name you choose for your profile
- Game progress data — coins, gems, energy, fuel, sOYC balance, owned cars, upgrade levels, skins, equipment, Battle Pass progress, daily wins, missions, mastery XP, and race statistics (wins, races, best times, ELO rating)
- Multiplayer and matchmaking data — lobby participation, race results, ELO ratings, ranking positions, and peer-to-peer race state synchronization
- Chat messages — messages you send in global or private in-game chat
- Friend connections — friend requests you send or accept
- Cryptocurrency wallet address (optional) — your MetaMask/BSC wallet address, only if you choose to connect it
- Transaction data — purchase records from Stripe (gem packages), historical marketplace records, garage upgrades, box openings, and withdrawal requests
- IP address (hashed) — used for fraud prevention, duplicate-account detection, and IP-based security
- Device and usage data — analytics events (e.g., button clicks, feature usage), session data, and technical logs
- Support ticket data — messages and information you provide when contacting support
2. How We Use Your Information
We use the collected information to:
- Provide, operate, and improve the game and all its features (campaign, multiplayer, garage, Battle Pass, Oil Rig, Speedrun, Swap)
- Authenticate your account and manage sessions (including auto-logout when the browser closes)
- Process in-app purchases securely via Stripe and credit virtual currency (gems) to your account
- Run the sOYC token economy: award staked-OYC rewards, convert sOYC to gems, and track seasonal sOYC earnings
- Calculate and update ELO rankings, seasonal leaderboards, and distribute prize pools (gems) to top-ranked players
- Matchmake players for ranked and friendly duels based on power score and ELO
- Synchronize multiplayer race state between players
- Display advertising through Google AdSense and Google Ads
- Prevent fraud, cheating, multi-account abuse, and enforce the terms of service
- Detect and ban duplicate IP addresses
- Communicate with you about updates, security alerts, and important changes
- Respond to support tickets
3. Advertising
Onlycoin Game may display advertising through Google AdSense and Google Ads. Google may use cookies and similar technologies to serve ads based on your visits to this and other websites.
You can opt out of personalized advertising by visiting Google Ads Settings.
4. In-App Purchases & Financial Features
The game offers optional in-app purchases processed by Stripe, a PCI-compliant payment provider. Available gem packages range from €1 to €100. We do not store your credit card information — all payment data is handled securely by Stripe.
Cryptocurrency integration (optional): The game integrates with the OYC token on the Binance Smart Chain (BSC). If you choose to connect your MetaMask wallet:
- We store only your wallet address (public key) to credit sOYC rewards
- We never request or store your private keys or seed phrases
- The sOYC you earn can be converted to in-game gems at the current exchange rate
- sOYC balances may fluctuate in value; we do not guarantee any minimum value
- Token values are fetched from external sources (PancakeSwap/BSC) and may change
- You are solely responsible for your wallet and any crypto-related transactions
5. Data Sharing
We do not sell your personal information. We may share data with the following third parties:
- Stripe — to process payments securely (payment details are handled by Stripe directly; we never see your card number)
- Google AdSense / Google Ads — to display and serve relevant advertisements
- Google reCAPTCHA — to protect against bots and automated abuse during registration
- Binance Smart Chain (BSC) — to read public wallet balances and token information (read-only; we never submit transactions on your behalf)
- Legal authorities — when required by law, court order, or to protect our rights and safety
6. Data Security
We implement technical and organizational security measures to protect your information against unauthorized access, loss, or disclosure:
- All data in transit is encrypted via SSL/TLS
- Passwords are hashed and never stored in plain text
- IP addresses are stored as hashes, not raw values
- Sensitive economy operations (balance changes, purchases, trades) are processed server-side with role-based access controls (RLS) to prevent client-side tampering
- Payment transactions are processed entirely by Stripe with PCI-DSS compliance
- Row-Level Security (RLS) policies restrict which users can read, create, update, or delete each type of record
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your data for as long as your account is active. Transaction logs, ranking records, and speedrun records may be retained for longer periods for audit, anti-fraud, and competition integrity purposes. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
8. Cookies & Local Storage
We use cookies and local/session storage to:
- Maintain your authentication session (sessionStorage clears when the browser closes for security)
- Remember game preferences and control layouts
- Improve your experience and load times
- Serve ads via Google AdSense (which may set its own cookies)
9. Your Rights (GDPR / CCPA)
Depending on your location, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data ("right to be forgotten")
- Object to or restrict the processing of your data
- Request data portability (receive your data in a structured format)
- Withdraw consent for optional data processing (e.g., disconnect your wallet)
- Opt out of the sale or sharing of personal information (CCPA — we do not sell your data)
To exercise these rights, contact us at support@onlycoingame.com. We will respond within 30 days.
10. Children's Privacy
Onlycoin Game is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. The game involves cryptocurrency features, in-app purchases, and competitive multiplayer interactions that are not appropriate for young children. If you are a parent or guardian and believe your child has provided us with information, please contact us and we will delete it promptly.
11. International Data Transfers
Your information may be processed and stored on servers located outside your country of residence. By using Onlycoin Game, you consent to the transfer of your data to these locations. We take reasonable steps to ensure your data is protected in accordance with this Privacy Policy and applicable law.
12. Third-Party Links
The game may contain links to external services such as PancakeSwap (for OYC token), MetaMask, Stripe, and Google. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice in the app. The "Last updated" date at the top of this page indicates when the policy was last revised.
14. Contact
If you have questions about this Privacy Policy or your data, contact us:
support@onlycoingame.com
Onlycoin Game
Privacy Officer
support@onlycoingame.com