1. Introduction

REAP (“we”, “us”, or “our”) operates the website at thereap.xyz (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform or use our services. By accessing or using the Platform, you agree to the terms of this Privacy Policy.

2. Information We Collect

Personal Information

When you create an account or interact with the Platform, we may collect information that can identify you, including:

• Username and profile information (via Twitter/X OAuth sign-in)
• Name and email address (via Google OAuth sign-in, if applicable)
• Username you create on the Platform
• Discord user ID and username (if you verify your Discord account)
• Blockchain wallet addresses (if you connect a wallet)

Automatically Collected Information

When you access the Platform, we may automatically collect certain information, including:

• Device and browser type
• IP address and approximate location
• Pages visited, time spent, and navigation patterns
• Referring URL and search terms

3. How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your account
• To provide, maintain, and improve the Platform
• To process gameplay transactions and maintain round history
• To communicate with you regarding updates, security alerts, and support
• To monitor and analyze usage trends and improve user experience
• To detect, prevent, and address fraud or technical issues
• To comply with legal obligations

4. Authentication

We use Twitter/X OAuth as the primary method of user authentication. When you sign in, we receive limited profile information (such as your username and profile data) as authorized by your account settings. We do not receive or store your password. You can revoke our access at any time through your X account settings.

We also support Google OAuth as a secondary sign-in method. If you sign in with Google, we receive your name, email address, and profile information as authorized by your Google account settings. You can revoke access through your Google account at any time.

If you connect a blockchain wallet, we store your public wallet address to facilitate on-chain gameplay. We never have access to your private keys.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how you interact with the Platform. These include:

• Essential cookies — required for authentication and core functionality
• Analytics cookies — used to understand usage patterns (via Vercel Analytics)

You can control cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

6. Third-Party Services

We may share limited information with third-party service providers that assist us in operating the Platform, including:

• Supabase — database and authentication infrastructure
• Vercel — hosting and analytics
• Twitter/X — primary authentication via OAuth
• Google — secondary authentication via OAuth
• Discord — community verification and bot interactions
• Blockchain networks — on-chain gameplay transactions (where applicable)

These providers have their own privacy policies and are contractually obligated to protect your data where applicable. We do not sell your personal information to third parties.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain certain information as required by law, to resolve disputes, or to enforce our agreements. If you request account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us using the details provided below.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Blockchain Data

Certain features of the Platform involve interactions with public blockchain networks. Transactions submitted to a blockchain are publicly visible and immutable — we have no ability to delete, modify, or restrict access to on-chain data once it has been recorded. Your public wallet address and transaction history on the blockchain are not controlled by us and are accessible to anyone.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last Updated” date. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you may contact us at:

Email: void@thereap.xyz