Privacy Policy
Last updated: October 23, 2026 · Operator: Artisam Labs
1. Introduction
Artisam Labs ("we", "us", "our") operates GGG — Good Game Guild (the "Service"), a trustless tournament prize-escrow and match-verification protocol on the Stellar Soroban network, including this website at ggg.quest and the hosted web application at app.ggg.quest. We are committed to protecting your privacy. This policy explains what we collect, why, and the choices you have.
2. Information We Collect
We collect the minimum needed to run the Service. Specifically:
- Account information — username and password (hashed with argon2) when you register as an organiser. We never ask for your real name.
- Wallet addresses — public on-chain Stellar addresses you connect via Freighter or any SEP-7-capable wallet. These are public identifiers, not secrets. Connecting records a wallet signup with first and last activity times, network, and flow role, together with registration details you provide. Repeated connections of the same address count as one wallet signup.
- Tournament data — tournament name, game title, entry fee, referee assignment, participant lists, final rankings, and payout splits you create.
- Usage data — with your consent, pages visited, interactions, browser information, referral source, connected public wallet addresses, successful transaction hashes and types, and masked session replays, collected to understand and improve the Service. Sensitive form text and element attributes are masked.
- Cookies — essential session and consent cookies (see §8).
3. How We Use Your Information
- To create and authenticate your account and session.
- To build, simulate, and submit Soroban transactions you authorise.
- To display live prize pools, registrations, and payout results.
- To monitor for fraud, abuse, and to enforce the Terms of Use.
- To improve the Service's reliability and performance.
- To respond to your support and partnership enquiries.
4. Sharing Your Information
We do not sell or rent your personal information. We share data only:
- with infrastructure providers (hosting, database, object storage) under confidentiality agreements;
- when required by law or legal process; and
- with your consent.
On-chain data (transactions, wallet addresses, contract events) is inherently public on the Stellar network and is visible to anyone — see §5.
5. On-Chain Data
6. Data Retention
We retain account and tournament data for as long as your account is active or as needed to provide the Service. Server logs are retained for up to 90 days for security. On-chain data is retained indefinitely by the Stellar network and is outside our control.
7. Data Security
Passwords are hashed with argon2; sessions are signed httpOnly JWTs; the server never holds private keys. We apply technical and organisational safeguards appropriate to the data. However, no method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.
8. Cookies
We use a minimal set of cookies:
- Essential — session and CSRF tokens required for the app to function.
- Consent — a local record that you accepted or declined non-essential cookies.
If you accept optional analytics, we use PostHog Cloud in the United States for product analytics and masked session replay. A connected public wallet address may be included as an event property, along with its role in the current flow, Stellar network, and tournament ID when available. After a successful transaction, its hash and type may also be included with that address. For a successful tournament join, the participant name (username), email address, and contact number you entered may also be included as event properties. The address is not used as your analytics identity. Analytics remains disabled until you consent, and you may decline without losing access to the Service. We do not use third-party advertising cookies. You can clear browser storage at any time; doing so will log you out and re-show the consent banner.
9. Your Rights
You may, at any time:
- access the account and tournament data we hold about you;
- correct inaccurate data, or delete your account (on-chain records cannot be deleted);
- withdraw consent for non-essential processing; and
- opt out of any non-essential communications.
To exercise any of these rights, email hello@artisam.xyz.
10. Third-Party Links
The Service links to third-party tools (e.g. the Stellar Explorer, Freighter wallet, and other SEP-7-capable wallets). We are not responsible for the privacy practices of those external sites; we encourage you to read their policies.
11. Changes to This Policy
We may update this policy. We will post the revised version on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
12. Contact
Questions about this policy or your data? Email hello@artisam.xyz, or visit artisam.xyz.