Privacy Policy
1. Who controls OrbDin data
For the Closed Alpha, the OrbDin project determines how account and gameplay data described below is used for the service. Formal operator identity may be updated before public commercial launch and will be versioned when material. Contact is available through @OrbDinBot using /support.
2. Data we process
- Telegram account data: Telegram user ID, username when available, first/last name when supplied by Telegram, language code and Mini App authentication data used to validate the session.
- Gameplay data: Coins, Power, levels, XP, League Points, Pulse, missions, streaks, Charges, inventory, skins, Season claims and timestamps.
- Referral and security data: referral relationships, activity days, Trust status, fraud-prevention signals, risk events and account restrictions. Detailed security formulas are not disclosed.
- Advertising data: ad-session IDs, provider, placement, completion/rejection state, timestamps and limited result metadata. AdsGram may process information independently under its own policy.
- Payment data: Telegram Stars order identifiers, amounts, product, status and Telegram payment charge IDs. OrbDin does not receive your card or app-store payment credentials.
- TON wallet data: public wallet address, public key, wallet application name, network, verification timestamps and temporary proof/nonce data needed to prove wallet ownership. Blockchain addresses are public identifiers.
- Support data: Telegram user/chat identifiers and the message you submit through support commands.
3. Why we use data
We use data to authenticate users, operate game progression, prevent fraud and Sybil abuse, deliver purchases, manage optional advertising rewards, run leagues/referrals, verify wallets, calculate account readiness, provide support, maintain audit records, measure product performance and comply with legal/platform obligations.
4. Third-party services
OrbDin relies on service providers and platforms, including Telegram, Supabase, Cloudflare, AdsGram, TON Connect infrastructure and wallet providers. These parties may process data under their own terms and privacy policies. AdsGram states that its services can process Telegram account and Mini App data such as Telegram ID, username and device type. Wallet providers control their own wallet applications and keys.
5. Advertising
Rewarded advertising is optional. When an ad is requested, AdsGram or a future disclosed provider may receive technical/end-user information needed to deliver, measure and protect advertising. OrbDin does not treat a test/debug ad as a paid production impression.
6. Payments
Digital purchases inside Telegram use Telegram Stars. Telegram and its payment processors handle the purchase of Stars. OrbDin stores only the identifiers and records needed to deliver and support the OrbDin digital product.
7. Blockchain and wallet privacy
A verified TON address can be linked to your OrbDin account. Public blockchain activity associated with that address may be observable by anyone through the blockchain. OrbDin's current wallet flow is non-custodial: we do not receive your seed phrase or private key.
8. Legal bases and choices
Depending on your jurisdiction, processing may rely on performance of the service agreement, legitimate interests such as security and product integrity, compliance obligations, and consent where legally required. Optional rewarded ads and wallet connection are user-initiated features.
9. Sharing and sale
OrbDin does not sell your personal data to advertisers. We share or make data available only as needed to providers supporting the service, to process an action you request, protect the service, comply with law, or as otherwise disclosed to you.
10. Retention
We retain account/game data while needed to operate the account and maintain integrity. Payment, fraud, wallet verification and support records may be retained longer where necessary for disputes, audits, security or legal obligations. Temporary wallet nonces expire quickly and cannot be reused.
11. Security
Core balances and eligibility decisions are server-authoritative. Direct public database access is restricted, Telegram Mini App authentication is validated server-side, and wallet ownership uses signed proofs. No system is risk-free, especially during Alpha.
12. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to or obtain information about your data. Send /support Privacy request: ... to @OrbDinBot. Some records may need to be retained for payment, fraud-prevention, legal or security reasons.
13. International processing
Service providers may process data in different countries. Where required, transfers are handled under the provider's legal mechanisms and applicable law.
14. Adults only during Closed Alpha
OrbDin Closed Alpha is not intended for users under 18 or below the age of majority required in their jurisdiction. If we learn that an ineligible minor account is participating, access may be restricted and data handled as required by law.
15. Changes and contact
Material privacy changes are versioned and may require new acknowledgment. Contact OrbDin through @OrbDinBot using /support. Payment-specific issues should use /paysupport.