Privacy Policy

Last updated: July 5, 2026

Short version: local play barely knows you exist. Enlisting creates an account — here is exactly what that stores.

1. Who we are

Capy Siege (the "game") is a free browser game at capysiege.com, operated by the Capy Siege team, based in New Zealand. For anything privacy-related — questions, access requests, deletion requests — contact cay_thrums.3v@icloud.com.

2. The short version

• Local play needs no account. Signed out, your teams and settings live in your own browser and never leave your device.
• Online play requires enlisting (a free account): an email address and password, or a Solana wallet you prove with a message signature. Accounts run on Google Firebase.
• Email is for signing in, full stop. The only email you will ever receive is transactional (password resets you request). No marketing, no newsletter, no sharing with advertisers.
• Enlisted players get a game-managed Solana "War Chest" wallet; its public address, saved withdrawal addresses, and withdrawal history are stored with the account. The private key is stored encrypted and is never given to anyone. Solana itself is a public blockchain — on-chain activity is public by nature.
• Online match results (wins/losses) are recorded by our game server and shown publicly next to your display name. In-match chat is relayed through our server and not stored after the match.
• The site uses Google Analytics 4 for aggregate usage statistics, and our hosting providers keep standard server logs — details below.
• Links to other sites (like X or Solscan) take you off our site, where those sites' policies apply.

3. What we collect — signed out vs enlisted

Signed out: nothing personal. No sign-ups, no passwords, no payment details, no wallet connections, no contact lists, no precise location data. Local matches run entirely in your browser.

Enlisted (optional, required only for online play):

• Email accounts: your email address and the date you signed up. Passwords are handled by Google Firebase Authentication; we never see them. We use the address for exactly two things: identifying your account so you can sign in, and sending password-reset email when you ask for one (sent by Firebase on our behalf). That's the list — no marketing mail, and we never sell or share the address for advertising. One thing worth knowing: your starting display name is taken from the part of your address before the @ (trimmed to 20 characters), and display names show publicly in lobbies. You can change yours at any time.
• Wallet accounts: your Solana wallet's public address, which becomes your account identity. Wallet sign-in is a free message signature — never a transaction — and your own wallet's private keys never touch us. We do not read your connected wallet's balance or transaction history; the address is also saved as a permanent withdrawal address for your War Chest (section 4 of the Terms has the full picture).
• A display name, your team and capybara names (held in a global name registry so names stay unique), and your saved teams.
• Your War Chest: the custodial wallet's public address, your saved withdrawal addresses, and a ledger of your withdrawals (amount, destination address, transaction signature, status, and timestamp). The wallet's private key is stored encrypted (AES-256-GCM, master key in Google Cloud Secret Manager) and is accessible only to our server-side code while signing a withdrawal you requested — never to other players, never sent to your browser, and never disclosed to anyone, including you. Withdrawing to your own wallet is how funds leave custody.
• Your public war record: wins, losses, and matches, written by the game server and visible to other signed-in players in lobbies.

Retention and deletion: we keep account data for as long as the account exists — there is no use for it beyond running the account, so it isn't copied anywhere else. To delete your account and its data, email us (section 12); we will verify you control the account, then remove the sign-in record, profile, teams and name claims, withdrawal addresses, and withdrawal ledger. Withdraw your SOL first — deleting the account destroys its wallet records, and remaining funds may be unrecoverable. Records already on the Solana blockchain are public and permanent; nobody, including us, can erase those.

4. Data stored on your device

To make the game work between visits, it saves a small amount of data in your browser's local storage. Signed out, this data stays on your device; signed in, your team roster additionally syncs to your account so it follows you between devices:

• capy.teams.v1 — the team names and rosters you create;
• capy.lastMatchConfig.v1 — your last match settings, so a rematch is one tap;
• capy-siege-audio — your sound settings;
• capy.onboarded.v1 and capy-siege-controls-seen — flags recording that you've seen the intro and controls screens, so we don't show them twice.

The game also caches its own files (artwork, sounds) on your device so it loads fast. You can clear all of this at any time through your browser's site-data / "clear browsing data" settings; the game simply returns to its defaults.

5. Analytics (Google Analytics 4)

The game page runs Google Analytics 4 (measurement ID G-1V5M32SY4Y), a service of Google LLC, which processes this data on our behalf. It loads when the page loads. What it collects:

• Interaction events — page views, session starts, and similar usage signals;
• approximate location (country/region/city), derived by Google from your IP address — Google states that GA4 does not log or store the IP address itself;
• device and browser data — browser, operating system, screen size, language;
• cookies that tell returning visits apart (listed in section 7).

We see aggregated statistics only, we pass no account identity to Analytics, and we do not use it to identify individual players. Google's handling of this data is described in the Google Privacy Policy. If you would rather it never ran at all: browser settings, content blockers, and Google's opt-out browser add-on all work, and the game plays exactly the same without it.

6. Hosting, the game server, and fonts

Services that necessarily see standard request data (IP address, user agent, timestamps) because they carry the traffic:

• Firebase Hosting (Google) serves the site, and Firebase Authentication, Cloud Firestore, and Cloud Functions (all Google) run accounts and the War Chest backend; see the Google Privacy Policy.
• The realtime multiplayer server is hosted on Railway. It relays match inputs and chat between players (chat is not stored after the match) and its infrastructure keeps standard connection logs.
• Solana RPC: checking your War Chest balance queries a public Solana RPC endpoint directly from your browser (by default the Solana Foundation's api.mainnet-beta.solana.com), which sees the request, your IP address, and the wallet address being asked about.
• Google Fonts delivers the display font and receives the standard request data needed to serve the file.

7. Cookies

Our own code sets no cookies (the game's local data uses browser storage, listed in section 4). Google Analytics sets these when the game page loads:

• _ga — distinguishes returning visitors; lasts about two years;
• _ga_1V5M32SY4Y — keeps session state for this site's Analytics property; lasts about two years.

Blocking or deleting these (section 5) has no effect on the game.

8. Links to other places

The game links out to third-party sites — currently our profile on X, and, if token-related features ever go live, public blockchain explorers. Following those links leaves our site; what happens there is governed by those platforms' own privacy policies, not this one.

9. Children

Capy Siege's gameplay is suitable for general audiences (cartoon capybaras, cartoon ordnance). Accounts and the War Chest, however, involve real cryptocurrency and are not intended for children; do not enlist or fund a War Chest if you are not old enough to hold such assets where you live. We knowingly collect no personal data from children.

10. Your rights

If you play signed out, we hold no personal data about you: the data in section 4 lives on your device and is yours to delete directly, and analytics data is held by Google in aggregate form (section 5 covers opting out).

If you have enlisted, we do hold personal data about you — exactly the items listed in section 3. Privacy laws such as the New Zealand Privacy Act 2020, the GDPR and UK GDPR, and the CCPA give you rights over that data: to access it, correct it, delete it, receive a copy, and object to or restrict its use. To exercise any of these, email cay_thrums.3v@icloud.com; we will verify that you control the account and then act on the request. One honest caveat, repeated from section 3 because it matters: the Solana blockchain is a public, permanent record, and no deletion request can reach it.

11. Changes to this policy

If the game's behaviour changes, we update this policy first and change the "Last updated" date above. The current version at capysiege.com/privacy is always the one in force.

12. Contact

Privacy questions: cay_thrums.3v@icloud.com.