Privacy & safety.
Updated October 16, 2026. This explains how Iron Paw Gang handles information on this website and how to get help.
Member profiles and visibility
Profiles start private. Turn on “Visible to IPG members” in Account to appear in Members and let signed-in, verified IPG holders open your PFP, bio and optional social links from Discussion or the leaderboard. Turn it off to leave the directory and hide those profile details. Private posts use a chain label and the last five characters of your first linked wallet; leaderboard wallet labels use the last four characters instead of your display name; without a linked wallet, they use “Private holder.” Older private activity may show that label until your next sign-in updates it. Your posts and game scores remain visible in their existing spaces. Email addresses, full wallet addresses and holdings are not included in member profiles. Social links are member-provided and unverified.
Your account and wallet
Privy handles member sign-in and linked email and wallet accounts. IPG uses linked public wallet addresses to check mech ownership through OpenSea and Helius. Wallet linking can ask you to sign an authentication message. Our current game, Garage and discussion features do not request fund transfers, token-spending approvals, recovery phrases or private keys.
Public blockchain records remain public. Signing into IPG does not make a wallet anonymous. IPG sign-in and a verified connected wallet are required to retrieve Garage holdings. Wallet approval by an administrator is not required. Email sign-in alone does not verify control of a wallet.
Garage access
The Garage is open to everyone with a verified connected Ethereum or Solana wallet. Email sign-in alone does not verify control of a wallet. Retrieval uses verified wallets connected to your account. If you enable delegated Ethereum access on Account, it can also include mechs in cold wallets with a verified Delegate v1/v2 grant to your connected hot wallet.
Earlier beta access requests and wallet approval decisions remain private to the requesting account and administrator. They no longer determine Garage access. Contact IPG to request removal of these records, including if you have not created a profile. Existing NFT artwork and blockchain records remain available through their original public sources.
Discussion access
Reading and participating in Discussion requires a saved IPG profile, a verified connected wallet, and ownership of at least one IPG mech. Other eligible members can read posts and replies. Profiles that opt in also share their display name, bio, profile picture and optional social links. Private authors use their wallet suffix label. Your email, sign-in identifier and full linked wallet addresses are not displayed on the board. Reports are reviewed by the administrator; rate limits, content removal, thread locking and account bans apply.
Holder playtesting
Hold the Line requires an individually approved tester request, saved profile and verified connected holder wallet. Enabled Ethereum delegations can qualify as verified holdings; they do not bypass administrator approval. Requests store your profile/account reference, connected wallet snapshot, verified mech count, status and review times. Requests are visible only to you and administrators. A short-lived secure browser cookie stores a private test session; IPG stores its hash, account reference, approved request/wallet scope, sign-in time and expiry. Revocation blocks existing test sessions. The IPG administrator can also test privately.
Delegated wallets
If you enable delegated Ethereum access, we read public Delegate v1/v2 records and verify the vault’s current mech ownership. Your linked delegate address and relevant vault addresses are sent to an Ethereum RPC provider (PublicNode by default) and OpenSea for these checks. IPG stores your on/off preference and briefly caches verified access; vault addresses are not added to your public profile. Creating or revoking delegation happens separately on Delegate. Authorization and ownership are rechecked at the start of each new game run and sector; a crew already in battle remains locked for that sector. Directly linked Solana wallets are supported; Solana delegation is not.
What we keep
We store Garage access requests and wallet approval decisions, your chosen profile name, bio, optional social links, cleaned profile picture, visibility preference and private activity wallet suffix, discussion posts and replies, favorites, game-run records, leaderboard results, and any reports or deletion requests you submit. Sign-in identifiers connect these records to your account. Browser storage keeps settings and some local game history.
New profile pictures become still images of up to 512 pixels. The server validates and rebuilds them without hidden image metadata. Older uploads stay hidden until you upload them again.
Who can see it
Verified IPG holders can view opted-in member profiles and discussions. Anyone can read the public Hold the Line leaderboard, which shows ranks, game scores and the last four wallet characters. Public requests never include chosen names, profile links, bios, pictures, full wallets or email. Signed-in, verified IPG holders with a saved profile can see enabled member names on the leaderboard. Private profiles still use wallet-ending labels. This does not grant game access. Other members cannot obtain your linked wallet addresses or email through the member-profile pages. Reports and deletion requests are visible to the IPG administrator.
Hosting, sign-in, ownership and artwork providers process the information needed to deliver their services. These include OpenAI Sites, Cloudflare storage, Privy, OpenSea, Helius and IPFS gateways such as Pinata. External social links and shops have their own privacy practices.
Reporting a problem
Use Report beside a discussion, reply or member profile for scams, harassment, impersonation or exposed private information. Reports go into the administrator’s review queue; reporting does not automatically remove content. Do not include passwords or wallet secrets. You can also contact ironpawgang@gmail.com, including if you cannot sign in.
Keep discussions respectful. A holder badge or profile picture does not verify someone’s advice or links. IPG does not ask for a wallet recovery phrase to provide support. Check external destinations before signing anything.
Removing your data
On your Account page, open the Profile tab, expand Account privacy & data, then choose Request data deletion and confirm the request. This saves a request for the administrator; it is not instant erasure. Your data remains until it is processed. Contact IPG using the address above to follow up or withdraw a pending request before processing.
The administrator removes the member’s Privy sign-in record and then completes deletion of IPG data. Your profile picture, favorites and game records are deleted; your profile and authored discussion content are removed or anonymized so other members’ records remain consistent. Reports associated with that data are cleared or resolved. A temporary security marker blocks reuse of old login tokens.
Deletion does not transfer or burn your NFTs, erase blockchain records, delete your ChatGPT or wallet-provider account, or remove content other people independently posted. Hosting-provider backups and security logs follow those providers’ retention practices.
Retention and availability
Account and community data stays until removed, anonymized or processed through a deletion request. Temporary request counters and hashed connection identifiers help limit abuse; they are not shown to members. Reports are kept for moderation until resolved or removed with an associated deletion request. We do not currently use this information for advertising.
Request limits protect artwork delivery and ownership services. Heavy use may temporarily pause a service. No website can guarantee uninterrupted availability or eliminate every security risk.
Verified leaderboard playtest
For verified runs, the server checks your owned crew and replays your recorded gameplay actions to calculate results. It stores run identifiers, crew traits, action progress and combat checkpoints linked to your profile. Older beta scores are kept separately and are not promoted into verified standings. This private playtest does not award money, tokens or prizes. Rentals, staking, payments and prize competitions would need a separate review before launch.