Disclaimer, Terms and Privacy

Disclaimer

xSTIK Disclaimer. Last updated: 5 November 2026.

1. What this is

xSTIK is an NFT project on the XRP Ledger. This website and our social channels are there to inform.

Please read this page before you buy, sell or hold any NFT or token. If something is unclear, ask us through our official channels before you act.

The xSTIK Game Hub, our games site, is there to entertain. Please also read section 11 before you play.

2. Not advice

Nothing on this website or on our social channels is financial, investment, legal or tax advice. Nothing is an offer, or a recommendation, to buy, sell or hold any NFT or token. Links to marketplaces and exchanges are there to show where things can be found.

Nothing in the Game Hub is advice, an offer or a recommendation either.

xSTIK is not a registered investment advisor or broker-dealer.

Before you make a decision about money, talk to a qualified adviser who knows your situation.

3. No promises about value, yield or points

Prices of NFTs and tokens change all the time and can fall a long way. You may lose everything you put in.

xSTIK does not promise any profit, yield, price, performance, return or other outcome from holding NFTs or tokens, or from taking part in events.

The same goes for the Game Hub: credits, scores, badges and rewards carry no promise of any profit, value or financial return.

The points shown on this website are values from the project's own NFT catalogue. For an NFT that the catalogue flags as doubled, the website shows the doubled value. Some collectibles carry no points. We make no promise that points are worth anything, or that they lead to any payment, yield or benefit.

When this website describes what a token or an NFT does, for example its use or a liquidity pool, it describes what the project does or plans. It is not a promise. Plans can change or stop.

4. Price information

The price chart on this website shows the prices of the xSTIK and xOFOOD tokens in US dollars. It is for information only. Each price is taken from the token's liquidity pool on the XRP Ledger and a public XRP/USD rate. A single large trade can move a pool price. The prices may be delayed, wrong or unavailable. The chart is not an offer, advice or a recommendation, and we make no promise about any price.

5. Stories

The stories and character descriptions on this website are fictional creative content. They belong to the xSTIK team and its authors. They are not facts, not advice and not a promise about the value or use of any NFT.

6. Risks you accept

When you use NFTs, tokens and wallets, you accept risks such as:

• software bugs, network congestion, and failures of the XRP Ledger or of services built on it;
• wallet errors, wrong addresses, and approving something you did not mean to approve;
• scams, fake websites and fake support messages;
• other websites and services going offline or changing their rules.

Transactions on the ledger are normally final. We cannot cancel or reverse them.

7. Your keys are your responsibility

You alone are responsible for your wallet, your private keys and your recovery phrase. xSTIK cannot recover lost, stolen or inaccessible assets.

We will never ask you for your private key or recovery phrase. Never share them with anyone, even if the person says they work for xSTIK.

Check every request before you approve it in your wallet. Never approve something you did not start yourself.

When the Game Hub asks you to sign in, Xaman shows the name xSTIK Game Hub.

8. The ledger is public

Transactions on the XRP Ledger are public and permanent. Anyone can see wallet addresses, NFT ownership and transactions. We cannot delete or change data that is recorded on the ledger.

9. Other websites and services

This website links to other websites and services. Examples are XRP Cafe, Sologenic, DEX Screener, XPMarket, xrpl.services, the NFT App on Oracle Cloud, Linktree and our social channels.

The Game Hub also uses Xaman for sign-in.

These services are outside our control. We do not check their content, prices or security. Their own terms and privacy notices apply when you use them, and you use them at your own risk.

Names and logos of other companies belong to their owners. We use them only to show where something can be found.

10. As is, and where to read more

This website and everything on it are provided "as is" and "as available", without warranties of any kind. This includes the information shown, such as counts, tiers, points and prices, which can be out of date or wrong. The limits of our liability are in section 6 of the Terms of Service.

The same goes for the Game Hub.

How we handle personal data is explained in the Privacy Notice. The date at the top of this Disclaimer shows when it was last updated.

11. The Game Hub is entertainment only

The Game Hub shows its own disclaimer before you play. We repeat the key points here. All games use virtual credits for entertainment only. The Game Hub is not gambling: you never stake or lose real money or crypto, and credits can never be turned into money or crypto.

xSTIK does not promote, endorse or facilitate gambling. Credits exist solely to enhance gaming and promote the xSTIK NFT project.

Credits have no money value. They cannot be bought, sold, sent or exchanged, and there is no way to withdraw them. Scores, rankings, badges, the Grandmaster ranking and the Hall of Fame are for fun.

xSTIK may give discretionary rewards to top players during special events. Rewards are not guaranteed, carry no promised value, and each event has its own rules.

Some games are modelled on casino and card games. They are games for fun. How well you do in them says nothing about how you would do in a game played for real money.

The Game Hub is for adults, 18 or older. Before you play, it asks you to confirm that you are.

Terms of Service

xSTIK Terms of Service. Last updated: 5 November 2026.

1. Who we are and what these terms cover

xSTIK is the project team behind xstik.art. "We" and "us" mean xSTIK. "You" means anyone who uses the website.

xSTIK is run by the xSTIK Team. Contact us by e-mail at xrpstik-info@yahoo.com or on Telegram at t.me/xrpstik.

By using the website, you accept these terms. If you do not accept them, please do not use the website.

The Disclaimer is part of these terms. The Privacy Notice explains how we handle personal data. These terms do not cover other websites that we link to.

xSTIK is also the project team behind the xSTIK Game Hub, our games site at games.xstik.art. "You" also means anyone who uses the Game Hub, and by playing you accept these terms. Sections 8 to 15 are the rules for the Game Hub.

2. Using the website

The website is free to use and needs no account. It shows the xSTIK NFT collection, the public stories, the token prices and the ecosystem around it, and it links to other services.

You may look at it and follow its links. Please do not try to break it, overload it, or reach parts of it that are not meant for you.

3. NFTs, tokens and prices

You cannot buy or sell anything on the website. When you follow a link to a marketplace or an exchange, the trade happens on that service, under its rules. Check prices, fees and risks there before you act.

Prices change. The price chart and the points shown on the website are for information only, and they are not a promise of anything. Please read the Disclaimer before you trade.

You are responsible for following the laws that apply to you where you live, including tax rules.

4. Our content and other names

The NFT pictures and names on the website are the project's own artwork. The xSTIK name and logo belong to the project as well.

Please do not use them in a way that suggests your product, page or message comes from xSTIK or has our support. Names and logos of other companies belong to their owners.

The NFT pictures and names in the Game Hub are the project's own artwork too.

5. Availability and changes to the service

We do not promise that the website will always be available or free of errors. We may pause it for maintenance, change it or stop it.

We may add, change or remove features and information on the website at any time.

We may also add, change or remove games, credit amounts and rules of the Game Hub at any time.

6. As is, and limits of our liability

The website and everything on it are provided "as is" and "as available", without warranties of any kind, express or implied.

To the maximum extent permitted by law, xSTIK, its founders and team members are not liable for any damage that comes from your use of the website. This includes direct, indirect and consequential damage, and loss of funds or NFTs.

You are solely responsible for the security of your private keys and recovery phrase. xSTIK cannot recover lost, stolen or inaccessible assets.

Nothing in these terms limits rights that you have by law and that cannot be limited. Nothing excludes liability that the law does not allow us to exclude.

All of this applies to your use of the Game Hub too.

7. Changes, ending, law and contact

We may change these terms. The date at the top of these terms shows the latest update. If you keep using the website after a change, you accept the new terms.

You can stop using the website at any time. To use your data protection rights, see your rights in the Privacy Notice.

We may stop or limit your access to the Game Hub if you break these terms. If you keep playing after a change, you accept the new terms.

We operate under EU and EEA law, including the General Data Protection Regulation (GDPR). If you use xSTIK as a consumer, you keep every protection the law of your own country gives you.

To reach us, write to xrpstik-info@yahoo.com, or use our official channels: Telegram or X. We will never ask you for your private key or recovery phrase.

8. The Game Hub

The Game Hub is a collection of card, casino-style and arcade games played with xSTIK NFT cards. It is for entertainment only.

You can play every game as a guest, without signing in. A guest's results stay on the device and are never ranked. If you sign in with Xaman, your results can appear on the leaderboards.

The Game Hub is for adults, 18 or older. This includes guest play. Before you play, the Game Hub asks you to confirm that you are 18 or older. We do not verify the answer, so we rely on you to follow this rule.

9. Virtual credits

All games use virtual credits for entertainment only. The Game Hub is not gambling: you never stake or lose real money or crypto, and credits can never be turned into money or crypto. xSTIK does not promote, endorse or facilitate gambling.

Credits are free play credits. The Game Hub gives you some when you start, adds a daily bonus, and offers a refill when you run low. You cannot buy credits. You cannot sell, send or exchange them, and there is no way to withdraw them. They have no money value and you have no claim on them.

We can change how credits are given out, spent and paid out. We can cancel an invalid game and take back what it paid out.

10. Rewards

xSTIK may give discretionary rewards to top players during special events. Rewards are not guaranteed, carry no promised value, and each event has its own rules.

No score, rank, board place, badge or amount of credits gives you a right to a reward. Credits and scores themselves are not exchanged for money or tokens. If we run a reward, we announce it separately, with its own rules. The rules of the November 2026 launch rewards are in section 15. Nothing in the Game Hub promises any profit, income or financial return.

11. Signing in

Signing in is optional. You sign in with Xaman. The Game Hub then uses your wallet address to identify your player. The same wallet is the same player on every device.

A Xaman sign-in is a sign-in request, not a payment. Approve only a sign-in that you started yourself.

You are responsible for what happens while your device is signed in. You can sign out, and you can sign out of all your devices at once from your profile.

12. Nicknames

You need a nickname before you play your first ranked game. Your nickname is public. Do not use your real name or anything else that identifies you.

A nickname must follow the rules shown when you choose it. Names that look like another player's name, that pretend to be staff, or that are offensive are not allowed. We may block or change a nickname.

You can change your nickname whenever you like. Your scores, badges and Hall of Fame places stay with you and show your new name. The name you leave is free for anyone at once.

13. Ranked games, daily limits and fair play

A game is ranked when all of these are true:

• you are signed in and you have a nickname;
• you are not banned;
• your wallet exists on the XRP Ledger (a wallet that was never activated is not enough);
• you have not used the game's daily limit.

Every other game is practice. Practice uses the same rules, but it never goes on a leaderboard. The start screen of each game shows how many ranked games you have left today.

To check that your wallet exists, our server asks public XRP Ledger nodes about it. Only the wallet address is sent.

A game that you leave, or let time out, is settled for credits only and is never ranked.

Cheating is not allowed. This includes bots or scripts that play for you, and using mistakes in the games to your advantage.

A game that looks unusual can be held under review. An example is a game whose moves came faster than a person can make them. It stays off the leaderboards until a person has looked at it.

If we find cheating or abuse, we can cancel a game and take back what it paid out. We can also remove it from the leaderboards, change a nickname or ban an account.

A banned account cannot start games, claim bonuses or change its nickname. It can still sign in, and guest play stays open. To ask about a ban, contact us by e-mail or on Telegram (see section 7).

If we update a game while you are playing it, that game is cancelled and your entry is refunded.

The Fairness page of the Game Hub explains how games are checked and what the checks cannot stop. Please read it.

14. Leaderboards, the Grandmaster ranking, the Hall of Fame and badges

A leaderboard shows each signed-in player's best ranked game of the month for one game and mode. The Grandmaster ranking combines a player's places across the games. The Hall of Fame keeps the final result of each finished month. Results always show each player's current nickname, in finished months too. Months follow UTC time.

Signed-in players earn badges: medals for what they have done in the Game Hub, such as finished games, daily bonus days and podium places, and for the xSTIK NFTs their wallet holds. The first month of the Game Hub is November 2026, and every player who first signs in before 1 December 2026, 00:00 UTC, gets the OG badge.

The boards are public. They show your nickname, your place, your score and your tier badge, which is the highest xSTIK NFT tier your wallet holds. The medals you earn, and when you earned them, are public too. Nothing public ever shows your wallet address. The Privacy Notice has the details.

The boards and badges are for fun. If two players have the same score, the one who reached it first ranks higher. If we remove an invalid game, the boards, and even a finished month, can be corrected afterwards. When a player deletes their account, their places in finished months stay, shown as "[removed]".

15. November 2026 launch rewards

For the launch month, November 2026, xSTIK gives these rewards in xOFOOD tokens:

• the Grandmaster ranking of November 2026: 250,000 xOFOOD for 1st place, 100,000 xOFOOD for 2nd place and 50,000 xOFOOD for 3rd place;
• the badge list of November 2026: 10,000 xOFOOD each for places 1 to 10.

The places count as they stand when the month freezes, on 1 December 2026 at 00:00 UTC, and as we record them right after. On the badge list, more badges come first, then more gold medals, then more silver medals, then the player whose first badge of the month came earlier.

Who can take part: signed-in players aged 18 or older who keep these terms. Taking part is free: you buy nothing, and you need no NFT and no token. Members of the xSTIK Team cannot receive these rewards.

Before we pay, we check the top places for cheating, such as bots, games flagged by the automatic checks, or one person playing with several wallets. We can disqualify a place that breaks these terms. A place that is disqualified, banned or deleted is not paid, and nobody moves up.

We pay in xOFOOD to the wallet the player signed in with, within 14 days after the freeze. To receive xOFOOD, that wallet needs an xOFOOD trust line. A reward whose wallet has none by 15 December 2026 is not paid.

Payments on the XRP Ledger are public, so anyone who sees an amount can link a nickname to its wallet. If you do not want that, tell us by e-mail or on Telegram before the payment, and we will not pay you.

A reward is a number of tokens. Its value is not promised and can fall, and there is no cash alternative. You are responsible for any tax on what you receive. We publish any change to these rules before it applies, and we do not lower the rewards after announcing them.

Privacy Notice

xSTIK Privacy Notice. Last updated: 5 November 2026.

1. Who we are

xSTIK is the project team behind xstik.art. We decide why and how the personal data in this notice is used.

xSTIK is run by the xSTIK Team. Contact us by e-mail at xrpstik-info@yahoo.com or on Telegram at t.me/xrpstik.

We operate under EU and EEA law, including the General Data Protection Regulation (GDPR).

This notice explains it in plain words. It covers the website. It does not cover other websites that we link to, such as the NFT App.

xSTIK is also the project team behind the xSTIK Game Hub, our games site, and this notice covers the Game Hub too. The website and the Game Hub work in different ways, so the Game Hub is described separately, from section 13 on.

2. The short version

• The website has no accounts, sets no cookies and has no analytics. It remembers your light or dark choice on your own device.
• The website loads its fonts, pictures, scripts and price data from our own site. It does not ask for your name, your email address or any password.
• The website shows no owner or holder information of any NFT.
• In the Game Hub you can play as a guest. A guest's games, credits and settings stay on the device.
• If you sign in with Xaman, we store your wallet address, your nickname, your game results, your credits and the highest xSTIK NFT tier your wallet holds.
• The Game Hub sets cookies only when you sign in, to keep you signed in. It has no analytics and no advertising.
• Your nickname, your place, your scores, your tier badge and the medals you earn are public. Your wallet address is never shown publicly.
• The Game Hub's database is in the EU (Ireland). Its server code runs in the USA.
• We do not sell your data.
• You can ask us by e-mail or on Telegram to delete your data.
• In the Game Hub you can also delete your account yourself, in your profile.

3. The website (xstik.art)

The website has no accounts, no log-in, no sign-up or contact forms, no cookies, no analytics and no advertising or tracking scripts. This is by design. If we ever want to add any of these, we will update this notice first, and we will ask for your consent where the law requires it.

The main page and this legal page load their fonts, pictures, scripts and price data from xstik.art itself. A link takes you to another site only when you click it.

The only content that can come from another address is the live Hall of Fame card from the Game Hub, which we may show in a frame. If we do, your browser loads that card directly from the Game Hub's server, which then sees your IP address. The card sets no cookie and stores nothing on your device.

The website shows NFT pictures, names and tiers from the public collection. It shows no owner or holder information of any NFT, neither names nor wallet addresses.

The website also shows the stories of some NFTs, taken from the xSTIK NFT App. A story appears here only because its holder chose to make it public in the NFT App.

The price chart shows token prices. Its data comes from our own site only, and your browser makes no request to any other site for it. Our server reads the prices from our own database. A scheduled job fills that database from the token's liquidity pool on the XRP Ledger and a public XRP/USD rate.

The website remembers your choices, such as the light or dark theme, in your browser's local storage. They stay on your device. They are not sent to us.

When your browser asks for a page, Netlify, which hosts the website, processes ordinary server logs: your IP address, your browser type, the time and the address you asked for. It does this to deliver the website and to keep it running safely. This includes the requests for the price data.

4. Why we use your data

These are the reasons we use personal data. We do not use your data for advertising.

Some reasons rely on our legitimate interests. That is the law's term for a good reason that does not override your rights. You can object to them (see section 9).

• To run the website (legitimate interests). This covers hosting, server logs and security.
• To answer your messages (legitimate interests). When you write to us by e-mail or on Telegram, we see your e-mail address or your Telegram name, and what you write.
• To meet legal duties. We use data when the law or an authority requires it.

The reasons for the Game Hub are in section 16.

5. Who gets your data

We do not sell, trade or rent your personal data. We share it only as described here.

• Netlify hosts the website and processes the ordinary server logs described in section 3.
• Authorities may receive data when the law requires it.

Other sites that we link to, and the platforms that we use to talk with you, such as Yahoo (which runs our e-mail), Telegram, X and Instagram, have their own privacy notices. We do not control them.

The providers and other recipients for the Game Hub are in section 16.

6. Transfers outside the EEA

Some of our providers, such as Netlify, may process data outside the European Economic Area. When personal data leaves the EEA, European data protection law requires a safeguard, such as an adequacy decision or standard contractual clauses. We are responsible for making sure that one applies.

The Game Hub's database is run by Supabase in the EU (Ireland). Its server code runs at Netlify in the USA (Ohio). So every request you send to the Game Hub passes through the USA, with the data in it, such as your wallet address, your nickname and your moves. This is a transfer outside the EEA, and the rule above applies to it.

The XRP Ledger itself is a public network that runs around the world. Anything recorded on it can be seen worldwide.

7. How long we keep data

Server logs kept by Netlify are kept for the time its own settings allow. Apart from those logs, the website does not keep any data about its visitors. Messages you send us are kept only as long as we need them to answer you or to handle your request.

How long we keep Game Hub data is in section 17.

8. Security

We protect the website with technical and organisational measures. It uses encrypted connections and strict browser rules that block outside scripts.

No service on the internet is completely secure. If a data breach puts you at risk, we will tell you and the authorities as the law requires.

How we protect Game Hub data is in section 17.

9. Your rights and how to use them

You have these rights:

• to ask what personal data we hold about you, and to get a copy;
• to have wrong data corrected;
• to have your data deleted;
• to ask us to limit how we use your data;
• to object to uses that rely on our legitimate interests;
• to receive the data you gave us in a common format;
• to complain to a data protection authority, for example in the EEA country where you live, where you work, or where you think your rights were broken.

To use a right, write to us by e-mail at xrpstik-info@yahoo.com, or send a private message on Telegram at t.me/xrpstik (see section 12). Do not post personal details or wallet addresses in public. We may ask you to prove who you are before we act, so that nobody can see or delete your data by pretending to be you.

We answer within one month, or tell you why we need more time. As a rule, using your rights is free of charge.

We cannot delete what is recorded on the XRP Ledger, and we cannot take back copies that others have made of public data.

What this means for the Game Hub, including how we delete a player, is in section 18.

10. Children

The website is not aimed at children. We do not knowingly collect personal data from children. If we learn that we have, we will delete it promptly.

The Game Hub is for adults. See section 19.

11. Changes to this notice

We may update this notice. The date at the top of this Privacy Notice shows when it was last updated. Please look at it from time to time.

12. Contact

xSTIK is run by the xSTIK Team. For questions about your data, write to us by e-mail, or send a private message on Telegram. Do not post personal details or wallet addresses in public.

• E-mail: xrpstik-info@yahoo.com
• Telegram: t.me/xrpstik
• X: @xrpstik, for public messages only.

We will never ask you for your private key or recovery phrase.

13. The Game Hub: what we store

You can play every game in the Game Hub as a guest. A guest's games, credits and best results are kept only on the device. They are never sent to our servers, and they are never ranked.

If you sign in with Xaman, the Game Hub creates a player for your wallet and stores this in its database:

• your wallet address, which identifies your player, plus the time the player was created and the time it was last used;
• your nickname, and a simplified form of it that we use to stop look-alike names;
• whether your wallet was confirmed to exist on the XRP Ledger, and when;
• the highest xSTIK NFT tier your wallet holds, and when we last checked;
• your credit balance, the dates of your daily bonus and refills, and a history of every change to your credits;
• a record of every game you play: the game, the mode, whether it was ranked, and when it started and ended;
• what happened in each game: your moves, so that the result can be checked, your score, the credits spent and won, and any signs that the game was not played in a normal way;
• your best score in each game and mode, for each month;
• the badges you have earned, and when you earned each one;
• whether your player is banned, since when and why, and a counter that lets you sign out of all your devices;
• a log of moderation actions on your player, such as a ban, a rename or a cancelled game;
• whether you asked to delete your account, and when;
• short-lived counters that limit how often you can do something, such as change your nickname or start a game;
• sign-in requests, for a short time: the Xaman request, a one-way code that ties it to your browser, and your wallet address once you approve it.

What we read from the ledger

At sign-in we read your wallet's NFTs from the public XRP Ledger and keep its highest xSTIK tier as a public badge. The badge gives no advantage in any game. To do this, and to check that your wallet exists, our server sends your wallet address to public XRP Ledger nodes. At the moment these are xrplcluster.com and s1.ripple.com. Only the address is sent.

What we do not collect

The Game Hub does not ask for passwords, email addresses or real names. We never see your private keys or recovery phrase, because signing happens inside Xaman. We do not store your IP address in the Game Hub's database or in its own logs. The Game Hub has no analytics and no advertising.

Services your browser contacts

Besides the Game Hub's own server, your browser may contact two other services. Xaman (xumm.app) provides the QR picture when you sign in. Google Cloud Storage provides the original card picture if our own copy does not load. They see your IP address when this happens.

14. What is public in the Game Hub

These things are public. Anyone can see them, even without signing in:

• your nickname;
• your place on each leaderboard and in the Grandmaster ranking;
• your scores, and when you reached them;
• your tier badge, on the leaderboards and in the Grandmaster ranking;
• the medals you earn, and when you earned them, in the month's list of badges on the leaderboards page.

The Hall of Fame keeps the final result of each finished month. Its data can also be read by other websites. It shows nicknames, places and scores, but no tier badges.

The xSTIK dashboard (dashboard.xstik.art), also run by the xSTIK Team, shows the same public results on its Games page: the Grandmaster top 10, the top 3 of every leaderboard, the Hall of Fame and the top 10 of the month's list of badges. It shows nicknames, places, scores and medals, but no tier badges and no wallet addresses.

Your wallet address, your credit balance, your credit history and your game records are not public. The boards and the public data feeds never show a wallet address.

The tier badge, and the medal for the xSTIK NFTs your wallet holds, come from the public ledger. The rarest tiers are held by only a few wallets, so a badge can make it easier to guess which wallet is behind a nickname. Choose a nickname that does not identify you, and do not use your real name.

Your results always show your current nickname, in finished months too. So a new nickname does not hide your past results: they stay with you.

Once data is public, other people can copy it. We cannot take back copies that others have made.

15. Cookies and what stays on your device in the Game Hub

The website sets no cookies. The Game Hub is different, as described here.

The Game Hub keeps a few things in your browser's local storage. These are your settings (theme, sound, volume and motion), the version of the disclaimer you accepted, which includes your confirmation that you are 18 or older, and the number of a game you have in progress, so that you can pick it up after a reload.

If you play as a guest, it also keeps your guest credits, your best results on this device and a guest game that is not finished.

When you sign in, the Game Hub sets two cookies. Both are needed for signing in to work.

• The sign-in cookie, named __Host-xg_signin, lasts 10 minutes. It exists only while you sign in. It makes sure that only the browser that showed the QR code can finish the sign-in.
• The session cookie, named __Host-xg_session, keeps you signed in for up to 7 days. Scripts on the page cannot read it, and it is sent only over a secure connection. Signing out removes it.

To bring a phone back to the right page after the Xaman app, the Game Hub also keeps the address of the page you were on. It is removed when you come back, and a copy in local storage is used only within 15 minutes.

The Game Hub sets no advertising or tracking cookies. If your browser blocks cookies, signing in does not work, but guests can still play. You can clear this data at any time in your browser settings. Your guest credits and guest results are then lost, because they exist only on your device.

16. Why we use Game Hub data, and who gets it

These are the reasons we use Game Hub data. Legitimate interests are explained in section 4. You can object to them (see section 18).

• To provide what you ask for. When you sign in, we need your wallet address, nickname, games, credits and results to run your player, the games and the leaderboards.
• To keep the games fair and the service safe (legitimate interests). We check that a wallet exists, hold unusual games for review, moderate nicknames, and look for one person using many wallets.
• To show badges (legitimate interests). The tier badge shows on the leaderboards which xSTIK tier a player holds. The medals show what a player has done in the Game Hub.
• To run the Game Hub (legitimate interests). This covers hosting, server logs, limits on how often a request can be made, and security.

Some checks are automatic. For example, a game played faster than a person can play is held for review. A person decides what happens next. You can ask for a human check of anything that affects you.

We do not sell, trade or rent Game Hub data. We share it only as described here:

• Our service providers process data for us. Netlify hosts the Game Hub and runs its server code in the USA (Ohio), and it handles IP addresses to deliver pages and to limit abuse. Supabase runs the Game Hub's database in the EU (Ireland).
• Xaman (xumm.app) handles the sign-in. Its own terms and privacy rules apply to what it does.
• Public XRP Ledger nodes receive your wallet address, as described in section 13.
• Google Cloud Storage sees your IP address if your browser has to fetch an original card picture.
• Reward payments. If you receive a reward, we pay it to the wallet you signed in with. The payment is public on the XRP Ledger, and its amount can link your nickname to your wallet.
• The public sees the things listed in section 14.
• Authorities may receive data when the law requires it.

Section 6 explains transfers outside the EEA. It applies to these providers too.

17. How long we keep Game Hub data, and how we protect it

• Sign-in requests are normally deleted automatically, within about two hours.
• Counters that limit how often something can be done are normally deleted after about a day.
• The session cookie lasts at most 7 days.
• A nickname that you give up is free for anyone at once. A nickname that we change because it broke the rules stays blocked for good.
• Your player, credits, game records, best scores, badges and Hall of Fame results are kept until you delete your account, or ask us to.
• The moves of a practice game, one that does not count for the boards, are deleted 30 days after it ends. Its result stays.
• Our log of moderation actions is kept so that we can show what was done and why.

Only the people who run the site can see player data, and only what they need to run it.

We protect Game Hub data with technical and organisational measures. The Game Hub is built so that its player data can be reached only by its server, never directly from your browser. The Game Hub uses encrypted connections, cookies that scripts cannot read, and strict browser rules that block outside scripts. Its logs do not hold cookies or sign-in tokens, and they show wallet addresses only in a shortened form. Secret keys are kept in the Netlify settings, not in the code.

18. Your rights for Game Hub data

Everything in section 9 applies to Game Hub data too. You can delete your account yourself: sign in, open your profile and choose DELETE MY ACCOUNT. The account is locked at once and deleted after 7 days; until then you can change your mind and keep it. If you cannot do this, for example because your account is blocked, ask us by e-mail at xrpstik-info@yahoo.com or on Telegram at t.me/xrpstik. Send a private message, never post your wallet address in public, and tell us your nickname. We check that the wallet is yours before we act, so that nobody can see or delete your data by pretending to be you. We answer within one month, and we confirm on the same channel.

When your account is deleted, we delete your player and what belongs to it. This covers your wallet address, nickname, credits, credit history, game records, best scores and badges. In finished Hall of Fame months your places stay, shown as "[removed]", and nobody moves up. Deleting cannot be undone, and you lose your credits and your ranks.

We keep our log of moderation actions. It uses an internal player number, not your wallet address, but it can hold a ban reason or an old nickname.

19. Children and the Game Hub

The Game Hub is for adults, 18 or older, and that includes guest play. Before you play, the Game Hub asks you to confirm that you are 18 or older. We do not verify the answer. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it promptly.