Privacy Policy

Last updated: October 7, 2026 · Version 2026-10-07

1. Who we are

Plonk (“Plonk”, “we”, “us”) is an independent game run by its developer, Kevon. This policy covers the game at play.plonk.land, the Plonk Android app (package land.plonk.app) and the website at plonk.land. Contact: polskimcduck@gmail.com.

2. What we collect

Your account

• Wallet address (your Solana public key). It is your account ID. When you connect, your wallet signs a one-time sign-in message; we check the signature and give your browser a session token.
• Demo accounts get a random ID instead of a wallet. A demo you walk away from is deleted automatically about 15 minutes after you leave.
• Character name and look (colours, model, hair, title, chosen robot voice).

Your game save

• Skills, levels, inventory, bank, gear, gold, quests and progress flags, pets, farm, playtime, last position and zone, daily task progress, collection books and leaderboard entries.
• Market listings and trades with other players, and your referral link (who invited you, and who you invited).

Chat and things you make

• Chat messages. Global chat and area chat are public to other players. The last 60 global lines are kept so new players can see the conversation, including across server restarts. Recent public lines also appear on the Plonk live-stream page. Area chat may be read aloud to nearby players by a robot voice; the audio is generated on the fly and not stored. Party chat and direct messages are passed to the other player and not saved to our database, unless that player reports you (see the next point).
• Recent-message buffer for reports. The server keeps your last few chat lines in memory (not on disk) so that, if someone reports you, the report shows what was actually said. A restart clears it. When someone reports you, the report saves the lines from this buffer that the reporter could see: your public (global and area) lines, and the party or direct messages they were part of. Your private messages with anyone else are never added to a report.
• Custom skins (a PNG you upload or paint). They are public: anyone can view them at a web address based on your wallet address.
• Bug reports, feedback and player reports you send, with your wallet address and name. Replies from the developer are stored so you can read them in the game.

Device and network signals (anti-cheat)

• Device check. To stop one person running many characters on one machine, your browser sends basic hardware facts: graphics card name, screen size and colour depth, CPU core count, rough memory size, platform and time zone. The server turns these into a short one-way code (a keyed hash) and does not store the raw values.
• Network check. We use your IP address to limit accounts per household and to stop spam. We store only a keyed one-way code made from it, not the IP address itself.
• Anti-cheat events (for example, impossible movement) and any moderation actions on your account.
• Our web server, like most, briefly logs requests (IP address, time, page, browser type) for security and troubleshooting.

Blockchain and payments

• When you pay with your wallet ($PLONK or SKR), we record the transaction signature, the amount and what you bought, so we can prove the payment and never grant it twice.
• When we pay you (boss bounties in SOL, the gold buyback desk, referral fee-share, rewards), we record the payout, its amount and its transaction signature.
• We read public on-chain data about your wallet: your $PLONK balance (for perks and the optional “show my $PLONK” display), whether you hold a Seeker Genesis token (for Seeker perks), and the public history of your $PLONK (to tell bought tokens from rewards).

On your device

The game saves your settings, hotbar, block list, session token and similar preferences in your browser’s local storage. You can clear them in your browser or with Settings → Delete my account.

We do not collect your real name, email (unless you email us), phone number, contacts, photos, precise location, or your wallet’s private key or seed phrase.

3. Why we use it

• To run the game: save your progress, show your character to others, run chat, trades, the market and parties.
• To keep it fair: anti-cheat, one-session-per-machine and per-household limits, and fraud checks before rewards.
• To process payments and payouts you start, and to keep records of them.
• To keep players safe: moderate chat and skins, and handle reports.
• To fix bugs and answer your messages.

We rely on what is needed to provide the game you asked for, our legitimate interest in a fair and safe game, and our legal obligations (for example, keeping payment records).

4. What other players can see

Your name, character, level, gear and custom skin; your public chat; leaderboard entries; and, unless you turn it off in Settings → Display → Privacy, how much $PLONK your wallet holds. You can also choose to stay off the town statue and to block duo-emote invites there.

5. Who we share it with

We do not sell or rent your data, and we do not share it with advertisers. Some services see data because the game needs them:

Anything written to the Solana blockchain (payments, payouts, token holdings) is public and permanent. We cannot change or delete it. We may also disclose data if the law requires it, or to protect players or the game from fraud or abuse.

6. How long we keep it

• Your game save: until you delete your account. Demo saves: about 15 minutes after you leave.
• Global chat history: the last 60 lines only (older lines drop off). The report buffer: memory only, a few lines.
• Bug reports, feedback and player reports (including the chat lines saved with a report): until they are handled and cleared by staff.
• Network and household codes: they expire on their own (daily seats, and identities not seen for a while).
• Payment, payout and anti-cheat records: kept after account deletion (see below).
• Backups. We back up the game database every hour. The newest 48 copies stay on our server, and every copy is also stored off-site in storage that is locked so that nobody (not even us, or an attacker) can change or erase it early. Off-site copies are kept only for as long as we need them to recover from a failure, and are then deleted. Deleted data stays in these copies until they expire. We only use backups to recover from a failure or an attack. If we ever restore one, we first delete again every account that asked for deletion after that backup was made.

7. Deleting your account

In the game: Settings → Delete my account, then type DELETE to confirm. You must be signed in with the wallet you want to delete. If you have an open market listing, a market purchase in progress, an active trade, or a gold buyback desk sale still being paid, finish or cancel it first (or email us, see below). A payout still on its way to you does not stop the delete: it is still sent to your wallet afterwards. Anything still staked in a mini-game when you delete is forfeited.

What is deleted: your character, name, skills, inventory, bank, gear, gold, progress, pets, farm, playtime, leaderboard entries, custom skin, the bug reports and feedback you sent and replies to them, and your lines in the saved global chat and stream feed. Your session ends. Copies in our backups expire as section 6 explains.

What we keep, and why:

• Payment and payout records (transaction signatures, amounts, what was bought or paid), market trade history, buyback desk sales, referral and reward records — for accounting, refunds and to stop double payments.
• Anti-cheat records, bans and chat mutes, today’s earning and claim limits, the free-trial timer, weekly raid lockouts, one-time claim records (Welcome Drop, Seeker Genesis claims, limited serials), and the moderation log — to prevent fraud and repeat abuse. Household network codes expire on their own.
• Reports other players made about you (they belong to the reporter’s report).
• A note that your wallet deleted its account, with the time.

If you sign in again with the same wallet later, you start a brand-new character. If you cannot use the in-game button, email polskimcduck@gmail.com from any address and sign a message with your wallet when we ask, so we know the request is yours.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how we use it. Most of it is visible in the game, the delete button covers deletion, and you can email us for anything else. You can also complain to your local data-protection authority.

9. Children

Plonk is not for anyone under 18. It involves crypto tokens, real-value rewards, chance-based mini-games and open chat. We do not knowingly collect data from minors. If you think a minor is using Plonk, tell us and we will delete the account.

10. Security

Connections use HTTPS and secure WebSockets. Sign-in uses wallet signatures, so we never handle passwords or keys. Anti-cheat codes are keyed one-way hashes. No system is perfectly secure, so please protect your wallet and never share your seed phrase — Plonk staff will never ask for it.

11. Changes

If we change this policy we will update the date and version above, and the game will ask you to look at it again when the change matters.