Twist Privacy Policy

1. Scope

This policy explains what the operator of Twist (“we”, “us”, “our”) collects when you use Twist on twist.fun, as an installed app, or through an app store (the “Service”), why we collect it, who processes it, and the choices you have. It applies together with our Terms of Use.

2. Information We Collect

• Signed out. A random visitor ID stored in your browser, a session ID, and what you watch and play with practice credits: which stories, for how long, which endings you picked, and whether you skipped or shared. No name, email or wallet.
• Account. When you sign in, our sign-in provider gives us the email address you used or an identifier for your Google or X account, and creates a Solana wallet whose public address is linked to your account. We never receive your password or the wallet’s private key.
• On-chain activity. Every real-money action (deposits, entries, outcomes, payouts, withdrawals, referral, creator and jackpot payments) is recorded on the Solana blockchain under your wallet address. Blockchain records are public and permanent, and cannot be edited or deleted by us or anyone.
• Play analytics. Once signed in, your viewing and play records are linked to your wallet address so your activity can be added up. The same events, without your wallet address, go to our analytics provider.
• Referrals and promotions. The referrer ID of any share link you arrived through, and any promo or invite codes you use.
• Technical data. Our hosting provider processes your IP address, browser and device information to serve and protect the site. We use your IP address to rate-limit a few actions and to apply location restrictions, and otherwise do not store it. Crash reports (error message, page address, browser version) are kept in short-lived logs.
• Support. Emails you send us.

We do not collect your name, postal address, phone number or payment-card details, and we do not knowingly collect precise location. If we introduce identity verification, we will update this policy before collecting any identity documents.

3. How We Use It

To run the Service (sign you in, show your wallet and balance, place entries, settle rounds, pay payouts and earnings, process withdrawals); to keep it fair and safe (detect bots, multiple accounts, bonus abuse and fraud, enforce age and location rules, rate-limit abusive traffic, investigate disputes); to improve Twist (understand which stories work, where players drop off and what breaks); to meet legal duties (record-keeping, lawful requests, enforcing our Terms); and to contact you about your account or support requests. We do not send marketing email, we do not sell personal data, and we do not share it with advertisers.

4. Who Processes It

We share data only with providers that help us run the Service, under contracts that limit what they can do with it: our sign-in and embedded-wallet provider; our hosting provider, which also hosts the database and video files; our analytics provider, which receives usage events without your wallet address; and the blockchain infrastructure (RPC, rollup and random-function providers) that processes your wallet address and transactions to run rounds. App stores you install Twist from collect their own data under their own policies. We may also disclose data where the law requires it, to protect the rights or safety of players and the Service, or in a merger, acquisition or sale of assets, in which case this policy continues to apply.

5. Retention

• Account and wallet records: while you have an account and afterwards as long as needed to settle balances, resolve disputes and meet record-keeping duties.
• Viewing and play analytics: up to 24 months in identifiable form, then deleted or aggregated.
• Crash reports and request logs: days.
• Support emails: as long as needed to help you.
• Blockchain records: permanent and outside our control.

6. Your Rights and Choices

You can watch and practise signed out, with only a random visitor ID kept. You can block analytics with browser settings or a content blocker, and clearing site data resets your visitor ID and practice credits.

You may ask us to access, correct or delete the data we hold, or to object to or restrict processing based on our legitimate interests, by emailing contact@twist.fun from the address linked to your account; we answer within 30 days and never charge for a reasonable request. Withdraw your balance before asking us to delete your account, because we cannot recover it afterwards, and we cannot delete anything already written to the blockchain.

If you are unhappy with our answer you may complain to the data-protection authority where you live; we would rather hear from you first.

7. Security

Traffic to Twist is encrypted. Your wallet’s private key is generated and held by our sign-in provider and signs only the deposit or entry transaction Twist has validated. Access to our database and logs is limited to the people who need it. No system is perfectly secure, so protect the email, Google or X account you sign in with and tell us at once if you believe your account has been compromised.

8. International Transfers

Our providers operate globally, so your data may be processed outside the country where you live. Where the law requires, we rely on our providers’ standard contractual safeguards for those transfers.

9. Children

Twist is not for children. Real-money play requires you to be at least 18, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, email us and we will close it.

10. Changes and Contact

We may update this policy as Twist changes. The effective date at the top shows the current version, and we announce material changes in the app or on the website. Questions, requests or complaints about privacy: contact@twist.fun.