Legal
Privacy
Last updated: 20 October 2026
In short
- We collect what the site and the game need to work and to prevent abuse: your wallet address, the player name you choose, how you play, and a few technical details.
- We do not sell your data. We run no ads, and no analytics or tracking tools of our own.
- Other players see your player name and results, and anything sent on a blockchain is public.
- Write to privacy@memeauction.fun for a copy of your data or to have it deleted.
Who we are
Meme Auction ("we", "us") runs memeauction.fun, the game at play.memeauction.fun, the presale page at presale.memeauction.fun, and the server behind the game. This page explains what we collect, why, who else receives it, how long we keep it, and what you can ask us to do. It covers the demo, the presale and, once it opens, real-money play.
On the front page
The front page itself sets no cookies, keeps nothing in your browser and runs no analytics. Its fonts and scripts come from our own site. The one exception is the spam check on the request form, described below.
Our host, Cloudflare, receives your IP address and browser details with every visit, as any web host does, to deliver the page and protect it from attacks. The links to Telegram, Discord and X take you to those services, under their own privacy policies.
On the presale page
The presale page at presale.memeauction.fun has no account and no login, sets no cookies and runs no analytics of its own. To show the sale, your browser reads the sale contract on BNB Smart Chain through blockchain node providers (currently NodeReal, and a backup provider when it is down); once you connect a wallet, these requests include your wallet address.
Your browser keeps which wallet you connected, so the page can reconnect it, and WalletConnect and Reown's connection window keep their own data there. Reown's connection window loads with the page, as it does with the game (see Reown below). The page also asks memeauction.fun for the announced claim date. Its links to BscScan, to the onramp sites and, once claims open, to PancakeSwap and the liquidity lock's receipt take you to those services, under their own privacy policies, and your wallet app sees the transactions you approve. Your purchases and claims are public and permanent on BNB Smart Chain, tied to your wallet address.
The private round form
If you send a request, the form sends us your name, email address, Telegram username and country (both optional), the kind of backer you are and your organisation (when the form asks for it), the amount, what you can bring, your message, and your confirmation that it is an inquiry only. We give the request a reference code.
We use it to read and answer your request. When you press Send, our form's server turns the request into a PDF and sends it to our private Telegram chat and to our team mailbox. The site itself keeps no copy, and the form's server logs only the reference code and whether delivery worked, never what you typed. We do not email you a copy.
Before a request goes, Cloudflare Turnstile checks that it was sent by a person. It loads from Cloudflare when the form opens and processes signals such as your IP address and browser details (Turnstile privacy addendum). Our form's server also uses your IP address, at the moment you press Send, to limit how many requests one connection can send. It is not saved with your request.
We keep requests while we consider them and while the private round runs, and longer only if we agree terms with you. You can ask us to delete yours at any time: write from the email address you gave and quote your reference code.
Your account in the game
- Your account is your wallet address. To log in, you sign a message in your wallet. The signature proves the wallet is yours; we check it and do not keep it. Logging in sends nothing on the blockchain and costs nothing.
- Your login lasts 7 days in your browser, and then your wallet signs again.
- The player name you choose is shown to other players in matches, match history, the leaderboard and showcases. It cannot be changed.
- We record when you joined.
Playing
We keep your matches, bids, wins, items and balances, and what you do with them in the game: the shop, the market, sales and rewards. Each match also records the name shown at your seat, so we can find a match you report to us. The leaderboard shows player names with their results.
Match security
To protect matches from abuse, the game:
- creates a random browser id when you first open the lobby, and stores it in a cookie named ma_bid, which your browser keeps for 400 days after your last visit, and in your browser's local storage. Logging out does not remove it;
- turns your IP address and that browser id into codes, using a secret key, and stores those codes with each match you join. Match records keep only the codes, never the IP address or the id itself.
Events, invites and linked accounts
During the demo, the Events tab offers tasks:
- Telegram: when you link your account, Telegram sends us your Telegram id, name, username and profile photo link. We keep only the id and the username, and ask Telegram whether you joined our Telegram group. The Telegram button loads a script from telegram.org.
- Discord: we ask Discord only for your basic profile. We keep your Discord id and username, and ask Discord whether you joined our Discord server.
- A linked Telegram or Discord account stays linked to that wallet; it cannot be moved to another wallet.
- X: we do not connect to your X account. Sharing opens X with a ready-made post, and what you post is up to you.
- Invites: your invite link contains your wallet address, so anyone who sees the link or your post can see that address. If you join through someone's link, we record who invited you.
In your browser
Besides the browser id, the game keeps a few things in your browser's local storage: your login, your sound setting, hints you closed, how you sorted your warehouse, the numbers your browser added to your recent matches (so the Verify page can check them), a $MAT deposit while it confirms, and, until you log in, the invite link you followed. While a tab is open, it also holds the current match's seats, your loadout and when you last saw a maintenance notice. The wallet library remembers which wallet you connected, and WalletConnect keeps its session in your browser's database. All of this stays on your device; clearing the site's data in your browser removes it.
Server logs and alerts
Our game server writes a line for every request it receives: your IP address, what was asked for, when, and the result. We use these logs to fix problems and to look into abuse or disputes, and they are deleted within 15 days.
When something needs our attention, the server sends a short alert to our private team chat. In real-money play, an alert can include a wallet address, an amount and a transaction id. We keep alerts only as long as we need them to run and fix the service.
Real-money play
The demo uses no blockchain. When real-money play opens:
- Deposits, withdrawals, $MAT and staking happen on BNB Smart Chain. What is sent on a blockchain is public and permanent: anyone can see your wallet's transfers to and from our contracts. We link these transactions to your account to credit your deposits and pay your withdrawals.
- We keep records of your deposits and withdrawals (amounts, transaction ids and status) and any notes we add when we review a withdrawal or correct a mistake. For staking, we record the public staking events of every wallet that uses our staking contract.
- To read the blockchain, our server and your browser send requests that include your wallet address to blockchain node providers (currently NodeReal, and a backup provider when it is down).
- Your wallet app, and WalletConnect if you use it, sees the transactions you approve.
Who else receives data
We share data only with the services that run Meme Auction, when the law requires it, or to protect the service and its players from fraud and abuse. We do not sell it.
- Cloudflare (privacy policy): hosts the front page, the presale page and the form's server, runs the spam check, and sits in front of the game, so it sees all traffic, including IP addresses.
- DigitalOcean (privacy policy): runs our servers and database, and stores and delivers the game's images.
- Telegram (privacy policy): our private team chat receives private round requests and alerts; our team account sends and receives the messages about private round requests; and the Telegram login, if you use it.
- Discord (privacy policy): the Discord login, if you use it, and our support tickets: what you write in a ticket is seen by Discord and by Ticket Tool, the ticket service we use there.
- Our email provider: receives private round requests and the emails you send us.
- Reown, the company behind WalletConnect (privacy policy): lets you connect a wallet app on your phone. Its connection window loads with the game's page and the presale page, so Reown's servers receive your IP address and browser details when the page opens, and the window can send Reown error reports and usage events, such as the page address and, once you connect through it, your wallet address. When you connect through it, Reown relays the connection between the page and your wallet app. We have switched off the usage reporting that our settings control.
- Blockchain node providers, on the presale page and in real-money play, as described above.
- X (privacy policy): only if you choose to share a post.
Where it is kept
Our servers and database are in Germany. Cloudflare, Telegram, Discord, Reown, the blockchain node providers and our email provider run services around the world, so your data may also be processed in other countries.
How long we keep it
- Server logs: up to 15 days.
- Backups: database backups are replaced within 7 days, and backups of our server, which can include its logs, within 4 weeks.
- The ma_bid cookie: 400 days after your last visit, in your browser.
- Your login: 7 days, in your browser.
- The demo: when the demo ends, its database is deleted. Before that, we save a summary for each demo wallet: the wallet address, matches, wins, balances, tasks done, friends invited, linked Telegram and Discord ids, and who invited you. We keep it until we decide whether to reward demo players and any reward is settled. No reward is promised.
- Real-money accounts: while your account is open, and after that as long as we need the records for payments, to settle disputes or to meet the law.
- Private round requests: as described above.
- Emails and Telegram messages you send us, and support tickets: as long as we need them to answer you and to show how we handled your request.
Your choices
You can ask us to send you a copy of the data we hold about you, to correct it, to delete it, or to stop using it for a purpose you object to. Write to privacy@memeauction.fun. So that nobody else can ask for your data, we will ask you to show it is yours: by signing a short message with your wallet, by writing from the Telegram or Discord account you linked, or, for a private round request, by writing from the email address you gave and quoting your reference code. We answer within 30 days.
Some things cannot be deleted: what is recorded on a blockchain, what other players have already seen, and records we must keep for payments or by law. Backups are replaced within 4 weeks. Player names cannot be changed, because other players know you by yours. If you have a balance in real-money play, withdraw it before you ask us to delete your account.
Depending on where you live, you may have more rights, including the right to complain to a data protection authority.
Age
Meme Auction is for adults. You must be at least 18 years old to play the game, to buy in the presale or to send a request. If we learn that someone younger has used it, we delete their data.
Security
We use encrypted connections, give only our team access to the data, and store IP addresses and browser ids with matches only as codes. No system is perfectly secure; if a breach puts you at risk, we will tell you. We will never ask for your seed phrase or private key.
Changes
When what we collect changes, we update this page and the date at the top. We announce important changes on our official channels.