Privacy Policy

The data controller is HESIOD01 (the site operator), an independent affiliate, not an operator of any gambling service. You can reach us any time via Telegram @Hesiod01 or Discord hesiod01 — see Contact below.

Account data: your username and email address when you create an account or sign in with Google or Apple. Passwords for Google/Apple sign-in never reach us — those providers authenticate you directly.

Reward data (only if you join the cashback programme): the username, USDC wallet address and contact you submit so rewards can be verified and paid. Wallet addresses and other sensitive fields are stored encrypted.

Security and login records: when you sign in, we log the time, your username, your country, your device type, operating system and browser, and the referring page. This keeps accounts safe and shows us how many players are active.

Anonymous usage analytics: clicks and page views are recorded with a random visitor identifier (not your identity), the page and element clicked, the timestamp, your language, country, device and referrer. This tells us which features people use and helps us keep the site trustworthy.

Game data: your virtual Hesiod Coins balance, XP, level and game results. These have no cash value and are not personal data on their own.

Marketing emails: only if you explicitly opt in in your profile. We store the email address, your username and the time of consent. You can withdraw consent at any time.

To create your account and provide the free games and profile (performance of a contract, GDPR Art. 6(1)(b)).

To verify activity and pay affiliate rewards you requested (performance of a contract).

To keep the service secure and prevent abuse — rate limiting, abuse detection, login records (legitimate interest, Art. 6(1)(f)).

To improve the site using anonymous click analytics (legitimate interest, Art. 6(1)(f)).

To send you marketing emails (consent, Art. 6(1)(a) — you gave it and can take it back any time).

Our hosting and database provider stores account and game data. Traffic runs over encrypted HTTPS connections and access is restricted by row-level security rules.

If you sign in with Google or Apple, those companies authenticate your identity under their own privacy policies. We receive only your email address and basic account identifier.

Record-keeping copies of reward sign-ups, login records and click summaries are synced into a private Google Sheets spreadsheet controlled by HESIOD01 for administration and payout verification.

Reward payouts are sent to the USDC (ETH) wallet address you provide. Blockchain transactions are public by nature — anyone can see the address and amount.

We never sell your data and never share it with advertisers.

We do not use third-party advertising or cross-site tracking cookies. We store only what the site needs to work: your language preference, your sign-in session, an anonymous analytics visitor identifier and a queue of unsent game results that is cleared after they sync.

Account data: as long as your account exists, and deleted within 30 days of a deletion request.

Reward and payout records: up to 5 years, where needed to document voluntary payments.

Login and click records: up to 12 months, then deleted or fully anonymised.

Marketing consent records: until you withdraw consent, plus a short record of the withdrawal.

Sensitive reward fields (wallet addresses, contact details) are encrypted at rest (AES-256-GCM).

All traffic uses HTTPS. Database access is protected by row-level security so data is only readable by its owner and the site administrator.

Passwords for email sign-in are handled exclusively by the authentication service and are never stored by us in readable form — or in any form we can see.

Forms are protected against spam and abuse (rate limiting, honeypot fields, input validation).

This site is intended for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.