Last updated 29 August 2026
Wargrum is operated by Superviolet LLC, a Wyoming limited liability company doing business as Wargrum ("we", "us"). This policy explains what we collect when you visit wargrum.io, play the game at play.wargrum.io, or buy a card pack, and what you can ask us to do about it.
Read this part first: some of your data goes on a public blockchain and cannot ever be deleted. When you buy a pack, the cards are minted as native assets on Cardano or Solana. The wallet address that receives them, the transaction, and the card metadata become part of a permanent public ledger that we do not control and cannot edit, hide, or erase. Anyone in the world can read it, forever. Everything else in this policy is deletable on request; that is not.
Your email address, and a username you choose. We sign you in by emailing you a one-time code, so your email is how your account is identified. Your username is visible to other players in matches and on ledgers; your email is not.
Your decks, card collection, match history, moves, and any chat you send during a match. Multiplayer works by syncing these between the players in a match in real time.
Blockchain addresses you connect, and addresses of the managed wallets we create for you. If you use a managed wallet, its keys are held by our minting partners on your behalf (NMKR for Cardano, Crossmint for Solana), not by you and not directly by us.
Order records: what you bought, on which chain, when, how much you paid, and the resulting cards. If you pay by card, your card details go directly to Stripe and never reach our servers. We cannot see your card number. Stripe returns us your billing email and country so we can deliver the cards and answer support questions.
We record how people move through the site and the purchase flow: pages viewed, which buy button was pressed, whether a checkout opened, whether an error appeared, along with your browser, device type, and an approximate location derived from your IP address. We also record session replays (a reconstruction of what happened on screen during a visit) and automatic error reports. We use this to find the places where the product is broken; the wallet-connect and checkout steps in this product were both fixed because this data showed people getting stuck.
If you create an account and confirm your email address, we add you to our mailing list so we can tell you about releases. Every message has an unsubscribe link, and unsubscribing does not affect your account or your cards.
A sign-in cookie, which is required for the site to know you are logged in, and analytics cookies used for the diagnostics above. We do not run advertising cookies and we do not sell your data to advertisers.
We use these companies to run the service. They act on our instructions and each has its own privacy policy.
| Company | What it does for us |
|---|---|
| Supabase | Database and sign-in |
| Stripe | Card payments (they hold the card data, we never do) |
| NMKR | Cardano minting and managed wallets |
| Crossmint | Solana minting and managed wallets |
| PostHog | Product analytics, session replay, error tracking |
| Klaviyo | Email delivery |
| Blockfrost, Helius | Reading the Cardano and Solana blockchains |
| Vercel, Netlify, Railway | Hosting |
We do not sell your personal information, and we do not share it with anyone for their own marketing.
Account and purchase records last as long as your account does, and for up to seven years after it closes where tax and accounting rules require it. Analytics and session replays are kept for a limited period and then discarded. On-chain records are permanent, as described above.
Wherever you live, you can ask us to:
If you are in California, the CCPA gives you these rights specifically, plus the right not to be discriminated against for using them. If you are in the UK, EU, or EEA, the UK GDPR and GDPR give you these rights plus the right to complain to your data protection authority.
Email info@wargrum.io and we will respond within 30 days. We may need to confirm you control the email address on the account before acting.
The limit on deletion: we can erase your account, your email, your gameplay history, and your analytics records. We cannot erase a blockchain. Cards already minted stay in the wallet that holds them and stay recorded on-chain, whether or not your Wargrum account exists.
Traffic is encrypted in transit. Sign-in uses one-time emailed codes rather than passwords you have to remember, so there is no Wargrum password to steal. Card data never touches our systems. No system is perfect, and we will tell you promptly if a breach affects you.
Wargrum is not directed at children under 13, and we do not knowingly collect their data. You must be 18 or older to buy anything. If you believe a child has given us personal data, email us and we will delete it.
We are based in the United States and our providers are largely US-based, so using Wargrum means your data is processed in the United States under safeguards appropriate to your jurisdiction.
If we change this policy we will update the date at the top, and for anything significant we will tell account holders by email.
Superviolet LLC (dba Wargrum)
275 South Arroyo Parkway, Pasadena, CA 91105, United States
info@wargrum.io