Privacy & Cookie Policy

Last updated: August 2026

Solflash is built to work with as little personal data as possible. No advertising trackers, no analytics cookies, no consent banner: we simply do not collect what we do not need. This policy explains, in plain language, what we do collect, why, and what your rights are.

1. Who We Are (Data Controller)

Solflash is an on-chain casino on the Solana blockchain, available only where lawful. It is operated by Tessera Labs S.R.L., a company incorporated in Costa Rica (corporate ID / cedula juridica 3-102-969810), which is the controller responsible for the personal data described in this policy.

2. Data We Collect

Solflash has no classic player account, so we do not ask you to register or log in to play. You play by connecting your Solana wallet. On-chain games are non-custodial and tied to your public wallet address, not to your identity. We record your wallet address, your bets, and your results in order to operate the games and display your history. We never hold your funds or your keys. Technical data: our hosting providers keep short-lived server logs (IP address, requested URL) for security and abuse prevention.

3. Cookies We Use

We only set cookies that are strictly necessary or requested by you: ui_lang (remembers your language), and market and cc (remember your market and region preference). We set no advertising cookies and no tracking cookies. This is why you see no cookie banner: under EU/CNIL rules, consent is only required for non-essential cookies, and we use none.

4. Analytics (Cookieless)

We measure site traffic with Cloudflare Web Analytics, a privacy-first tool that uses no cookies, no localStorage, and no fingerprinting. Because it stores nothing on your device, it triggers no consent requirement and no cookie banner. It gives us anonymous, aggregated statistics (page views, referrers, countries) and cannot identify you or follow you across sites. We use no other analytics tool.

5. Why We Process Your Data (Legal Bases)

Performance of a contract: operating the on-chain games you choose to play. Legitimate interest: keeping the service secure, measuring aggregate traffic, and preventing abuse.

6. Who We Share Data With

We never sell your data. We rely on a small number of processors to run the service: our website hosting provider, our database provider, and our network, security, and anonymous-analytics provider. We place no third-party advertising pixels on our pages.

7. International Data Transfers

Some of our processors are based outside the European Economic Area and may process or store data there. Where such transfers occur, they are covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses, so that your data keeps a level of protection equivalent to that of the GDPR. On-chain data (see section 8) lives on a public, globally distributed blockchain by design.

8. Blockchain Data

Play happens on the Solana blockchain, a public ledger. Your wallet address, bets, and results are publicly visible on-chain by design, and blockchain data cannot be altered or deleted by anyone, including us. A wallet address is pseudonymous: it does not reveal your identity unless you link it to yourself elsewhere.

9. Data Retention

Game records tied to wallet addresses are kept for the operation and integrity of the games. Server logs are short-lived. On-chain data is permanent and outside anyone's power to erase (see section 8).

10. Your Rights

Under the GDPR you can ask us to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent at any time. Contact us on Telegram at [TELEGRAM_CONTACT] and we will respond within one month. You can also lodge a complaint with your data protection authority (in France, the CNIL at cnil.fr). Note that on-chain data is immutable and outside anyone's power to erase (see section 8).

11. Age Requirement

Solflash is strictly reserved for adults aged 18 or over (or the legal gambling age in your jurisdiction). We do not knowingly collect data from minors.

12. Security

We apply appropriate technical and organizational measures: encrypted connections (HTTPS), strict content security policies, server-side isolation of credentials, and regular security audits of both the website and the on-chain programs.

13. Changes & Contact

We may update this policy as the service evolves; the date above always reflects the latest version. Questions or requests: contact us on Telegram at [TELEGRAM_CONTACT].

This policy is subject to change. Please check back periodically for updates.