Privacy Policy
Effective 7 September 2026.
What we collect
Account details: your email address, the sign-in methods you use (a wallet address, a Google account, an emailed link), your username and any wallet addresses you link or whitelist.
Play and money records: every match you play with its moves and timestamps, every ledger entry, deposit, stake, settlement and cash out, and your withdrawal history.
Connection and device data: your IP address and a device fingerprint, recorded at signup and when a real-money match locks, and compared between the seats at a real-money match.
Video and audio
Onsight does not record public tables or matches found through the queue. Match video and audio go directly between players' browsers, or through a relay when a direct connection is not possible, and we do not receive or keep a copy.
Clips in private rooms
In a private room, any player can record a clip. A clip records the whole room: every player's camera and microphone, and the game board, as they appear on the screen of the player who recorded it. That includes your video and your voice if you are in the room. Nothing is recorded until a player presses Clip, and nothing is recorded in the background before anyone presses it.
Before you take a seat in a private room, you are told “Players in this room can record clips.” and we keep a record that you were shown it. Other players are not shown when a clip is being recorded. Recording stops when the player who started it presses Clip again, after 5 minutes, or when they leave the room or lose their connection.
A clip is uploaded to our storage provider, Cloudflare, and kept in the Clips library of the player who recorded it. Only that player can watch it there; the other players in the room cannot, and neither can our staff. Each clip is deleted 90 days after it was made, or sooner if the player who recorded it deletes it. A player's clips can total up to 1 hour, and we ask that player before deleting their oldest clips to make room.
If a player attaches a clip to a player report or a support message, our staff can watch that clip while they review it. The attached copy is kept for 90 days after it is attached, even if the player who recorded it later deletes the clip. Every time a member of staff watches an attached clip, we record who watched it and when.
Streams travel directly between players' browsers where the network allows it. Where it does not, most commonly when one player is on a mobile network and the other is behind a home router, which is a routine case rather than a rare one, the stream is relayed through a third-party relay service to reach the other player. Today that is Cloudflare. A relay passes the media through; it is not a recording, and we do not receive or retain a copy either way. But your stream does traverse that provider's infrastructure whenever a direct connection cannot be made.
Why we hold it
To run matches and settle money correctly, to keep an accurate ledger, to detect collusion and self-play, to secure accounts and investigate account compromise, and to answer your support requests.
Who else processes it
We use these providers, and your data reaches them only as far as their function requires:
- Privy — wallet and sign-in infrastructure.
- Google — sign in with Google, if you use it.
- SendGrid — sending our email (sign-in links, security notices, support replies).
- Cloudflare — relaying match video and audio when a direct connection between players cannot be made, and storing clips recorded in private rooms.
- Alchemy — blockchain access for Base, Ethereum, Polygon and Arbitrum.
- Helius — blockchain access for Solana.
- ChangeNOW — converting bitcoin deposits, if you use one. Your deposit passes through their custody before it reaches your balance.
- Amazon Web Services — hosting, and the key management service that holds the keys to the wallets your funds sit in.
We do not sell your data and we do not share it for advertising.
How long we keep it
Indefinitely, in practice. Ledger entries, match records, audit rows and connection logs are kept for the life of the platform. We run no scheduled deletion and operate no retention window. The only records that expire on their own are short-lived security tokens such as sign-in links.
Your requests
Email [email protected] from the address on your account and we will answer questions about what we hold on you, and close your account on request.
We should be straightforward about our limits here. We have no automated export and no deletion mechanism. Closing an account does not erase its records: ledger entries and match history are retained, because a settled money record is not something we can remove and still keep an accurate ledger. If you are entitled to erasure under a law that applies to you, write to us and we will tell you what we can actually do rather than assume the request is satisfied.
Cookies
What we set in your browser, and why, is on the Cookies page.
Contact
Onsight Support, [email protected].