Privacy policy

Effective 5 November 2026

This policy explains what the Bull Run game (the Android app and the web version at bullrun.fans) collects, why, and how you can delete it. Bull Run is made by appmasterpro ("we"). Contact: [email protected].

The short version

You can play without an account, a wallet or any personal information.
No ads, no analytics, no tracking cookies, and we never sell data.
If you join the online leaderboard, we store the name you choose and your scores.
We never see your wallet's private keys or seed phrase.
You can delete your online account at any time, in the game.

Stored only on your device

Your progress, best scores, settings, level-editor draft, and your player name and sign-in token are saved in the app's own storage (or your browser's storage on the web). They never leave your device unless you use the online features below. Uninstalling the app or clearing site data removes them.

Online leaderboard (optional)

When you set a leaderboard name, our server stores:

the name you choose,
a random player ID, and a hash of a random secret token that proves the name is yours,
your scores on each level and daily challenge, with the time you set them.

Your name and scores are shown publicly on the leaderboards.

Wallet verification (optional)

If you verify a Solana wallet, your wallet signs a one-time message and we store the wallet's public address with your player. A shortened form of the address is shown on the leaderboards. We do not store the signature, and we never have access to your wallet or funds.

Supporter Pack purchases (optional)

The Supporter Pack is paid in USDC on the Solana blockchain, directly from your wallet. To prepare and check the payment, our server looks up public blockchain data for your wallet (its USDC and SOL balances) and stores:

your order (your player ID, the paying wallet's public address, the price and the time; unpaid orders are deleted after 7 days),
for completed payments, the paying wallet's public address, the transaction signature, the amount and the time.

We keep completed payment records even if you delete your account, as proof of payment and so you can restore the pack later by verifying the same wallet. Blockchain transactions are public and permanent by design: anyone can see a payment on the Solana network, and no one, including us, can delete it.

Network and service providers

Our server uses your IP address briefly, in memory, to limit abuse (rate limiting). It is not saved with your data.
The website is hosted by Cloudflare. Connections to the game server pass through Tailscale. These providers process connection data such as IP addresses under their own privacy policies.
To read blockchain data, the server sends wallet addresses and transaction signatures to a Solana RPC provider.
Wallet apps (for example Seed Vault, Phantom or Solflare) handle signing under their own privacy policies.

Keeping and deleting your data

We keep your online data until you delete it. To delete your account, open Leaderboard → Delete account in the game. This removes your name, wallet link and all your scores from our server immediately. You can also email us to ask for deletion, a copy of your data, or a correction. Payment records are kept as described above.

Children

Bull Run is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an online account, email us and we will delete it.

Changes

If this policy changes, we will update this page and its effective date. Significant changes will also be mentioned in the app's release notes.