Privacy policy

Last updated October 16, 2026

Who we are

Dragon Pets is made by Dimos, an independent developer, who decides how this data is used (the “controller”). Contact: support@dragon-pets.com. This policy covers the Dragon Pets Android app and dragonpets.app.

Your wallet and the blockchain

• When you connect, your wallet tells the app your public address. The app never sees your recovery phrase or private keys, and it can’t move anything without your approval in the wallet.
• Everything you do in the game is a Solana transaction: hatching, feeding, breeding, listing a stud, earning from a breed. Transactions are public and permanent, and they name your address. Neither we nor anyone else can delete them.
• To show the game quickly, our servers keep a copy of that public data: each dragon with its traits, owner and the wallet that hatched it, each feed with the feeder’s address, and each hatch and breed with the payer and the stud’s owner. Anyone can read this copy through the app, the site and our public API, just as they can read the blockchain.
• The names you give your dragons are kept on our servers, not on the blockchain. They are public: in the app, on each dragon’s page on this site, and in the dragon’s metadata, which wallets and marketplaces display.

Signing in with your wallet

• The app asks your wallet to sign a short “Sign in to Dragon Pets” message. We check the signature and keep your address, a fingerprint (hash) of the signature so it can’t be reused, and when you signed in.
• We check whether your wallet holds a Seeker Genesis Token, to give Seeker owners more room on our servers, and keep which token we saw so one token counts for one wallet.
• We also look up your .skr name to show it in the app (kept 7 days), and which dragons your wallet holds (refreshed each time it’s checked).
• The app keeps a sign-in token on your phone. It lasts 30 days and renews while you play, for up to 180 days.

App usage and errors

• When it’s first opened, the app makes up a random install ID and keeps it on your phone. It isn’t derived from your phone, your wallet or anything about you, and uninstalling the app deletes it.
• With that ID and the app’s version, the app sends us usage events: which steps of the game were reached (“hatched”, “fed”, “opened the stud deck”), how long things took, and sometimes which dragon was picked. A dragon’s owner is public, so an event that names a dragon can point to a wallet.
• When something breaks, the app sends an error report: the error message and the technical trace of where it happened. These can include a wallet or dragon address when one was part of what failed.
• If you report a dragon’s name from its page in the app, we keep which dragon, the name it had and your install ID, so we can check it against the rules for names in our terms. The report reaches our private alerts channel (on Slack). The dragon’s owner isn’t told who reported it. Reports are deleted after 90 days.
• We use this only to find bugs and see which parts of the game work. Short error summaries reach our private alerts channel (on Slack) so we notice quickly. The app doesn’t send your device model, operating system version, contacts, location or any advertising ID.

IP addresses

• Like any server, ours see your IP address when the app or this site talks to them. To stop abuse, we keep it for 2 minutes in a rate-limit counter (IPv6 addresses shortened), then delete it.
• Our hosting providers keep standard request logs, which include IP addresses: our servers’ logs for up to 7 days, and Vercel’s (this site) under its own policy.

On your phone

• The app asks only for internet access and vibration. No camera, microphone, contacts, location or files.
• It stores, on your phone only: the install ID, your sign-in token, the wallet connection your wallet app granted, your dragons and game progress, the names you reported (so they stay hidden for you), and error reports waiting to be sent. Disconnecting your wallet in the app removes the connection and the sign-in token.
• The app includes Google’s ML Kit, which reads QR codes on the phone itself, for a QR scanner that is switched off in this version. The app can’t use the camera, and we never call ML Kit. Google says ML Kit can send it performance and usage metrics.

Who else handles data

• Supabase runs our servers and database, in Frankfurt, Germany.
• Vercel hosts this site.
• Helius provides our Solana data. Our servers pass it the app’s blockchain requests, which include wallet addresses, but not your IP address.
• Solana’s public servers (api.mainnet-beta.solana.com): if our servers can’t answer, the app asks them directly, so they see your IP address and the request.
• Our dragon image server (dragons.dp-utils.com, behind Cloudflare) draws each dragon from its traits. Your phone fetches the pictures from it directly.
• Slack receives our alerts.
• Your wallet app (Seed Vault, Phantom, Solflare or another) handles signing under its own privacy policy.
• The Solana dApp Store, run by Solana Mobile, handles installing and updating the app under its own privacy policy.
• Links you choose to open, such as Jupiter to get SKR or Solana Explorer, go to those sites under their policies.

Some of these companies are based in the United States, so some of this data is processed there.

This site sets no cookies and runs no analytics. The dragon counter on the home page reads one public number from our database. A video plays from YouTube (its privacy-enhanced mode) only when you press play.

How long we keep it

Delete your data

• Email support@dragon-pets.com with the subject “Delete my data” and your wallet address. To make sure the wallet is yours, we may ask you to sign a short message with it, or to send a tiny amount from it.
• Within 30 days we delete your sign-in records, the Genesis Token check, the cached .skr name and list of your dragons, and any error reports that mention your address, and we remove the names you gave your dragons. We’ll tell you when it’s done.
• What we can’t delete: your transactions on Solana, and our copy of that public data, which anyone can rebuild from the blockchain. Your dragons stay in your wallet.
• Usage data under your install ID expires on its own after 14 days (events) and 90 days (errors and name reports). Uninstalling the app deletes the install ID and everything else the app stored on your phone.

Your rights

You can ask us for a copy of the data we hold about your wallet, to correct it, to delete it, or to stop using it, by writing to the address above. We use this data to run the game you asked for, and, for usage events, error reports and rate limits, because we have a legitimate interest in keeping the game working and safe. If you think we’ve handled your data wrongly, you can complain to your local data protection authority.

Children

Dragon Pets isn’t made for children, and we don’t knowingly collect data from them. If you think a child has used it, write to us and we’ll delete what we can.

Changes

If we change what we collect, we update this page and the date at the top first.