Effective: May 14, 2026
This Privacy Policy describes how Soul Rush and Los Muertos Avatars ("we," "us," "our") collect, use, and protect information when you use our website at soulrushgame.xyz ("the Site"). We are committed to protecting your privacy and being transparent about our practices.
Information you provide:
When you authenticate via X (formerly Twitter), we receive your X user ID, username, display name, and profile image URL. When you enter a contest, we store this information along with a locally generated player ID. We do not collect your X password.
Information collected automatically:
When you play Soul Rush, we collect gameplay data including scores, completion times, souls collected, dashes used, wraith hits, distance traveled, and leaderboard rankings. For each muerto played, we keep an aggregate "Spirit Energy" record (total points, games played, games won, best time, best points) and a rolling history of the most recent runs. We use browser localStorage to track game state and contest progress (such as whether you have played and shared). We use Vercel Analytics for aggregate, privacy-preserving page-view metrics — it does not set cookies, does not track individuals across sites, and does not collect personal information.
On-chain and public NFT data:
The Site does not require you to connect a crypto wallet. Some features (Graveyard lookup, leaderboard badges, the muerto detail page) read public information from the Los Muertos World staking contract on the Ethereum mainnet (0x031ac90dcb0f59ac3a73a4a4dfaf1d88ad03ef0c) and the Los Muertos World NFT contract (0xc878671ff88f1374d2186127573e4a63931370fc). Token IDs and wallet addresses you enter into the lookup tool are sent to a public Ethereum RPC provider to resolve the query; we do not persist these searches. All data returned (staking timestamps, ownership, staking level) is already publicly visible on the blockchain.
We use collected information to:
Operate and display leaderboards; verify contest entries and prevent duplicate submissions; identify contest winners and facilitate prize delivery; improve the game experience; and display your username on public leaderboards (if you submit a score).
We do not sell, rent, or trade your personal information. Your data may be visible in the following contexts: leaderboard entries (display name and score) are publicly visible on the Site; contest winner usernames may be announced publicly on X. We do not share your information with third parties for marketing purposes.
The Site integrates with X for authentication and sharing. When you sign in with X, you are subject to X's Terms of Service and X's Privacy Policy. We only request read-level access to your X profile and do not post on your behalf without your explicit action.
The Site is hosted on Vercel and uses Vercel Analytics for aggregate page-view metrics. Game data is stored in MongoDB Atlas. The Site queries the Ethereum mainnet through a public RPC provider (currently publicnode.com) and fetches muerto images through a public IPFS gateway (by default ipfs.io). When your browser loads these resources, the RPC and gateway operators receive your IP address and the URL of the asset being requested. These providers may process data on our behalf in accordance with their respective privacy policies.
We use a signed HTTP-only cookie to maintain your X authentication session. This cookie contains your X user ID, username, and display name, and expires after 7 days. We use browser localStorage to store gameplay state and contest progress flags. We do not use advertising cookies or third-party tracking cookies.
Leaderboard and per-muerto Spirit Energy data are retained indefinitely to maintain historical rankings and rewards. Per-game history is capped to the most recent 50 runs per muerto. Contest entry data is retained until the contest concludes and prizes are delivered, after which it may be deleted. Authentication cookies expire automatically after 7 days. On-chain data (such as staking timestamps and wallet ownership) is stored permanently on the Ethereum blockchain and is outside our control.
We use signed cookies and HTTPS to protect data in transit. Authentication tokens from X are not stored — we only retain the minimal profile information needed to identify your account. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
You may request deletion of your data by contacting us. You can clear your local game data at any time by clearing your browser's localStorage for this site. You can revoke the Site's access to your X account at any time through your X Connected Apps settings.
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Site after changes constitutes acceptance of the revised policy.
Questions about this Privacy Policy? Reach out on X at @arcbuilds