Privacy Policy

Effective June 5, 2026

Who we are

This website, anomalygames.ai, is operated by Anomaly Games Inc., a company incorporated in Ontario, Canada (“Anomaly”, “we”, “us”). We are the controller of the personal information described in this policy, and we handle it in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy covers this website only. Our games — including Pocket Knights and Don’t Die — run on their own domains and are governed by their own policies.

What we collect and why

Contact form

If you use the contact form, we collect your name, email address, and message. This information is delivered to our inbox as an email (via Resend, our email delivery provider) so we can respond to you. It is not stored in a database by the website.

When you submit the form, your IP address is used in two ways: to enforce a rate limit on submissions (held in temporary storage for up to one hour, then deleted), and shared with Cloudflare as part of the bot-protection check described below.

Wallet connection and NFT minting

Some pages on this site let you connect a crypto wallet and mint NFTs. If you use them, we process your wallet address to issue a one-time signing nonce (held in temporary storage for up to 24 hours), verify your signature, check mint eligibility, and execute the mint. Completed transactions are recorded on a public blockchain, which is operated by no one party and cannot be altered or erased — by us or anyone else.

Our wallet-linking pages are typically reached from Telegram with an identifier included in the link. We pass that identifier to our wallet-linking service (wallets.anomalygames.io) to look up the wallet associated with your account. The website itself does not store your Telegram ID.

Bot protection (Cloudflare Turnstile)

We use Cloudflare Turnstile in invisible mode to protect our contact form from automated abuse. It runs silently — nothing appears on screen — and Cloudflare processes limited information about your browser and your IP address to decide whether you are human. This processing is described in the Cloudflare Turnstile Privacy Addendum and Cloudflare’s Privacy Policy.

Cookies and local storage

This website does not set cookies, and it does not use analytics, advertising, or any other tracking technology. That is why you don’t see a cookie banner.

If you choose to connect a wallet, the wallet libraries we use (wagmi and WalletConnect) store your connection state in your browser’s local storage. This storage exists solely to make the wallet connection work, is never used to track you, and you can remove it at any time by clearing your browser’s site data.

Who receives your information

We don’t sell personal information, and we share it only with the service providers needed to run the site:

Vercel — hosts the website and provides the temporary key-value storage used for rate limiting and signing nonces.
Cloudflare — performs the Turnstile bot-protection check on the contact form.
Resend — delivers contact form submissions to our inbox as email.
WalletConnect — relays the connection between your wallet app and the site, if you connect a wallet.
wallets.anomalygames.io — our own wallet-linking service, which associates Telegram accounts with wallet addresses for the connect and mint flows.
Public blockchains — wallet addresses and mint transactions are recorded on-chain and are publicly visible and permanent.

Some of these providers operate outside Canada (primarily in the United States), and your information may be processed there under the laws of those jurisdictions.

How long we keep it

Rate-limit records (IP address): up to one hour.
Wallet signing nonces: up to 24 hours.
Contact form emails: kept as ordinary business correspondence for as long as we need them to handle your inquiry.
Blockchain records: permanent by design and outside our control.

Your rights

Under PIPEDA you may request access to the personal information we hold about you, ask us to correct it, or withdraw consent to its use (subject to legal and contractual limits). Write to us at info@theanomaly.xyz and we’ll respond. If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

If you are in the European Economic Area or the United Kingdom, you additionally have the rights granted by the GDPR — including access, rectification, erasure, restriction, portability, and objection — exercisable through the same contact address. Our legal bases for processing are consent (contact form), legitimate interests (security, rate limiting, bot protection), and the performance of the actions you request (wallet connection and minting).

Children

This website is not directed at children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction.

Changes to this policy

If we change this policy, we’ll update the effective date at the top of this page. Material changes — like introducing analytics — would be reflected here before they take effect.

Contact

Privacy questions and requests: Privacy Officer, Anomaly Games Inc., info@theanomaly.xyz.