🔒 Privacy

Only what each feature needs. If you just browse the radar, GORZ stores no name, email or account.

• Player (Game Mode): the player name you pick, a random player id, and your paper trades, balances, XP, trophies, follows, reactions and game scores. Your sign-in key is saved in your browser; the server keeps only a scrambled (hashed) copy.
• Linked accounts (optional): if you verify, your wallet address, your X handle and X user id, or your Telegram id and username. When you sign in with X, GORZ does not keep your X login token.
• GORZ Weekly (optional): your email address, when you agreed and confirmed, and which issues were sent to you.
• Push alerts (optional): the push address your browser gives us, so we can send the alerts you turned on.
• Telegram bot: the chat id and coins a group asked the bot to track.
• Payments and trades through GORZ: the transaction id, your wallet address, the amount and what it was for (trades, orders, trader card looks, paper refills, API plans, referral rewards).
• API customers: the plan, the paying wallet, the contact details or email you give us, and daily request counts.
• Share pictures: card and share images you create are saved so links to them show a preview.

• No cookies and no ad or tracking scripts. No Google Analytics, no session recording, no ad networks. Fonts are served from gorz.app itself.
• To count visitors, your browser keeps a random visitor id (not linked to your name) and GORZ counts page views per day, plus which website sent you there.
• Your browser also keeps your settings (filters, watchlist, layout) and your player sign-in on your own device. Clearing your browser data removes them.
• IP addresses are used to stop spam and abuse (rate limits). They're held briefly in memory and passed to GORZ's own backend server for that purpose. Where GORZ needs to remember them (newsletter and API sign-ups, free API limits), it stores only a scrambled (hashed) version.
• GORZ runs on Cloudflare, which handles every request and may keep its own security logs.

GORZ never sells your data. These services get only what they need to do their job:

• Cloudflare: hosting and storage for the site.
• Resend: sends GORZ emails (GORZ Weekly, and API keys if you ask for them by email), so it receives those email addresses.
• Privy: runs the optional GORZ wallet (login by email, Google or Apple). MoonPay / Coinbase handle card top-ups if you use them. Their own privacy policies apply.
• Wallets and Jupiter: your wallet app (Phantom and others) and Jupiter see the trades and orders you make.
• X and Telegram: only if you choose to sign in or verify with them.
• Push services (Google, Apple, Mozilla, Microsoft): deliver alerts you turned on.
• Pinata / IPFS: stores launchpad coin images and details publicly.
• Blockchain data providers (Solana RPC services such as Helius and Alchemy, DexScreener and others): receive wallet and coin addresses to look up public data.

We may share data if the law requires it.

GORZ analyzes public blockchain data: coins, wallets and transactions anyone can see. Wallet addresses can appear in case files, the Rug Morgue, leaderboards and coin pages. A wallet address on GORZ is an automated observation, not an accusation, and GORZ doesn't know who owns a wallet.

GORZ also reads public posts on Bluesky about Solana coins to find conversations it can reply to, and may reply publicly.

Anything you put on the blockchain or IPFS (trades, launched coins, images) is public and permanent; GORZ can't delete it.

• Email: every GORZ Weekly email has a one-click unsubscribe. After you unsubscribe we keep your address only to make sure you're never emailed again, unless you ask us to delete it.
• Push alerts: turn them off on GORZ or in your browser settings.
• Everything else: to get a copy of your data, fix it or delete it, send a DM to @gorzapp on X or a message in the GORZ Telegram group with your player name or wallet address. We'll reply within 30 days. We may ask you to prove the account is yours, for example by signing a message with your wallet.

Unless you ask us to delete it, we keep data for as long as GORZ runs, so your player, stats and history stay available.

GORZ is for adults 18 and older. We don't knowingly collect data from anyone younger. If you think a child has given us data, contact us and we'll delete it.

Data travels over HTTPS, the server keeps only scrambled (hashed) copies of player sign-in keys, and GORZ never asks for or stores your wallet's private key or seed phrase. Never share your seed phrase with anyone, including anyone claiming to be GORZ.

If this page changes, the date at the top changes too. Questions: a DM to @gorzapp on X or a message in the GORZ Telegram group. The rules for using GORZ are on the Terms page.