Skip to content
Feltbit

Privacy

Feltbit is run by Nikhil Sharma. It is designed to collect only the information needed to run the games, secure accounts and reproduce settled rounds.

What Feltbit stores

  • Guest play: a random profile ID, credit balance, play history and the client seed recorded with each round.
  • Member accounts: a username; one-way hashes of the password and recovery code; an optional recovery email and its verification time; account, sign-in and password-change timestamps; and session records including creation, last-seen and expiry times. Feltbit does not store the password or recovery code itself.
  • Email verification and recovery: pending records contain the destination email, a one-way hash of a single-use token, its purpose and its expiry time. Verification links stop working after 24 hours and password-reset links after 30 minutes.
  • Play history: each round's game, wager, result, recorded client seed and server commitment, so the random sequence can be reproduced after settlement.
  • Earlier Sepolia testnet users: the public release no longer offers wallet sign-in, deposits or withdrawals. If you used the earlier testnet feature, Feltbit may retain the public wallet address and related public transaction hashes already recorded.

What Feltbit does not collect

Feltbit does not ask for a legal name, phone number, date of birth or payment-card details. The age screen records only that this browser confirmed the player is 18 or older.

Feltbit does not use advertising or analytics cookies, sell personal information, or share it for marketing.

Cookies and browser storage

The public release uses essential cookies for a guest profile, a signed-in member session and adult confirmation. These cookies are HTTP-only, so browser scripts cannot read them. A legacy wallet cookie exists only for the disabled local/testnet feature.

Theme, sound settings and the chosen client seed are also saved in browser storage. The client seed is sent to Feltbit and stored with each round so the round can be reproduced. Do not put personal information in a client seed.

Abuse prevention

To slow guessing and abuse, Feltbit stores keyed, shortened fingerprints derived from a connection address and, for some account actions, an account identifier such as a username or email. The limiter table does not store those clear values. Active windows range from minutes to one day. Stale buckets are removed opportunistically and may remain longer.

Service providers

Feltbit is hosted on Netlify. Netlify processes hosting requests and keeps operational records under its service terms.

If you choose email recovery, Amazon Simple Email Service processes the destination address and message so Feltbit can deliver verification and password-reset emails.

How long information is kept

Member data remains in the active database until the account is deleted. Guest profiles and their play history currently have no automatic deletion period.

An expired email link cannot be used. Its pending token record may remain until it is replaced by a new request, consumed by a successful verification or reset, removed during a password change or recovery, or removed with the account.

Rate-limit buckets are cleaned up opportunistically and may remain after their active window has ended.

Your choices

  • Download a member account: sign in, open the account panel and choose “Download my data.”
  • Delete a member account: sign in, open the account panel and choose “Delete account.” This removes the account, credits, rounds and active account data from Feltbit's active database.
  • Guest profiles: clearing site cookies removes this browser's access to the guest profile. It does not delete that profile or its stored play history. Contact Feltbit from the address below to request deletion if you still have enough information to identify the profile.

Contact

Privacy questions and legacy-data requests: support@feltbit.com.