Privacy Policy
Privacy-First Design
CypherJester is built with privacy as a core principle. We do not require personal accounts, email addresses, or any identifying information to use the platform. Your gaming session is tied to a Zcash wallet address, not to your identity.
Data We Collect
We collect only the minimum data necessary to operate the platform:
- Zcash wallet addresses — Your deposit and withdrawal addresses, used to process transactions.
- Game records — Bet amounts, game outcomes, and provably fair seed data. Required for verification and dispute resolution.
- Transaction records — Deposit and withdrawal amounts, transaction hashes, and confirmation status.
- Session data — Balance, wagering totals, and responsible gambling limits you set.
- IP addresses — Used temporarily for rate limiting and geo-compliance checks. Poker integrity checks retain a daily keyed network digest linked to a pseudonymous poker identity for 30 days; this digest is not a raw IP address.
Data We Do Not Collect
- Real names, email addresses, or phone numbers (poker uses a nickname)
- Government-issued identification
- Bank account or credit card information
- Location data beyond IP-based geo-checks
- Browsing history or advertising tracking data
- Social media profiles or contacts
How We Use Your Data
- Processing deposits and withdrawals
- Operating the provably fair gaming system
- Enforcing responsible gambling limits you set
- Preventing abuse and fraud
- Complying with legal requirements
Poker Integrity
Poker uses a stable nickname and a pseudonymous identity shared between 21Z.cash and CypherJester. Restoring the same wallet recovery key restores that identity, its time bank and any poker restrictions. The recovery key can access your wallet; never share it.
For integrity investigations we retain encrypted private hand histories, including dealt down cards, betting decisions, response times, time-bank use and outcomes. Undealt decks are excluded from these histories. Access is restricted to authorized administrators and logged; the evidence endpoint only exposes completed hands. Financial receipts remain separate.
A signed first-party poker browser cookie lasts up to 30 days. We compare its random marker and daily keyed network digests to identify possible related accounts playing together. We do not collect browsing history or install software to inspect your computer. These signals can be evaded and shared devices or networks can have legitimate explanations.
Entry security checks are served and verified by our own application. Your browser solves a short computational challenge before taking a seat, with occasional refreshes between hands. The challenge is bound to your poker identity, browser cookie and site, and can only be redeemed once. No external CAPTCHA provider receives these checks. Passing a challenge does not prove a player is human or certify that subsequent poker decisions are human.
Private integrity histories, browser/network observations and review indicators are retained for 30 days. Our hourly cleanup removes expired records and inactive table card displays; live hands retain their operational state until resolved. The identity and financial records persist to support recovery and accounting. Indicators require review and do not automatically ban players or confiscate funds.
Blockchain Data
Zcash transactions are recorded on the blockchain. Transparent address transactions are publicly visible on block explorers. For maximum privacy, we support shielded (z-address) withdrawals. Provably fair commitments are published to the blockchain as part of the verification system.
Cookies & Local Storage
We use browser local storage plus a signed first-party HTTP-only session cookie to remember your current player session in the same browser so you can resume play. We do not use third-party tracking cookies. Admin sessions also use secure HTTP-only cookies for authentication.
Data Retention
- Casino verification records and financial receipts have separate operational retention. Detailed private poker histories and integrity indicators expire after 30 days; cleanup runs hourly. Backups may retain older encrypted copies until the backup retention period ends.
- Transaction records are retained for operational and compliance purposes.
- IP-based rate limiting data is held in memory and cleared on server restart.
- Geo-check logs are retained for up to 30 days.
Third-Party Services
We may use error tracking services (such as Sentry) to monitor platform stability. These services may receive anonymized error data including stack traces and request metadata. No wallet addresses or game data are sent to third parties for marketing purposes.
Data Security
We protect your data with HTTPS encryption, secure HTTP-only cookies, rate limiting, and regular security reviews. However, no system is perfectly secure. You are responsible for safeguarding your own wallet keys.
Changes to This Policy
We may update this privacy policy at any time. Material changes will be communicated through the platform. Continued use constitutes acceptance of the updated policy.
Last updated: September 2026