> For the complete documentation index, see [llms.txt](https://xignal.gitbook.io/xignal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://xignal.gitbook.io/xignal/legal-and-compliance/privacy-policy.md). # Privacy Policy Last updated: Aug 30, 2026 This Privacy Policy explains how Xignal, the operator of Xignal, collects, uses, stores, shares, and protects information when users access the Xignal website, application, game interface, smart contracts, Marketplace, and related services. In this Privacy Policy, “Xignal,” “we,” “us,” and “our” refer to Xignal. “User,” “you,” and “your” refer to any person who accesses or uses Xignal. By accessing Xignal, connecting a wallet, creating a profile, completing an Operation, using the Marketplace, interacting with supported smart contracts, or communicating with us, you acknowledge the data practices described in this Privacy Policy. This Privacy Policy applies only to information processed by Xignal. Public blockchains, wallet providers, marketplaces, exchanges, bridges, social networks, analytics platforms, and other third-party services operate independently and are governed by their own privacy policies. ### Data Controller The entity responsible for processing personal data through Xignal. Where required by applicable law, Xignal may also appoint a data protection officer or an authorised representative in the European Union, United Kingdom, or another relevant jurisdiction. Their contact details will be added to this Privacy Policy where applicable. ### Information We Collect The information collected by Xignal depends on how a user interacts with the game and its connected services. When a user connects a blockchain wallet, Xignal may process the public wallet address, selected blockchain network, wallet provider, authentication signatures, transaction hashes, asset balances, token ownership, smart contract interactions, transaction timestamps, transaction amounts, network fees, Marketplace activity, and other publicly available blockchain data associated with that wallet. Xignal does not request, collect, or store wallet private keys or seed phrases. Users must never provide private keys or seed phrases to Xignal, its support team, community moderators, or any person claiming to represent the project. Blockchain activity is generally public. Wallet addresses, transactions, asset ownership, smart contract interactions, and related metadata may be viewed and analysed by any person through block explorers, blockchain nodes, analytics tools, or other public services. Where Xignal provides profiles or accounts, we may collect a username, display name, profile image, email address, linked wallet addresses, social media identifiers, referral information, language preferences, regional settings, communication preferences, eligibility confirmations, and other information voluntarily added to a profile. Users should avoid placing sensitive or unnecessary personal information in public usernames, profile images, descriptions, or other publicly visible fields. Xignal may collect gameplay information required to operate the game and maintain player progression. This may include the configuration of a user’s X-Core, installed AI Hardwares, AI Build statistics, available Hardware Slots, Skills, completed Operations, earned and spent resources, Workshop activity, crafting history, repairs, Xignal Assembly progress, Network Layer progression, Marketplace listings, asset transactions, achievements, rankings, rewards, quests, session activity, and in-game preferences. Gameplay information may be associated with a public wallet address, profile, device, session, or internal user identifier. When a user accesses Xignal, certain technical information may be collected automatically. This may include an IP address, browser type, browser version, device type, operating system, language, screen resolution, time zone, approximate location based on the IP address, referring page, exit page, session identifier, crash report, performance data, network information, access time, session duration, and application events. Xignal does not collect precise device location unless a specific feature clearly requests access and the user grants permission. When a user contacts support, reports a problem, provides feedback, participates in a survey, or communicates through an official Xignal channel, we may collect the user’s name, username, email address, wallet address, message content, screenshots, submitted files, transaction information, support request details, and communication history. Users must not send private keys, seed phrases, passwords, or unrelated sensitive information through support requests. When users subscribe to announcements, participate in campaigns, enter events, join an allowlist, complete community quests, or interact with official social channels, we may process an email address, social media identifier, communication preferences, campaign activity, referral source, and engagement with Xignal communications. Marketing messages will be sent only where permitted by applicable law. Where consent is required, users may withdraw that consent and unsubscribe at any time. ### Cookies and Similar Technologies Xignal and its service providers may use cookies, local storage, session identifiers, software development kits, pixels, analytics technologies, and similar browser or device tools. These technologies may be used to maintain sessions, connect wallets, remember user preferences, protect the service, detect suspicious activity, measure performance, analyse feature usage, attribute referrals, understand traffic sources, improve gameplay, and provide relevant communications. Where required by law, Xignal will request consent before using non-essential cookies or similar technologies. Strictly necessary technologies may operate without prior consent where they are required to provide, secure, or maintain the service. Users may manage cookies through the Xignal cookie banner, privacy settings, browser controls, device settings, or available provider opt-out tools. Blocking certain technologies may affect wallet sessions, game functionality, security features, saved preferences, or platform performance. ### Information We Do Not Collect Xignal is designed to work with non-custodial blockchain wallets. We do not intentionally collect or store private keys, wallet seed phrases, or direct custody of user-owned digital assets. Xignal does not directly collect payment card information unless a separate payment feature is provided through an authorised third-party payment processor. In that situation, the payment provider will process the payment data under its own terms and privacy policy. Government identification documents will not be collected unless identity, age, sanctions, or eligibility verification becomes necessary under applicable law. Any such process will be disclosed before the information is requested. Xignal does not intentionally collect special-category or highly sensitive personal data unless it is specifically required, legally permitted, and clearly disclosed. ### How We Use Information Xignal processes information to provide, operate, protect, maintain, and improve the game and its connected services. Wallet and account information may be used to authenticate users, connect profiles, display player-owned assets, verify blockchain transactions, synchronise progression, and enable supported game features. Gameplay information may be used to process Operations, calculate rewards, maintain resources, update Skills, operate the Workshop, enable crafting and repairs, complete Xignal Assembly, manage Network Layers, display rankings, administer quests, provide achievements, and support Marketplace functionality. Technical information may be used to maintain platform stability, diagnose errors, monitor performance, prevent fraud, identify bots, detect exploits, investigate abuse, protect smart contract integrations, secure user sessions, and prevent unauthorised access. Communication data may be used to answer enquiries, resolve technical problems, investigate transaction issues, respond to complaints, provide support, and maintain records of user communications. Xignal may also use information to develop new features, improve game balance, analyse usage trends, conduct aggregated research, enforce the Terms of Service, comply with legal obligations, protect the rights and safety of users, and establish, exercise, or defend legal claims. Where permitted, Xignal may combine information received from the game, public blockchains, service providers, and other lawful sources to improve security, prevent abuse, and provide a consistent user experience. ### Legal Bases for Processing Where the General Data Protection Regulation, the United Kingdom GDPR, or similar data protection laws apply, Xignal processes personal data only where a valid legal basis exists. Certain processing is necessary to perform a contract with the user. This includes providing access to Xignal, authenticating a wallet, maintaining a profile, processing gameplay activity, enabling requested features, operating the Marketplace, and responding to support requests. Other processing may be based on the legitimate interests of Xignal. These interests include maintaining and improving the game, understanding platform usage, securing systems, preventing fraud, detecting cheating, stopping exploits, protecting users and digital assets, communicating essential information, and defending legal rights. Before relying on legitimate interests, Xignal considers the purpose of processing, the nature of the information, and the potential effect on users. Consent may be used for non-essential cookies, optional analytics, marketing communications, surveys, and other processing that legally requires prior permission. Users may withdraw their consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn. Information may also be processed where necessary to comply with legal obligations, respond to lawful requests, maintain required records, cooperate with regulators, fulfil tax or accounting requirements, prevent unlawful activity, or comply with sanctions and other regulatory requirements. In limited circumstances, information may be processed to protect the vital interests, safety, rights, or property of users, Xignal, or another person. ### Public Blockchain Data Xignal operates through public blockchain networks that exist independently from the game and its operator. Transactions submitted to a public blockchain may reveal wallet addresses, transaction values, digital asset transfers, smart contract interactions, timestamps, token ownership, network fees, and other transaction metadata. Blockchain records may be permanent, transparent, publicly accessible, and replicated across independent nodes located in different countries. Xignal generally cannot edit blockchain records, delete confirmed transactions, reverse transfers, remove data stored by independent nodes, control public block explorers, or prevent third parties from analysing blockchain activity. A wallet address may initially appear pseudonymous. However, it may become associated with a particular person through an Xignal profile, public disclosure, exchange account, transaction history, third-party database, social media account, or other information. For this reason, a public wallet address and associated blockchain activity may be treated as personal data under certain privacy laws. Privacy requests involving information recorded directly on a public blockchain may be technically impossible for Xignal to fulfil. Where possible, Xignal may delete, restrict, anonymise, or disconnect corresponding off-chain information stored in systems under our control. Removing information from Xignal does not remove information from the blockchain, public explorers, third-party databases, or independent services. ### Automated Processing Xignal may use automated systems to calculate rewards, process Operation results, track Skills, apply progression rules, determine crafting outcomes, maintain rankings, detect bots, identify exploits, protect the Marketplace, prevent fraud, and recommend relevant game features. These systems may process gameplay activity, technical information, wallet activity, transaction history, and security signals. Standard game mechanics, randomised rewards, balancing systems, and automated progression calculations generally do not produce legal or similarly significant effects outside the game. Where applicable law grants users rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, users may contact Xignal to request additional information or human review. ### How We Share Information Xignal may share information only where necessary to operate the service, fulfil user requests, comply with the law, protect the platform, or support legitimate business operations. Information may be processed by service providers that support cloud hosting, database infrastructure, blockchain nodes, RPC connections, wallet integration, analytics, error monitoring, cybersecurity, customer support, email delivery, content distribution, fraud detection, compliance, legal services, accounting, and technical operations. These providers may process information only for authorised purposes and, where required, under contractual confidentiality, security, and data protection obligations. When a user initiates a blockchain transaction, the relevant transaction information is submitted to a public network. Once confirmed, that information may become publicly and permanently accessible. This disclosure is necessary for blockchain execution and cannot normally be withdrawn. Certain profile and gameplay information may be visible to other users. This may occur when a user creates a public profile, chooses a public username, appears on a leaderboard, lists an asset on the Marketplace, completes a public transaction, participates in an event, shares content, or connects a wallet to a public identity. Information may also be shared with Xignal affiliates or business partners where necessary to provide integrations, organise campaigns, deliver jointly operated features, or maintain the ecosystem. A partner that uses information for its own independent purposes is responsible for its own privacy practices. Xignal may disclose information where reasonably necessary to comply with applicable law, respond to a valid legal request, cooperate with a regulator or law enforcement authority, investigate fraud, address security incidents, enforce agreements, protect users, prevent harm, or establish and defend legal claims. Information may be transferred as part of a merger, financing, acquisition, reorganisation, insolvency proceeding, sale of assets, or transfer of the Xignal project or business. Where required by law, users will be notified of material changes affecting the identity of the controller or the use of personal information. Xignal may also share information where a user expressly requests, directs, or authorises the disclosure. ### Third-Party Services Xignal may connect to independent wallet providers, blockchain networks, RPC services, node operators, bridges, marketplaces, exchanges, payment providers, analytics services, block explorers, social platforms, cloud services, and community tools. These third parties may independently collect wallet addresses, IP addresses, transaction information, device information, identifiers, and usage data. Third-party services are governed by their own terms and privacy policies. Xignal does not control and is not responsible for their privacy practices, security standards, data retention, legal compliance, availability, or use of personal information. Users should review the terms and policies of each third-party service before interacting with it. ### International Data Transfers Xignal, its affiliates, and its service providers may process information in countries outside the user’s country of residence. The laws of those countries may provide a different level of data protection. Where required, Xignal will use recognised safeguards for international transfers. These may include an adequacy decision, standard contractual clauses, approved contractual protections, supplementary security measures, recognised certification mechanisms, or another lawful transfer method. Users may contact Xignal to request further information about the safeguards used for relevant international data transfers. ### Data Retention Xignal retains personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy. The applicable retention period may depend on how long a user accesses Xignal, whether an account remains active, the type of information involved, technical backup cycles, security requirements, fraud-prevention needs, legal obligations, accounting rules, tax requirements, contractual commitments, limitation periods, investigations, and ongoing disputes. When information is no longer required, Xignal may delete, anonymise, or aggregate it. Certain information may be retained for a longer period where necessary to prevent fraud, protect the platform, resolve disputes, enforce the Terms of Service, comply with the law, or establish and defend legal claims. Information permanently recorded on a public blockchain may remain available indefinitely and is not controlled by Xignal. ### Data Security Xignal uses reasonable technical and organisational measures designed to protect personal information from unauthorised access, accidental loss, unlawful disclosure, misuse, alteration, or destruction. These measures may include access restrictions, encryption, secure infrastructure, monitoring, event logging, backups, vulnerability testing, incident procedures, and service-provider assessments. No internet service, database, blockchain, smart contract, wallet, or data transmission method can be guaranteed to be completely secure. Xignal cannot guarantee absolute protection against every security incident, cyberattack, software vulnerability, wallet compromise, or third-party failure. Users remain responsible for protecting their wallets, devices, email accounts, passwords, private keys, seed phrases, browser extensions, and authentication methods. ### Personal Data Breaches If Xignal becomes aware of a personal data breach, we will assess its nature, scope, cause, and potential impact. Where required by applicable law, Xignal will notify the relevant data protection authority and inform affected users within the legally required period. Xignal may also take reasonable measures to contain the incident, investigate its cause, secure affected systems, reduce potential harm, and prevent similar incidents. Incidents involving public blockchains, independent wallet providers, compromised user devices, external platforms, or third-party smart contracts may be outside the direct control of Xignal. ### User Privacy Rights Depending on a user’s location, applicable law may provide the right to access personal data, correct inaccurate information, request deletion, restrict processing, object to certain processing, withdraw consent, receive portable data, obtain information about disclosures, opt out of direct marketing, request review of certain automated decisions, and submit a complaint to a data protection authority. These rights are not absolute. Xignal may refuse or limit a request where processing is required by law, necessary to protect legal rights, technically impossible, connected to public blockchain data, or otherwise exempt under applicable legislation. Before responding to a privacy request, Xignal may need to verify the identity or authority of the requester. For a request associated with a wallet address, verification may require the user to sign a message using the relevant wallet. Xignal will never ask for a private key or seed phrase. Privacy requests may be submitted to email. Xignal will respond within the period required by applicable law. ### Blockchain Limitations Certain privacy rights cannot be fully applied to information stored on a public blockchain. Because confirmed blockchain data may be permanent and distributed across independent nodes, Xignal may be unable to erase, correct, restrict, or prevent the continued processing of that information. Where technically possible, Xignal may remove associated information from its own interface, delete off-chain profile data, disconnect a wallet from an internal account, stop optional processing, or restrict the internal use of certain records. These measures do not delete copies of information stored on a blockchain, public explorer, third-party platform, external database, or independent service. ### Marketing Communications Xignal may send product announcements, event information, campaign updates, and other marketing communications where permitted by applicable law. Where prior consent is required, marketing messages will be sent only after the user provides that consent. Users may unsubscribe through an email unsubscribe link, available communication settings, or by contacting email. Unsubscribing from marketing does not prevent Xignal from sending essential operational messages. These may include security alerts, transaction information, service updates, policy changes, account notices, and other communications necessary to operate the service. ### Children’s Privacy Xignal is not intended for children below the minimum age required by applicable law or the eligibility requirements stated in the Terms of Service. We do not knowingly collect personal data from children in violation of applicable law. If Xignal becomes aware that a child’s information was collected without valid authorisation, we will take reasonable steps to delete or restrict that information. A parent or legal guardian who believes that a child has unlawfully provided personal data may contact email. Blockchain transactions, digital assets, wallet services, and third-party platforms may be subject to additional age restrictions based on the user’s jurisdiction. ### Regional Privacy Disclosures Users located in the European Economic Area or the United Kingdom may exercise the rights provided by the GDPR or UK GDPR. They may also submit a complaint to the data protection authority responsible for their residence, workplace, or the location of an alleged infringement. Where these laws apply, Xignal processes personal data on the basis of contractual necessity, legitimate interests, consent, legal obligations, vital interests, or another recognised legal basis. Residents of California and certain other United States jurisdictions may have rights to know what personal information is collected, access that information, correct inaccurate information, request deletion, receive details about disclosures, opt out of certain sales or sharing, limit certain uses of sensitive information, and appeal a denied request. Xignal does not sell or collect wallet private keys or seed phrases. Whether analytics, advertising, or referral technologies qualify as a sale or sharing of personal information depends on the technologies used and the applicable legal definition. Where required, Xignal will provide appropriate notices and opt-out controls. Users in other jurisdictions may have additional rights under local privacy laws. Xignal will comply with mandatory legal requirements that apply to its processing activities. ### Aggregated and De-Identified Information Xignal may create aggregated, statistical, or de-identified information that is not reasonably capable of identifying an individual user. This information may be used to analyse gameplay, understand ecosystem activity, improve game balance, measure technical performance, develop new features, publish network statistics, conduct research, prevent abuse, and support business planning. Where required by law, Xignal will not attempt to re-identify information maintained in a de-identified form. ### Changes to This Privacy Policy Xignal may update this Privacy Policy when its features, service providers, data practices, security procedures, legal obligations, or business structure change. The latest version will display a revised “Last updated” date. Where changes materially affect how personal data is processed, Xignal may provide additional notice through the website, game interface, email, or another appropriate communication channel. Where applicable law requires renewed consent, Xignal will request it before beginning the relevant processing. ### Contact Information Questions, privacy requests, and complaints may be submitted using the following details: Privacy email: X: Official website: Users should not include private keys, seed phrases, passwords, or unrelated sensitive information in any message sent to Xignal. Where applicable, users may also submit a complaint to the data protection authority responsible for their location. We encourage users to contact Xignal first so that we can review and attempt to resolve the issue directly. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://xignal.gitbook.io/xignal/legal-and-compliance/privacy-policy.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.