Privacy Policy

This policy covers the SHARKCARD website and rewards dashboard (the “Service”). SHARKCARD is an independent rewards platform. It is not affiliated with Rockstar Games, Take-Two Interactive, Apple, Google, X, Microsoft, Sony or Valve. Questions about this policy can be sent to a direct message to @usesharkcard on X.

• Sign-in details. When you sign in with Google, X, Microsoft or Steam, we receive your account ID with that provider, your display name and, where available, your profile picture. From X we also receive your username. We request read-only access and never post, follow or message on your behalf.
• Email sign-in. If you sign in with an email code, we store a one-way hash of your email address (so we can recognise you next time) and a masked version for display. We use your email only to send the sign-in code.
• Reward preferences. Your gaming platform (PC, PlayStation or Xbox), store region and preferred reward tier.
• Wallet address. If you link a Solana wallet, we store its public address and the signed message that proves you control it. Linking never gives us the ability to move your tokens.
• Rewards, orders and payments. Your SOL reward history, Shark Card orders, and for payments made with $SHARK the amount, the paying wallet address and the transaction signature. Redemption codes are stored encrypted and are only shown to the account that owns them.
• Waitlist. If you join a waitlist, we store your email address encrypted.
• Security data. Session records (to keep you signed in), and your IP address for a short time to limit abuse of forms such as the waitlist.

We do not receive or store card numbers or identity documents. If you buy $SHARK through a payment partner such as MoonPay, that partner collects what it needs under its own privacy policy.

• To create your account, sign you in and keep it secure.
• To calculate SOL rewards, process Shark Card orders and deliver codes for your platform and region.
• To verify $SHARK payments on the Solana blockchain and handle refunds.
• To prevent fraud, abuse and duplicate accounts, and to meet legal and accounting obligations.
• To send sign-in codes and, if you joined a waitlist, a message when that feature launches.

We use your data because it is needed to provide the Service you asked for, because we have a legitimate interest in keeping it secure, or because the law requires it. We do not use it for advertising, profiling or training AI models.

We use only essential cookies: one that keeps you signed in, and a short-lived one that protects the sign-in process. There are no advertising or analytics cookies and no third-party trackers.

We share data only with services that help run SHARKCARD, and only what each one needs:

• Render: hosts the website and database (European Union region).
• Google, X, Microsoft and Steam: when you choose to sign in with them.
• Resend: sends sign-in code emails.
• Solana network providers: we query public blockchain data, including wallet addresses, to verify holdings and payments.
• Shark Card distributor: once connected, receives the order details needed to issue a code (product, platform and region), not your name or email.
• Apple: if you add a balance pass to Apple Wallet, Apple delivers pass updates to your device.

We may also disclose data when required by law or to protect the Service and its users. We never sell personal data.

Solana wallet addresses and transactions are public and permanent. We cannot change or delete anything recorded on the blockchain, including payments you make in $SHARK.

• Sign-in sessions expire after 14 days. Email sign-in codes expire within minutes.
• IP addresses used for abuse prevention are deleted within 24 hours.
• Account data is kept while your account is open.
• Order, payment and reward records may be kept after you close your account where needed for accounting, fraud prevention or legal obligations.

You can update your platform and region and unlink sign-in methods or wallets in your account settings. You can ask us to access, correct, export or delete your personal data, or object to how we use it, by contacting a direct message to @usesharkcard on X. We'll confirm the request comes from the account owner before acting on it. If you are in the EU or UK you can also complain to your local data protection authority.

Redemption codes, waitlist emails and other sensitive fields are encrypted. Email addresses used for sign-in are stored only as hashes. Secrets stay on our servers, sensitive values are kept out of logs, and every order and code is checked against the account that owns it. No system is perfectly secure, but we design for failures to stay closed.

The Service is for people aged 18 or older. We don't knowingly collect data from anyone younger.

If we change this policy, we'll update the date above, and for significant changes we'll tell you in the app. See also our Terms of Service.