Privacy Policy

Effective September 28, 2026 · Last updated September 28, 2026

This policy explains what personal information Outduel collects, why, and what you can do about it. Outduel (outduel.fun) is operated by Mosco Holdings LLC ("we," "us"), which is responsible for your information.

The short version.

We collect what we need to run accounts, move SOL, run fair bouts, and stop cheaters.
We don't sell your information, and we don't run third-party ads or trackers.
Your username, stats, and bout history are public. Blockchain transactions are public by nature.
We keep device, IP, and wallet records to enforce bans, including across accounts.

1. Information we collect

You give us

Account details: username, password (we store only a salted, one-way hash, never the password itself), and email address if you provide one.
Wallet details: Solana addresses you link, sign in with, deposit from, or save for withdrawals, and the signatures that prove you control them.
Settings: your avatar, preferred game server region, and similar choices.
Communications: messages you send to support, appeals, and reports.
Discord, if you link it: your Discord user ID and username. We use Discord's access token once to link your account and join you to our server, and don't store it.

Created when you use Outduel

Financial records: your balance and a ledger of every deposit, withdrawal, stake, payout, refund, fee, gift, and seizure, with blockchain transaction references.
Gameplay: bouts, opponents, stakes, results, ratings, skill points, cosmetics, and replays of bouts, including the inputs you sent during play.
Anti-cheat data: reports generated from your gameplay (for example, reaction times and input patterns) and any integrity reviews.
Device and network data: IP addresses, a random device identifier stored in a cookie, browser user agent, when you were active, and the ping you measure to our game servers.
Referrals: the referral code you arrived with, and, for affiliates, the players they referred and commission earned.

From third parties

The Solana blockchain: public transaction data for transfers to and from our wallets.
Discord: the profile details listed above, if you link it.

2. How we use it

Purpose	What we use
Create and secure your account, sign you in, and prevent account takeover	Account, wallet, device and network data
Credit deposits, pay withdrawals, settle wagers, and keep accurate books	Financial records, wallet details
Match you with opponents of similar skill and pick a nearby server	Ratings, ping, region
Detect and stop cheating, bots, multi-accounting, fraud, and ban evasion	Gameplay, anti-cheat, device, network, and wallet data
Run leaderboards, profiles, share cards, the shop, and Discord roles	Gameplay and Discord data
Run the affiliate program and prevent referral fraud	Referral, device, and network data
Provide support, handle appeals, and tell you about gifts or changes	Communications, account data
Meet tax, accounting, and other legal obligations, and defend legal claims	Financial records and anything else a law requires
Keep the Service running and improve it	Aggregated usage and gameplay statistics

Where the law asks for a legal basis: we rely on performing our contract with you (running your account and bouts), our legitimate interests (security, fair play, fraud prevention, improving the Service), legal obligations (tax and financial records), and your consent where we ask for it (such as linking Discord).

3. What's public

Your profile at /u/<username> is visible to anyone, even without an account: username, avatar, rating and rank, wins and losses, win rate, net SOL, biggest win, streaks, total wagered, and recent bouts. Your share card shows the same kind of stats.
Leaderboards show usernames with wins, ratings, and net SOL.
Opponents see your username, avatar, and equipped cosmetics.
The blockchain is public. Anyone can see transfers between your wallet and ours. We can't hide or delete them.

4. Who we share it with

We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising. We share it only:

With service providers who run parts of the Service for us: server hosting, Solana RPC providers (which see the transactions we submit and query), and email or support tools if we use them. They may use the data only to provide their service to us.
With Discord, if you link it, to join you to our server and manage your roles.
With your opponents and the public, as described above.
With affiliates, in limited form: an affiliate sees counts and activity of players they referred, not their personal details.
For legal reasons: to comply with law, legal process, or a government request; to enforce our Terms; or to protect the rights, property, or safety of our players, the public, or us, including fraud and theft investigations.
In a business transfer: if Mosco Holdings LLC or Outduel is merged, acquired, or sold, information may transfer to the new owner under this policy.

5. Cookies and local storage

We use only first-party cookies needed for the Service to work. No advertising or third-party tracking cookies.

Name	What it does	Lasts
Session cookie	Keeps you signed in	30 days, renewed as you use the site
`defi_device`	A random device identifier for security, fraud prevention, and ban enforcement	Long-lived
Beta access cookie	Remembers that you entered a beta code	30 days
Discord state cookie	Protects the Discord linking flow	A few minutes

Your browser's local storage keeps your per-game settings (graphics, sound, controls) and a referral code you arrived with. These stay on your device.

6. How long we keep it

Account and gameplay data: while your account is open, and for a reasonable time after it closes.
Financial records and ledgers: as long as tax and accounting laws require, generally at least 7 years.
Ban and fraud records (including IP, device, and wallet identifiers tied to a ban): as long as needed to enforce the ban and prevent evasion.
Sessions and sign-in challenges: deleted when they expire.

7. Security

We hash passwords with argon2id, store only hashes of session tokens, require your password to change where withdrawals go, and use HTTPS. No system is perfectly secure, so please use a strong, unique password and protect your wallet.

8. Your choices and rights

You can update your avatar, region, and withdrawal address, and link or unlink Discord, in Settings. Depending on where you live, you may also have the right to:

access the personal information we hold about you, or get a copy of it;
correct inaccurate information;
delete your information;
object to or restrict certain processing; and
not be discriminated against for exercising these rights.

To make a request, email support@outduel.fun from the email on your account or tell us your username. We'll verify it's you before acting, and reply within the time the law requires (normally 30 to 45 days). Some information we must keep even after a deletion request: financial records required by law, records needed to enforce a ban or prevent fraud, and anything already recorded on the public blockchain. If you're in the EEA or UK, you may also complain to your local data protection authority.

9. Children

Outduel is only for people 18 and older. We don't knowingly collect information from anyone under 18. If we learn that we have, we'll close the account and delete the information, except what the law requires us to keep. If you believe a minor is using Outduel, email us.

10. International transfers

We're based in the United States, and our servers may be in the United States and other countries where we run game servers. By using Outduel, your information may be processed in countries whose data protection laws differ from yours. Where required, we use appropriate safeguards for these transfers.

11. Changes

We may update this policy. We'll post the new version here with a new "Last updated" date and, for material changes, let you know on the site.

12. Contact

Mosco Holdings LLC, operator of Outduel
Email: support@outduel.fun