← back to sidebet

Privacy Policy

Last updated: 14 August 2026

The short version. Your wallet address is your account — there is no email, no password, and no profile to fill in. We store the social activity you create here (who you follow, challenges you send and accept). We never hold your funds or keys, we don't run analytics or advertising trackers, and we don't set cookies.

1. Who operates sidebet

sidebet is an independent project operated by an individual, not a registered company. It is not affiliated with, endorsed by, or operated by Polymarket.

Questions about this policy or your data: info@sidebet.cash

2. What we collect

Only what the features you use actually require. Nothing here is bought from or sold to third parties.

DataWhyWhen
Wallet address It is your account identifier — it's how sign-in, your squad, and your challenge history work When you sign in
Display name & avatar Shown on your challenges. Read from your public Polymarket profile if one exists for your address; otherwise it's just a shortened address When you sign in
Who you follow To build your squad feed When you follow someone
Challenges The market, side, amount, and both parties — this is the core feature When you create or accept one
Notifications So you see what happened while you were away Generated by challenge activity
Plus payment record Transaction hash and date, to verify your subscription on-chain Only if you buy Plus
Telegram chat ID To send you notifications there Only if you link Telegram
Discord webhook URL To post notifications to your channel Only if you link Discord
Session token Keeps you signed in. Expires automatically and is then deleted When you sign in

Sign-in does not expose anything private

Signing in means signing a message with your wallet to prove you control the address. It is free, sends no transaction, and grants us no permission to move anything. We never see or ask for your private key or recovery phrase, and no legitimate service ever will.

3. What we don't collect

4. Stored in your browser

These live in your browser's local storage on your own device — not on our servers. Clearing your browser data removes them.

5. Who else sees data

Polymarket

All market data is fetched through our own server rather than directly from your browser. A practical privacy consequence: Polymarket sees our server, not your IP address or which markets you personally browse. If you click through to trade on polymarket.com, you are then on their site under their privacy policy.

Polygon RPC providers

Your wallet balances are read directly from public Polygon nodes by your browser. Those providers can therefore see your IP address alongside the wallet address being queried. This is normal for any wallet-connected site, but it is the one place your IP and address meet a third party.

MoonPay (only if you buy USDC in-app)

Card and Apple Pay purchases are handled entirely by MoonPay on their own hosted checkout. They collect your payment and identity details directly — we never see your card number or identity documents. We pass them only the destination wallet address and the amount. Their privacy policy governs that transaction.

Optional integrations

WalletConnect (if you connect that way), Telegram and Discord (only if you link them) each receive the minimum needed to work, under their own policies.

Infrastructure

The site is hosted on Vercel and the backend runs on Fly.io in Toronto, Canada. Both process traffic on our behalf as service providers.

6. Blockchain payments are public and permanent

Plus subscriptions are paid as a normal USDC transfer on Polygon. Public blockchains are permanent and world-readable: the payment, both addresses, the amount, and the time are visible to anyone forever, and neither we nor anyone else can delete or reverse them. This is inherent to how blockchains work, not a choice we made.

7. How long we keep things

You can unlink Telegram or Discord at any time in the app, which deletes that link immediately, and signing out clears everything stored in your browser. To have your account and its server-side data deleted, email info@sidebet.cash from any address and include your wallet address. Two things are worth knowing about deletion generally: on-chain payments cannot be erased by anyone, and a challenge necessarily involves another person whose record of it also exists.

8. Age

sidebet is for adults only — 18+, or 21+ where required locally. It is not directed at children and we do not knowingly collect their data.

9. Changes

If this policy changes materially, the date at the top will change. sidebet is actively being built, so expect this to be revised as features land.