← back
— LEGAL —

Privacy Policy

Last updated: September 19, 2026

This Privacy Policy (the "Policy") explains how BlockLive, Inc. ("BlockLive", the "Company", "we", "us", or "our") collects, uses, and shares data in connection with the Chart Arena game, the chartarena.xyz website, the Chart Arena iOS application, the Chart Arena content channels on third-party platforms (including TikTok, X, YouTube, and Instagram), and all related properties, products, and services (collectively, the "Services"). Your use of the Services is also subject to our Terms of Service.

High Level Summary

  • BlockLive is a U.S.-incorporated company based in Delaware that operates Chart Arena among other products and services. BlockLive complies with applicable U.S. laws and regulations.
  • We do not require or collect traditional personal data (legal name, postal address, date of birth) to play Chart Arena or watch our content.
  • When you log in, your login method (such as an email address, a passkey, a wallet, or Sign in with Apple) is associated with your Chart Arena account and with the wallets created for or connected to it.
  • If you use Crypto Mode, we also process the data needed to place your trades on Perpl, a third-party protocol. This includes a trade-only key for your Perpl account, which we store encrypted, and your order and position history. See "Crypto Mode data" below.
  • We collect publicly-available on-chain data (wallet address), limited off-chain technical data (device type, browser version, app diagnostics), and OAuth credentials when you connect a third-party account (e.g., TikTok, X) so we can perform the specific action you authorized.
  • If you separately provide an email address (e.g., for newsletter sign-up or support correspondence), we will use it only for the purpose you provided it.

1. Data We Collect

Privacy is central to how we build Chart Arena. We aspire to be transparent about the limited data we do collect:

Publicly-available blockchain data

When you connect a non-custodial blockchain wallet to the Services, we collect and log your publicly-available blockchain address to operate the Services. We may screen wallet addresses against sanctions lists and for prior illicit activity, including through blockchain-analytics providers. Blockchain addresses are publicly-available data, are not created or assigned by us, and by themselves are not personally identifying.

Gameplay data

Match results, leaderboard standings, in-app activity, and other gameplay events necessary to operate the Services and to render leaderboards and match history.

Account and login data

On the web you log in through Privy using an email address, a passkey, or a wallet, and you can link an X account. The iOS app uses Sign in with Apple or a guest account. We receive the identifiers associated with your account (such as your email address, linked social handle, and wallet addresses) and use them to authenticate you, to check your access to gated features, and to send you messages you have opted into, such as the optional market digest email, for which we also store your delivery time and time zone.

Crypto Mode data

If you use Crypto Mode, we collect and process:

  • the wallet addresses and Perpl account identifiers you use with Crypto Mode;
  • a trade-only key for your Perpl account, which we generate and store encrypted so that our servers can submit your orders, as described in Section 19.5 of the Terms of Service. The key cannot withdraw or transfer your assets;
  • your orders, positions, fills, fees, funding, protective-order settings, and related trading history;
  • records of your admission to Crypto Mode, such as the access code or eligibility rule used, the wallet or token used, and when;
  • a record of your acceptance of the Crypto Mode terms: the version you accepted, when, and the IP address and browser you accepted from; and
  • network information, such as your IP address and the country derived from it, which our infrastructure providers process when you connect. We use the derived country when you sign in to Perpl to apply venue eligibility rules.

Crypto Mode is social. Other users of the Services can see your display name and avatar and your trading statistics, such as volume and profit and loss, on leaderboards. Users in a shared room can also see your live position details, such as side, entry price, leverage, entries and exits, along with your reactions and comments.

The orders we submit for you, and the activity of your Perpl account, are visible to Perpl and are recorded on a public blockchain. Perpl's handling of your data is governed by the Perpl Privacy Policy.

We do not currently ask Crypto Mode users for identity documents. If we ever require identity or residence verification under the Terms of Service, we will collect the information you submit for that purpose and use it only to verify your eligibility and to comply with the law.

We keep Crypto Mode records for as long as your account is active, and afterwards for as long as we need them to comply with the law, resolve disputes, and prevent fraud. Some admission records are append-only by design. Backups may persist after a live record is deleted.

Third-party integration credentials

When you connect a third-party account (such as TikTok, X, or Apple) to the Services, the relevant platform issues us OAuth access tokens. We store those tokens and use them solely to perform the specific actions you authorized. For Chart Arena's content-posting pipeline, we use TikTok's Content Posting API to publish videos exclusively to our own Chart Arena brand account. OAuth tokens are deleted when you disconnect a third-party integration or close your account.

Local storage and device data

We and our third-party service providers may access and collect information from localStorage, cookies, mobile device identifiers, web beacons, and similar technologies to provide and personalize the Services across sessions. This may include browser type, referring/exit pages, operating system, device or browser language, app version, and crash diagnostics. We analyze this data in aggregate to improve the user experience.

Information from other sources

We may receive information about wallet addresses or transactions from our service providers in order to comply with our legal obligations and prevent the use of the Services in connection with fraudulent or other illicit activities.

Correspondence and surveys

We will receive any communications and information you provide directly to us via email, support channels, social media (such as X or Telegram), or when you participate in surveys, usability studies, or questionnaires we run.

Information you specifically provide

If you specifically provide us with information (for example, an email address for newsletter sign-up), we may use that information for the purposes described when you provided it. Apart from a login method, you do not need to provide us with any personal data to play Chart Arena.

2. How We Use Data

We use the data we collect in accordance with your instructions and as required by law. We may also use data to:

  • Operate the Services — maintain match history, leaderboards, and gameplay features.
  • Authenticate you across devices and sessions.
  • Run Crypto Mode — submit the orders you direct to Perpl, monitor the protective orders you set, show your positions and history, and apply eligibility rules.
  • Publish content you produce to connected third-party platforms when you direct us to do so.
  • Safety and security — protect against, investigate, and stop fraudulent, unauthorized, or illegal activity; solve potential security issues; enforce our agreements; and protect our users and the Company.
  • Customer support — answer inquiries and resolve issues.
  • Legal compliance — comply with applicable laws and respond to regulators, government entities, and law enforcement as needed.
  • Aggregated analytics — compile aggregated, de-identified data that helps us learn how users engage with the Services and where we can improve.

3. How We Share Data

We may share or disclose the data we collect:

  • With service providers and integrations — including, without limitation:
    • TikTok — for content posting via the Content Posting API. We exchange OAuth tokens with TikTok and use them to publish videos exclusively to our own Chart Arena brand account. We do not post to any other user's account through the Services.
    • X (Twitter) — for account linking and optional content cross-posting.
    • Privy — for non-custodial wallet authentication infrastructure.
    • Supabase — for backend database and storage.
    • Perpl — the third-party protocol on which Crypto Mode trades are placed. Perpl receives the orders we submit with your trading key and sees your Perpl account activity. If you use an automated feature that also trades on a second venue (currently Hyperliquid), that venue receives the orders we submit for you there.
    • Blockchain RPC and analytics providers (e.g., Alchemy, drpc) — for on-chain reads required by gameplay, and blockchain-analytics providers if we use them for wallet screening.
    • Amazon Web Services — for application hosting, secrets management, and email delivery.
    • Fly.io — for regional match servers.
    • LiveKit — for real-time audio if you join a voice room.
    • GitHub — for off-site backups in a private repository. Trading keys, login emails, and other credentials in those backups are encrypted. Other records, such as per-account trading statistics and usage analytics, are not separately encrypted.
    • Apple App Store / TestFlight — for iOS app distribution.
    • Hosting and CDN providers (e.g., Vercel, Cloudflare) — for delivering the website and apps, and for relaying your Perpl sign-in and trading-key registration.
  • To comply with legal obligations — in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedure.
  • Safety and security — to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity.
  • Business changes — in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction.
  • With your consent — any other time you provide us with your consent.

We do not sell personal information to third parties, and we do not share your information with any third party for that third party's marketing purposes.

4. Third-Party Cookies and Tracking

We use services provided by third parties that may use tracking technology such as cookies, mobile device identifiers, and localStorage to collect information about your use of the Services. You can opt out of having your activity and device data collected through these third-party services, including by:

  • Blocking cookies in your browser via browser settings. For more information about cookies, including how to see, manage, and delete them, visit www.allaboutcookies.org.
  • Blocking or limiting the use of your advertising ID on your mobile device through device settings.
  • Using privacy plug-ins or browsers configured to block third-party cookies and trackers.
  • Using advertising industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.

5. Third-Party Links and Sites

The Services may include links to or integrations with websites, platforms, and other services not operated or controlled by us. When you interact with these other parties, including when you leave the Site, those parties may independently collect information about you and solicit information from you. You can learn how those parties handle your data by consulting their privacy policies.

6. Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Crypto Mode trading keys are encrypted at rest and are included in our encrypted backups. Transmission via the internet is not completely secure and we cannot guarantee absolute security. You are responsible for the security of your blockchain wallets, private keys, and any device or account credentials you use to access the Services.

7. Age Requirements

The Services are intended for a general audience age 18 and over and are not directed at children. We do not knowingly collect personal information (as defined by the U.S. Children's Online Privacy Protection Act, "COPPA") from children. If you believe we have inadvertently collected personal information from a child under 18, please contact us at privacy@blocklive.io and we will delete it promptly.

8. Notice to California Residents (CCPA)

The California Consumer Privacy Act of 2018 ("CCPA") requires certain businesses to provide notice to California residents about how we collect, use, and share their personal information, and the rights and choices we offer them.

Privacy practices

We do not "sell" personal information as defined under the CCPA. Please review the "How We Share Data" section above for further details about the categories of parties with whom we share information.

Privacy rights

The CCPA gives California residents the right to request information about how we have collected, used, and shared your personal information; to request a copy of any information we maintain about you; and to ask us to delete personal information about you. The CCPA limits these rights, for example by prohibiting us from providing certain sensitive information in response to access requests and limiting the circumstances under which we must comply with a deletion request.

Submitting a request

You can submit a request for information, access, or deletion to privacy@blocklive.io. The CCPA requires us to collect and verify the identity of any individual submitting such a request. California residents may designate an "authorized agent" to submit requests on their behalf; we will require written authorization confirming the agent's authority.

9. Disclosures for European Union Data Subjects (GDPR)

We process personal data for the purposes described in "How We Use Data" above. Our bases for processing include: (i) you have given consent for one or more specific purposes; (ii) processing is necessary for the performance of a contract with you; (iii) processing is necessary for compliance with a legal obligation; and/or (iv) processing is necessary for the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.

Your rights under the General Data Protection Regulation ("GDPR") include the right to (i) request access and obtain a copy of your personal data, (ii) request rectification or erasure of your personal data, (iii) object to or restrict the processing of your personal data, and (iv) request portability of your personal data. You may withdraw your consent at any time. We cannot, however, edit or delete information that is stored on a public blockchain.

To exercise any of your GDPR rights, contact privacy@blocklive.io. We may require additional information to process your request. We may retain information as necessary to fulfill the purpose for which it was collected, including to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

10. Changes to This Policy

If we make material changes to this Policy, we will notify you via the Services or by updating the "Last updated" date above. Your continued use of the Services after changes take effect indicates your consent to them.

11. Contact Us

If you have any questions about this Policy or how we collect, use, or share your information, please contact us at privacy@blocklive.io or write to us at:

BlockLive, Inc.
651 N Broad St, Suite 201
Middletown, DE 19709
United States