← back
— LEGAL —

Privacy Policy

Last updated: May 13, 2026

This Privacy Policy (the "Policy") explains how BlockLive, Inc. ("BlockLive", the "Company", "we", "us", or "our") collects, uses, and shares data in connection with the Chart Arena game, the chartarena.xyz website, the Chart Arena iOS application, the Chart Arena content channels on third-party platforms (including TikTok, X, YouTube, and Instagram), and all related properties, products, and services (collectively, the "Services"). Your use of the Services is also subject to our Terms of Service.

High Level Summary

  • BlockLive is a U.S.-incorporated company based in Delaware that operates Chart Arena among other products and services. BlockLive complies with applicable U.S. laws and regulations.
  • We do not require or collect traditional personal data (legal name, postal address, date of birth) to play Chart Arena or watch our content.
  • We collect publicly-available on-chain data (wallet address), limited off-chain technical data (device type, browser version, app diagnostics), and OAuth credentials when you connect a third-party account (e.g., TikTok, X) so we can perform the specific action you authorized.
  • If you provide an email address (e.g., for newsletter sign-up or support correspondence), we will use it only for the purpose you provided it. We will not attempt to link your email to your wallet address or other personal data.

1. Data We Collect

Privacy is central to how we build Chart Arena. We aspire to be transparent about the limited data we do collect:

Publicly-available blockchain data

When you connect a non-custodial blockchain wallet to the Services, we collect and log your publicly-available blockchain address to operate the game and to screen the wallet for any prior illicit activity using leading blockchain-analytics providers. Blockchain addresses are publicly-available data, are not created or assigned by us, and by themselves are not personally identifying.

Gameplay data

Match results, leaderboard standings, in-app activity, and other gameplay events necessary to operate the Services and to render leaderboards and match history.

Third-party integration credentials

When you connect a third-party account (such as TikTok, X, or Apple) to the Services, the relevant platform issues us OAuth access tokens. We store those tokens and use them solely to perform the specific actions you authorized. For Chart Arena's content-posting pipeline, we use TikTok's Content Posting API to publish videos exclusively to our own Chart Arena brand account. OAuth tokens are deleted when you disconnect a third-party integration or close your account.

Local storage and device data

We and our third-party service providers may access and collect information from localStorage, cookies, mobile device identifiers, web beacons, and similar technologies to provide and personalize the Services across sessions. This may include browser type, referring/exit pages, operating system, device or browser language, app version, and crash diagnostics. We analyze this data in aggregate to improve the user experience.

Information from other sources

We may receive information about wallet addresses or transactions from our service providers in order to comply with our legal obligations and prevent the use of the Services in connection with fraudulent or other illicit activities.

Correspondence and surveys

We will receive any communications and information you provide directly to us via email, support channels, social media (such as X or Telegram), or when you participate in surveys, usability studies, or questionnaires we run.

Information you specifically provide

If you specifically provide us with information (for example, an email address for newsletter sign-up), we may use that information for the purposes described when you provided it. We will not attempt to link information you provide to your wallet address or other personal data. You do not need to provide us with any personal data to play Chart Arena.

2. How We Use Data

We use the data we collect in accordance with your instructions and as required by law. We may also use data to:

  • Operate the Services — maintain match history, leaderboards, and gameplay features.
  • Authenticate you across devices and sessions.
  • Publish content you produce to connected third-party platforms when you direct us to do so.
  • Safety and security — protect against, investigate, and stop fraudulent, unauthorized, or illegal activity; solve potential security issues; enforce our agreements; and protect our users and the Company.
  • Customer support — answer inquiries and resolve issues.
  • Legal compliance — comply with applicable laws and respond to regulators, government entities, and law enforcement as needed.
  • Aggregated analytics — compile aggregated, de-identified data that helps us learn how users engage with the Services and where we can improve.

3. How We Share Data

We may share or disclose the data we collect:

  • With service providers and integrations — including, without limitation:
    • TikTok — for content posting via the Content Posting API. We exchange OAuth tokens with TikTok and use them to publish videos exclusively to our own Chart Arena brand account. We do not post to any other user's account through the Services.
    • X (Twitter) — for sign-in and optional content cross-posting.
    • Privy — for non-custodial wallet authentication infrastructure.
    • Supabase — for backend database and storage.
    • Blockchain RPC and analytics providers (e.g., Alchemy, drpc, blockchain-analytics partners) — for on-chain reads required by gameplay and for wallet-screening.
    • Apple App Store / TestFlight — for iOS app distribution.
    • Hosting and CDN providers (e.g., Vercel, Cloudflare) — for delivering the website and apps.
  • To comply with legal obligations — in the course of litigation, regulatory proceedings, compliance measures, and when compelled by subpoena, court order, or other legal procedure.
  • Safety and security — to protect against, investigate, and stop fraudulent, unauthorized, or illegal activity.
  • Business changes — in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, asset or stock sale, or other business transaction.
  • With your consent — any other time you provide us with your consent.

We do not sell personal information to third parties, and we do not share your information with any third party for that third party's marketing purposes.

4. Third-Party Cookies and Tracking

We use services provided by third parties that may use tracking technology such as cookies, mobile device identifiers, and localStorage to collect information about your use of the Services. You can opt out of having your activity and device data collected through these third-party services, including by:

  • Blocking cookies in your browser via browser settings. For more information about cookies, including how to see, manage, and delete them, visit www.allaboutcookies.org.
  • Blocking or limiting the use of your advertising ID on your mobile device through device settings.
  • Using privacy plug-ins or browsers configured to block third-party cookies and trackers.
  • Using advertising industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.

5. Third-Party Links and Sites

The Services may include links to or integrations with websites, platforms, and other services not operated or controlled by us. When you interact with these other parties, including when you leave the Site, those parties may independently collect information about you and solicit information from you. You can learn how those parties handle your data by consulting their privacy policies.

6. Security

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Transmission via the internet is not completely secure and we cannot guarantee absolute security. You are responsible for the security of your blockchain wallets, private keys, and any device or account credentials you use to access the Services.

7. Age Requirements

The Services are intended for a general audience age 18 and over and are not directed at children. We do not knowingly collect personal information (as defined by the U.S. Children's Online Privacy Protection Act, "COPPA") from children. If you believe we have inadvertently collected personal information from a child under 18, please contact us at privacy@blocklive.io and we will delete it promptly.

8. Notice to California Residents (CCPA)

The California Consumer Privacy Act of 2018 ("CCPA") requires certain businesses to provide notice to California residents about how we collect, use, and share their personal information, and the rights and choices we offer them.

Privacy practices

We do not "sell" personal information as defined under the CCPA. Please review the "How We Share Data" section above for further details about the categories of parties with whom we share information.

Privacy rights

The CCPA gives California residents the right to request information about how we have collected, used, and shared your personal information; to request a copy of any information we maintain about you; and to ask us to delete personal information about you. The CCPA limits these rights, for example by prohibiting us from providing certain sensitive information in response to access requests and limiting the circumstances under which we must comply with a deletion request.

Submitting a request

You can submit a request for information, access, or deletion to privacy@blocklive.io. The CCPA requires us to collect and verify the identity of any individual submitting such a request. California residents may designate an "authorized agent" to submit requests on their behalf; we will require written authorization confirming the agent's authority.

9. Disclosures for European Union Data Subjects (GDPR)

We process personal data for the purposes described in "How We Use Data" above. Our bases for processing include: (i) you have given consent for one or more specific purposes; (ii) processing is necessary for the performance of a contract with you; (iii) processing is necessary for compliance with a legal obligation; and/or (iv) processing is necessary for the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.

Your rights under the General Data Protection Regulation ("GDPR") include the right to (i) request access and obtain a copy of your personal data, (ii) request rectification or erasure of your personal data, (iii) object to or restrict the processing of your personal data, and (iv) request portability of your personal data. You may withdraw your consent at any time. We cannot, however, edit or delete information that is stored on a public blockchain.

To exercise any of your GDPR rights, contact privacy@blocklive.io. We may require additional information to process your request. We may retain information as necessary to fulfill the purpose for which it was collected, including to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

10. Changes to This Policy

If we make material changes to this Policy, we will notify you via the Services or by updating the "Last updated" date above. Your continued use of the Services after changes take effect indicates your consent to them.

11. Contact Us

If you have any questions about this Policy or how we collect, use, or share your information, please contact us at privacy@blocklive.io or write to us at:

BlockLive, Inc.
651 N Broad St, Suite 201
Middletown, DE 19709
United States