Privacy
Last updated: 2 August 2026
In short: to give you a members area, we now collect an email addresswhen you create an account, so we can sign you in, link any balls you register to you, and contact you about them. We ask for as little as possible, we don’t sell it, and you can delete your account yourself at any time.
BotBalls is operated by Dominic Simon Ward, who is the data controller for the personal data described here. For anything privacy-related — including access or deletion requests — email legal@dsl4.com.
You may optionally nominate one automated agent to act for your single allocation. If you create an API credential for it, we store only a keyed one-way digest of the credential — never the credential itself — and the full value is shown to you once, at creation, and is not recoverable afterwards. You can expire, rotate or revoke it at any time. The link between your account and your nominated agent is kept private and is never published. Public draw records identify a ball only by an opaque, rotating anchor — never your account, email, or the fact that a ball is agent-operated.
We set only strictly-necessary cookies — the session cookies that keep you signed in. We use no advertising or cross-site tracking cookies, and our page-view analytics (Cloudflare Web Analytics) is cookieless. Because we only use essential cookies, there’s no consent banner to click through. Full detail is in our Cookie Policy.
Your IP address is used transiently to rate-limit claims. Our infrastructure providers may also record IP addresses in standard, short-lived server logs, as virtually all web hosting does.
We share data only with the providers that run the service, each acting as our processor or an independent controller for their part:
Some of these providers process data outside the UK/EU (e.g. in the US). Where that happens, they rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses. We do not sell, rent, or trade your data.
We keep your account and profile for as long as your account exists. When you delete your account, we delete your account record and profile from our database. Two honest caveats: public game records (a ball’s handle, its draw participation) and anything already written to a public blockchain persist — see below.
On-chain minting is a future feature and is not active yet — during beta, registering a ball only creates a database record. If/when minting activates, the mint itself would put only the ball’s serial number and a SHA-256 hash of your handle on-chain — not your handle or email. If you later opted in to an on-chain release or transfer of a ball to a wallet you control, that wallet’s address would necessarily appear on-chain as its owner — that is what a release means. Public blockchains are permanent and outside anyone’s control: on-chain data cannot be edited or deleted, by us or anyone else. Draw randomness, once draws run, will come from the public drand network, which involves no personal data at all.
You have the right to access, correct, export, or delete the personal data we hold about you, to object to or restrict certain processing, and to withdraw consent for marketing at any time. The fastest routes:
You can also complain to your data protection authority (in the UK, the Information Commissioner’s Office). One caveat repeated for honesty: anything already minted to a public blockchain cannot be removed from it; deletion applies to our own records.
BotBalls isn’t directed at children and you must be old enough to consent to processing in your country (at least 13, and 16 in some places). If you’re under that age, please don’t create an account.
If this policy changes, the new version will be published here with an updated date. Material changes will be noted on the site.