Privacy Policy

1. Who we are

OVERLANDCOIN (overlandcoin.tech, the OVERLANDCOIN apps and @OVERLANDCOIN_bot on Telegram) is operated by Austin Malone, a sole proprietor in Wyoming, USA ("we", "us"). Contact: overlandcoin@gmail.com.

2. No accounts, no passwords

You use OVERLANDCOIN with a self-custody Solana wallet. We never see your seed phrase or private keys and we don't ask for your name, email or phone number. Your public wallet address is your identity on the site.

3. What we collect and why

• Wallet address — when you connect, sign in (by signing a free message), claim a quest, use the swap or post. Used to run those features, show your public profile and prevent abuse.
• Session cookie (olc_sess, HttpOnly, 30 days) — keeps you signed in. Deleted when you sign out.
• Device cookie (olc_dev, HttpOnly, 1 year, only sent to our quest-reward endpoints) — a random ID used to apply per-device limits on free quest claims and referral bonuses (anti-fraud). It contains nothing about you.
• Location for quest check-ins — when you tap Claim, your device's GPS position (latitude, longitude, accuracy) is sent once to our server and checked against the quest's check-in radius. We keep only your most recent successful check-in position and time per wallet, to detect impossible travel between claims; it's replaced by your next claim and removed when you delete your data. Failed or rejected check-ins aren't stored.
• Location for the map, weather and local alerts — while the map is open, your approximate position (rounded to about 1 km for weather) is sent to our server to fetch weather, road, wildfire, earthquake and news information for your area. We don't store it beyond short-lived caches (about 10 minutes).
• Profile and community content — username, bio, avatar, rig details, a location text you choose to enter, links, posts, comments, likes and photos. These are public. Photos are resized on your device before upload and the app strips embedded location data.
• Reports — if you report a post, we keep the report and your reason for up to 30 days for moderation.
• Referrals — which wallet referred yours (kept permanently so referrals can't be switched or abused) and simple referral statistics.
• IP address — used for rate limiting (counters expire within hours to days) and present in our hosting provider's standard request logs.
• Browser storage on your device (not sent to us unless needed) — wallet connection preference, temporary encryption keys for the Phantom/Solflare sign-in flow, a referral code from an invite link, and map preferences.
• Telegram — if you message @OVERLANDCOIN_bot, Telegram delivers your message and public Telegram profile to us so the bot can reply. Free-text questions are sent to xAI's API to generate an answer. We keep only short-lived rate-limit counters keyed by your Telegram user ID.

4. The blockchain is public and permanent

Swaps, quest rewards and referral bonuses are Solana transactions. (The presale closed with 0 sales, so there are no presale purchases.) They're public, permanent and can't be changed or deleted by anyone, including us. A quest reward's memo names the quest, so anyone can see that your wallet completed that quest (and therefore visited that place) at that time. Please consider this before claiming with a wallet linked to your identity.

5. Processors and third parties

We don't sell your data, don't use advertising trackers and don't share data except with these processors, when required by law, or to protect users and the service from fraud.

• Vercel (hosting, serverless functions, request logs; USA).
• Upstash (Redis database for sessions, profiles, posts, photos, rate limits and claim records); Vercel Blob if photo storage is moved there.
• Solana RPC providers (e.g. PublicNode, Solana Labs/Foundation public RPC and any paid RPC we add) — your browser and our server send them wallet addresses and transactions to read the chain.
• Wallet apps and connectors you choose (Phantom, Solflare, WalletConnect and others) under their own privacy policies.
• Jupiter (swap routes and quotes when you use Buy OLC); Coinbase, Kraken and CoinGecko (SOL price only — no personal data).
• Location-based information sources: Open-Meteo, US National Weather Service, USGS, NASA EONET, NPS, state 511 road services, InciWeb, RainViewer, OpenStreetMap Nominatim and Google News (receive coordinates or place names, not your wallet).
• Map tiles: Esri/ArcGIS, OpenTopoMap and USGS National Map (your browser requests tiles directly, so they see your IP and the map area).
• Telegram and xAI (bot only).

6. Retention

Profile and community content stays until you delete it or delete your data. The latest check-in position stays until your next claim or deletion. Sessions expire after 30 days. Rate-limit counters expire within hours to days. Hosting logs follow Vercel's retention. Blockchain data is permanent.

7. Your choices and rights

You can edit or delete posts at any time, and delete all of your off-chain data from the Delete my data page (/account/delete) by signing a message with your wallet. You can also email overlandcoin@gmail.com to request access, correction or deletion. Depending on where you live (for example the EU/UK under GDPR or California under CCPA), you may have additional rights; we'll honour applicable requests.

8. Kept after deletion

• Anything on the blockchain.
• Ban list entries and per-quest claim records (needed to prevent abuse and double payouts).
• Referral bindings (so referrals can't be gamed by deleting and re-joining).
• Short-lived rate-limit counters and hosting logs until they expire.

9. Children

OVERLANDCOIN is not intended for anyone under 18. Don't use it if you're under 18 or under the age of majority where you live.

10. Security

Traffic is encrypted (HTTPS/HSTS), sessions use HttpOnly secure cookies, and hot-wallet keys are held only in our hosting provider's encrypted environment. No system is perfectly secure.

11. Changes

We'll update the effective date above when this policy changes. Material changes will be announced on the site.