PIKKO Privacy Policy
Version: 6 October 2026
Who to contact
PIKKO is published by Pastaman, who is the controller for the personal information described here. Official profile: https://x.com/AnonimoCommando. For support and privacy requests: welcome@devfridge.cool. This policy covers the PIKKO Android app and the websites pikko.it and pikko.art.
Play and information saved on your device
The starter game and five-round country trials do not require an account or a wallet. PIKKO stores language, sound/graphics/kids-mode preferences, tutorial completion, discovered foods and local best scores in browser local storage. These records are not uploaded by the game. They remain until you clear site data or the browser removes them; clearing them resets those preferences and progress. Records are separate between browsers and the two domains. Browser language, screen capabilities and approximate device performance are used locally to choose language and graphics settings.
Android app
The Android app requires internet access and stores game progress locally. It adds no analytics SDK and does not request camera, microphone, contacts or precise-location permissions. Clearing the app’s data also clears its local game records.
Optional wallet access
If you choose Connect Phantom in the grown-ups area, Phantom provides your public Solana wallet address. The game sends that address and the relevant token mint to https://scan.devfridge.cool/api/sdk/check to check public timelock evidence and unlock eligible bags. The service also receives the normal network request information, such as your IP address. The game keeps wallet/access state in memory, clears access when the wallet changes or disconnects, and checks expiry. It does not request your seed phrase or private key, sign transactions, take custody of tokens, or create a timelock. A public wallet address and its blockchain activity can be linked together; disconnecting does not erase public blockchain records.
Hosting, media and external services
The websites and game files are delivered through Vercel. Hosting and security infrastructure processes technical request data, including IP address, requested resource, timing and browser information. The landing pages load Google Fonts from Google and a gameplay preview/video from clips.pump.fun, so those services receive the corresponding requests. The game itself loads its audio and artwork from the game site. The reviewed application code contains no advertising, analytics tracker or tracking-cookie implementation. Provider-side logs and security controls are separate from the game code.
Sharing and support
Receipts and Bleah Cam clips are generated on your device. Bleah Cam captures the game canvas and game audio, not your camera or microphone. Nothing is uploaded automatically: you choose a share destination or save a file. Copy buttons write only the selected result, challenge link or prompt to your clipboard. If you email welcome@devfridge.cool or contact the Telegram community, the chosen service processes your message and account/contact details. We use information you send to respond to your request. Do not send seed phrases or private keys.
Children and optional external features
The game includes a kids-mode setting and a grown-ups screen before wallet-related functions. Its arithmetic question is a navigation safeguard, not verified age identification. Children can play the starter game and trials without connecting a wallet. An adult should handle wallet and external-service decisions. Contact us if you believe a child has sent us personal information that should be removed.
Your choices and privacy requests
You can play without a wallet, disconnect it, clear local site data and choose whether to share. Where applicable, you may request access, correction, deletion, restriction or portability, object to processing, withdraw consent, and complain to a supervisory authority. Contact welcome@devfridge.cool. We cannot alter public blockchain records.
Why we process information and how long we keep it
We use the information necessary to provide the functions you request, including optional access checks and support. Technical request information also supports operation, security and troubleshooting. Where applicable, the legal bases are providing the requested service and our legitimate interests in operating and protecting it. Support correspondence is kept for handling the request and necessary follow-up, then deleted or anonymised unless retention is legally required. Technical logs are retained only as necessary for security and operation under the configured service settings. Local storage lasts as described above; generated clips and current wallet state remain in the running page until cleared or closed.
Service providers and external links
Vercel delivers the site and game files; DevFridge Scan provides timelock-check responses. Their hosting/network operators process the technical requests needed to operate those services. Vercel privacy information is at https://vercel.com/legal/privacy-notice and DevFridge service information is at https://docs.devfridge.cool. Email and any destination you choose for sharing also process the information needed to deliver your message. Services may operate from countries other than yours. Contact us for information about our handling of your data. External services, including Phantom, Google, Pump.fun, Telegram and Solana Mobile, have their own privacy notices.
Changes
We update this policy when the app’s data handling changes and show the updated date on this page.