Privacy Policy
Effective October 27, 2026 · Pantheon by Marlow
This policy explains how Pantheon handles information when you visit, create an account, use community or AI features, or use wallets and games. It covers Pantheon’s hosted platform, not third-party websites or public blockchain networks.
Information we collect
| Category | Examples and purpose |
|---|
| Account and security | Username, password hash, account identifiers, sessions, recovery records, and email or Google sign-in information if you use those features. We use these to operate accounts, authenticate users, recover access, and prevent abuse. |
| Optional profile | Avatar choices, display names, and images you choose to upload. Avatar creation is optional. Public profile information may be visible to other players. |
| Wallets and activity | Wallet addresses, network and transaction identifiers, balances, deposit-related records, withdrawal requests, owner approvals, game rounds, wagers, payouts, referrals, tips and rewards. These support settlement, fairness, reconciliation, support and financial reporting. |
| Communications | Public chat, AI conversations, feedback, support requests, and message delivery metadata. Public chat can be seen and copied by others. Hermes private messages use client-side encryption; delivery records and encrypted message content may still be stored by the platform. |
| Technical and usage data | Requests, security and error events, eligibility declarations, browser storage and first-party visitor identifiers. Infrastructure providers may process IP addresses and connection data to deliver and secure the service. |
How we use information
We use information to provide the features you request, maintain accounts and balances, process approved transactions, display player activity, detect fraud, investigate errors and disputes, enforce platform rules, and meet applicable legal obligations. Owner-only reports include account-level wallet activity and gaming profit/loss; these reports are not public player directories.
Who receives information
Access is limited by the role and function involved. The platform operator and authorized service providers may process information for hosting, storage, authentication, email delivery, AI responses, wallet custody, blockchain access, support and security. Current integrations include Render for hosting, Cloudflare for hosted conversations and AI processing, Turnkey for custody/signing, and Google when you choose Google sign-in. Enabled providers can change; we will update this policy when practices materially change.
AI conversations may be stored and sent to the configured hosted model. Do not include secrets or sensitive information you do not want processed for that feature. This policy does not promise that every provider has the same retention or AI-training practices.
We may disclose information when reasonably necessary to comply with law or a valid legal request, protect users and the service, investigate abuse, or complete a business transfer with appropriate protection of the information. We do not sell personal information or share it for cross-context behavioral advertising.
Public blockchain information
Solana addresses and confirmed transactions are public and can be linked to other activity. Anyone may retain or analyze that information. Deleting a Pantheon account cannot delete, reverse or make private a blockchain transaction. A withdrawal destination is shared with custody and blockchain services when required to prepare or execute the transfer.
Cookies and local storage
Pantheon uses first-party storage for sessions, security, preferences, chat and notification state, game settings and visitor measurement. Private-message keys may be stored in your browser. Clearing storage can sign you out, reset settings or make encrypted messages inaccessible. The current platform does not use advertising cookies. Browser “Do Not Track” signals do not change essential account or security processing. If our practices introduce processing subject to a legally required opt-out preference signal, we will honor that requirement.
Retention and deletion
We retain account, conversation, game and transaction records while needed to operate the service, resolve disputes, secure accounts and meet legal obligations. Some session, quota, recovery and sign-in records expire and are periodically cleared. There is not a single automatic deletion period for all other records. Financial and security records may need to remain after account closure. Backups may retain copies until replaced through their normal lifecycle. Public blockchain records cannot be deleted by Pantheon.
Your choices and privacy requests
You can choose whether to create an avatar, upload a photo, provide optional profile details, use Google sign-in or use AI and community features. Account settings let you change supported details. To request access, correction, export, account closure or deletion, use Feedback / report a bug on the sign-in page or in your account menu, and begin the subject or message with Privacy request. Include your username and a contact method you control; never send a password, recovery code, private key or seed phrase.
We will verify requests proportionately, assess applicable rights and exceptions, and respond within legally required timeframes. Depending on where you live and which laws apply, you may have rights to know, access, correct, delete or obtain a copy of your information; restrict or object to processing; withdraw consent where consent is the basis; use an authorized agent; and complain to your local privacy regulator. We do not retaliate against you for exercising applicable privacy rights. Some information is necessary to maintain an account or process a transaction.
Security
Pantheon uses measures including password hashing, authentication, access restrictions and owner approval of relevant custody transfers. A passkey normally uses your device’s local biometric or unlock check; Pantheon receives the authentication assertion, not your fingerprint image. No service can guarantee absolute security. Notify us through support if you suspect unauthorized access.
Children, eligibility and international processing
Pantheon’s money features are for adults who meet the applicable eligibility requirements; they are not intended for children. Do not submit a child’s personal information. Report suspected underage accounts through support. Providers may process information outside your country; applicable protections and legal requirements still apply. This privacy policy does not establish that gameplay is permitted in a particular location.
Changes and contact
We will post changes here with an updated effective date. For material changes, we will provide an additional prominent platform notice or direct notice where required before the changed practice takes effect. Privacy questions and requests are handled by the Pantheon operator through the feedback channel described above.