Privacy Policy

nano133.com is a demo site for the Nano network, run by Pugs, LLC. It keeps little, and it sells nothing. This policy says what it keeps, why, for how long, and who else sees it.

Last updated: 18 October 2026.

The short version

We do not ask for your name or your email address, and we run no advertising trackers and no analytics.
We keep Nano addresses and payments, to check payments and to send refunds and rewards. The Nano ledger is public anyway.
The site's own data never holds your IP address. For a short time it keeps a keyed one-way hash of it, to stop spam and abuse. Our hosting and network providers see your IP address in their request logs.
Your settings, your game progress and your purse stay in your own browser.

1. What we keep, why, and for how long

What	Why	How long
Nano addresses, amounts and block hashes of payments to the site	To check a payment, to give you what you paid for, and to send a refund or a reward	The working record of a payment (the proof of a wallet, the round, the checkout): 7 days after the payment is settled, and never while we still owe a refund or a send on it. The accounting record: 7 years, with the amount, the date, the blocks, what it paid for and how it ended, and your address only as a keyed one-way code. A refund or a reward we sent, and a late payment we keep under the daily return limit: your address for 30 days, then the same code. The count of returns per address for that limit (with a plain hash of the address): 2 days. An open checkout that is never paid: 7 to 30 days. The same holds for Nano sent by mistake to the demo address on the Learn pages, which we send back.
A sign-in: your Nano address, a label for your browser ("Chrome on Mac"), and a random id	To keep you signed in, and to let only one device at a time use your account	Up to 365 days, or 1 day after you sign out or another device takes over
A sign-in by a wallet's signature (Nautilus, NanChat, Berry Wallet): the request (a random id, a label, a one-time number or a one-way code of one, and a code that ties it to the browser that asked), and your Nano address once your wallet has signed it	To check the signature, and to sign in only the browser that asked	A request is open for 5 minutes. Its record is deleted 1 day after that, or when you delete your data.
Accounts you choose to link: their wallet addresses, the account you keep, and temporary confirmations.	To let each linked sign-in open the same account and combine your records.	Confirmations expire after 15 minutes and their temporary records are deleted after expiry. Confirmed links stay until you delete your account, or the account becomes inactive under the rule below. Delete my data covers all linked addresses.
An "I want this" signal: that your Nano address is counted for a Concept, kept as a keyed one-way code (not the address). The address is the one that you were signed in with when you started the signal, else the one that paid.	To count each address one time for each Concept	As long as we show the Concept's count, or until you delete your data. The count itself (a number and the time of the last signal) holds no address and stays.
A keyed one-way hash of your IP address (never the IP itself)	To limit how often one network can do a thing (spam, abuse, free tokens)	From a few minutes to 3 days, by the limit
Arcade: your username, scores, tickets, tokens and prizes, and your count of Fair Claw balls. Signed in, also your best free-play score in each game and each Block Beat song, and your best paid score in each Block Beat song, after the server checks the round, so you see them on every device	For the games, the leaderboard and the prize counter	Kept until you delete it, or until 3 years pass with no sign-in or payment (see the row on your last sign-in or payment). Your username shows in public on the leaderboard and in the 3D room. Your Nano address shows with it only if you turn on "Show my Nano address on my card and my trophy page" (see section 4). A name you give up stays reserved for you for 7 days. Your trophy room settings are kept with your account (see section 4).
Nano Island boards: for each board where you have a paid round, one row with your Nano address (as the row's key), your username at the time of the score, your best score, its stars, its round and its time, and the same for each week's board. For a paid island round we also keep whether your age was confirmed by your account or by the age screen in your browser.	To show the island boards, with one best for each account, and to show that a paid round passed the age check	Kept until you delete it, or until 3 years pass with no sign-in or payment (see the row on your last sign-in or payment). Then your rows are deleted. The boards show your username, score and stars in public, never your Nano address. A row keeps the name it had at the time of the score.
Reviews of paid Ananos runs: when a paid Ananos run shows signs of a bot (see the Terms), we keep your Nano address, your username, the score, the run's numbers (its cuts, quick cuts, pineapples and PERFECTs, combo, fees, drops, how it ended, its stars, and your fastest blade movement), the reasons for the flag, and the run's record: every movement of your finger or mouse during the run, with its time. The record also holds the shape of the play area on your screen and whether your browser asks for reduced motion.	For a person on our team to check whether a person or a bot played the run	Kept for 30 days, then deleted. Only our admins can read it; it is never public. A review never changes your score or your place on a board by itself.
Two-player matches in the 3D room (robot boxing, air hockey, Swish): both players' Nano addresses, who won, the score and how the match ended; which view each player used (the 3D or the flat view of the room, and of the game); and, for each player, their wins and losses per game and their last 5 matches	To show each player their record. The server plays every match again to decide who won, so no browser decides it. The view is kept so that we can compare matches by view; no player sees it, and it decides nothing.	Kept until you delete it, or until 3 years pass with no sign-in or payment (see the row on your last sign-in or payment). Then your seat in each match, and your address in other players' recent matches, become a one-way code. Your opponent sees your username in their recent matches, and your Nano address only if you show it (see section 4).
When your address last signed in or paid. A sign-in is a sign-in to nano133.com that goes through: Sign in with Nano, or your purse (also with a passkey); a payment never signs you in. A payment here is a paid arcade or Nano Island round or an Unlock purchase from your address. Staying signed in, other payments or visiting a page do not count.	To find accounts nobody uses any more	3 years after your last sign-in or payment (or, for an address that has neither, 3 years after we first see it), we do what Delete my data does: your account goes, and shared records stay without your address. Never while a refund or a payment of yours is still on its way; then it happens once it arrives. The faucet's record of a claim stays, so a wallet can't claim twice.
A record that your data was deleted, because you asked or because 3 years passed with no sign-in or payment: a receipt number, the dates, a one-way code of your Nano address and a count of what was deleted. Until the deletion is done (while a refund or a payment of yours is still on its way, or while we try a part again that failed), it also holds your address, so we can finish without you.	To finish a deletion that waits, and to show later that we did it	2 years. Your address goes from the record when the deletion is done.
Feedback: your text, the page, your browser's user agent, your Nano address if you signed in, and a screenshot if you add one (a report about a player holds that player's username)	To fix bugs, to judge ideas and security reports, and to pay rewards	The report: kept. The screenshot: deleted when the report closes. Public ideas show on the idea board. A copy of the report (not the screenshot) also goes to us by email and, for a bug or an idea, to a private GitHub issue: see section 5, who else sees data.
The faucet: the address that claimed, the amount, the time and the payment's block; a keyed hash of your device and of your network	To give each wallet one claim ever, and each device and network a few a day	The claim: kept, so a wallet can't claim twice. The hashes: 2 days. The day's claim counts: 30 days.
The Wall: a tile's color, tag, the paying address and the payment	To show the wall, and to check and price each paint	The tile: while it is on the wall (until someone paints over it, we remove it, or you delete your data, which takes the address and the tag off it). The checkout: 30 days.
A random id for your browser, as a hash (Glimmer, Fans, Unlock)	To remember what this browser paid for, without an account	Unlock: 30 days. Glimmer: a year after this browser's last payment, as long as its cookie can last, so a paid skip stays paid. Fans: kept, so a paid post stays paid.
Lines: what you post, your Nano address and username with it, and the time; the lines you pin; a report you make (with a keyed one-way code instead of your address)	To show your lines, to limit spam, to review reports, and to count tips	A line: in the feed for 7 days, kept for 30 days, longer while you pin it or tips keep it; removed at once when you remove it. A report: 30 days. A tip: its block, amount and line, with a keyed one-way code for the tipper, for 30 days (the tip itself is public on the Nano ledger). Your topics and the lines you have seen stay in your browser. Lines are public.
Cross-posting, where it is on: the handle, name and picture of an account you connect, its access tokens (encrypted), and what you post	To post for you	The tokens: until you disconnect, or your sign-in ends. Posts: kept, and public.
Browser error reports: the error message, the page and your browser's user agent (no IP, no cookies)	To find and fix errors	In our hosting logs, for 30 days
The tester list: your Nano address, when you joined, how (an invite, an admin, or yourself) and what you test	To show features in testing to testers only	Until you leave the tester program or delete your data
Play together and the 3D room: your network (IP) address, in the room server's memory	To limit how many connections, new games and wrong codes one network can make	While you are connected, and with a game you started until that game ends (3 hours at most). The same holds for a game whose host refused your screen. Counts of new games and wrong codes: 1 minute. It is not written to our database. Google's request log of the room server holds the address for 30 days (section 5).
The 3D room if you are signed in, and Play together if you play under your username: a signed note from this site with your Nano address and your username (a room pass)	So that the room server knows your username is yours, and can show it to the players you meet	The note is valid for 2 minutes. The room server holds your address and username in its memory while you are connected, and your address for 2 minutes after you leave, so that a reconnect finds the same room. It writes neither to a database nor to a log. When a two-player match ends, it sends both players' addresses to this site with the match (the row for two-player matches above). In Play together it reads the username only, holds it until the game ends, and does not keep your address.
Play together: the game's code, the name you type, or your username if you are signed in and play under it, the game and the song that you pick, and each player's hits or shots and score	To run the game on both phones and on the screens in the room	In the room server's memory only, until the game ends: 10 minutes after everyone leaves, or 3 hours at most. No round and no score is stored.

2. What we do not collect

We do not ask for your name, email address, phone number or postal address.
The site's own data (its database) never holds your IP address, only a keyed hash of it. Our hosting and network providers do process it, in their own request logs; see section 5. The room server (the 3D room and Play together) holds your IP address in its memory while you are connected, to limit connections; see section 1.
We run no advertising trackers, no analytics and no third-party ad cookies, and we do not sell or rent data.
We never receive the key of your purse or of a Kanban bounty wallet. It stays in your browser.

3. What stays in your browser

Your settings (sound, money display, controls), your game progress, your puzzle progress, your prizes' state and your purse are kept in your browser's own storage. They do not reach our server, with these exceptions: your purse's address when you use it, and the name you choose for the arcade. The Cookie Policy lists every item.

The purse keeps its key (seed) in your browser storage, unencrypted. Anyone with access to your browser can use it. The Kanban bounty wallet keeps its key encrypted with your password.

This browser's purse talks to the Nano network through our server. Our server sees the purse's address and your IP address for each call, and keeps neither. When our node is busy, our server asks a public node (rpc.nano.to); that node then sees our server and the purse's address, not your IP address.

If our server fails or refuses a call, the purse calls our own node (node.nano133.com) from your browser. Our node's gateway then sees the purse's address and your IP address. Many pages (the home feed, Live, the Explorer, the purse, a payment that waits) also open a live stream from our node. When the page waits for a payment to an address, that request holds the address's first three characters (about 1 address in 2,000 starts the same way), so the gateway sees those and your IP address; otherwise it holds no address. The gateway counts calls by IP address in its memory for one minute, and open streams while they are open. It writes no IP address and no purse address to its log. Cloudflare is in front of our node, as it is in front of the site (see section 5).

A purse from a passkey. You can make your purse with a passkey (Face ID, Touch ID or your device PIN). The passkey is kept by your device or by the password manager you use, not by us. When you use it on nano133.com, your device gives this page a secret value, and the page makes your purse's key from it, in your browser. We receive neither the passkey, nor that value, nor the key, and we keep no record of your passkey. Your browser remembers which passkey it used and your purse's address (the Cookie Policy lists it). After the first use, the purse's key is kept in your browser storage as described above. Your device or password manager may bring the passkey to your other devices. That is their service, not ours.

4. What is public by nature

The Nano ledger: every address, payment and amount, for good. We cannot hide or erase it.
The leaderboard and the 3D room: your username (one per Nano address: a name made from your address until you pick one) and your scores. Players who are not signed in show as "guest" in the room.
The arcade line: your username, a new best score or a top-10 score, and a prize you buy with tickets, when your trophy room is open. It links to your trophy room when that room is open. It does not show your Nano address. A prize you hide from your room is not on the line.
The Nano Island boards: the username your account had when it scored, your best score from a paid island round, and its stars. They never show your Nano address.
What you do in the room. The other players in your room see your figure and where it walks, the look it wears, your reactions, which machine you use or wait for, and your round on that machine's screen, live, as you play it (and that it is a paid round, when it is, and the tickets it paid, as they come out of the machine). At the prize counter they see the prizes that the helper shows you. They see it under your username, or under "guest" if you are not signed in. This holds for the 3D view and for the flat view of the room. The room server passes these on while they happen and does not keep them.
Your trophy room, at nano133.com/p/ and your username, once your account has confirmed it is 18 or older. It is on by default. It shows your username, the prizes you won (each prize's name, skin, serial number and its place in your list, and whether it is a first run or a limited skin), and the month and year each was won. It never shows tickets, prices, scores or balances. Your Nano address shows only if you turn on "Show my Nano address on my card and my trophy page". It is off until you turn it on. Round hashes show only if you turn them on: each one is the public Nano payment of your last paid round before a prize, and links the two. A share image of the room (your name, your counts and your three newest prizes) is made for links to the page. In My Prizes you can turn the room off, hide single prizes, and choose how dates show.
Your player card. Other players can open a small card with your name: in the 3D room, at a two-player table, in a Play together game that you play under your username, and on your trophy page. It shows your username, a link to your trophy room, how many prizes you show and five of them. It shows nothing if your trophy room is off or your account has not confirmed it is 18 or older. With "Show my Nano address…" on, the card, the trophy page, the leaderboard and your opponents' match lists also show your Nano address, and the card shows it as a QR code. A Nano address is public: anyone who has it can see its balance and every payment it made and received. When you change the switch or your name, a page can show the old choice for about a minute, and a leaderboard for up to about 2 minutes.
A public Play together game. A game is private until both players agree to make it public. Then anybody can watch it from the list of live games: the game, the song, both scores and each hit, under names that the site makes up. The names you typed, your username and the game's code are not shown to watchers. Either player can make the game private again at once.
The idea board: ideas you mark as public, and their votes.
The Wall: each tile's color and tag.
Social tips: the sending address, shown with the tip.
Lines: what you post, with your username and your full Nano address, so that readers can tip you. This does not follow the "Show my Nano address…" switch.
Cross-posts, where enabled: what you post, and its images.

5. Who else sees data

We share data only with the services that run the site, and only what each one needs:

Cloudflare sits in front of the site. It sees every request, including your IP address, to deliver the site and to protect it. The room server (the 3D room and Play together) is the exception: your browser connects to it at Google Cloud directly, so Google sees that connection and Cloudflare does not. When you claim from the faucet, or claim the coins of Coin Run (which is a faucet claim), Cloudflare Turnstile checks that a person is there: it runs in your browser, and our server sends its answer and your IP address to Cloudflare, which tells us only whether the check passed.
Google Cloud hosts the site and the room server (Cloud Run), its database (Firestore) and its logs, in the United States (us-west1). Its request logs record the IP address that each request comes from (for most visits, a Cloudflare address; for a request that reaches the server directly, your own), and keep them for 30 days. The site serves its own fonts, so your browser asks no other company for them.
Resend sends us an email for each feedback report, with its text, page, user agent and reporter address. GitHub holds an issue for each bug report and idea, with the same details, in a private repository that only we can see. Security reports never go to GitHub.
Nano nodes and feeds. Our own node (node.nano133.com) checks payments. Your browser also connects to it, through Cloudflare: for the live stream of payments, and for your purse when our server fails (section 3). Your browser may also read the network from public services: rpc.nano.to, nanoslo.0x.no, blocklattice.io, nanexplorer.com, nano.community and CoinGecko, and, for the Bitcoin comparison, blockchain.info and mempool.space. They see your IP address, and a wallet address you look up or use.
NanChat, only if you choose it to sign in. The page loads nothing from NanChat. When you press “Open NanChat” or scan the code, the link gives nanchat.com our site's name, a one-time number and the address for the answer: nothing about you or your account. The NanChat app then sends its answer to us through a relay server of NanChat, not ours: your Nano address, your signature and the signed text pass through it. We do not run that server and do not know what it keeps. We receive those three things only: no NanChat name, chat, contact, balance or key.
Berry Wallet, only if you choose it to sign in. The page loads nothing from Berry Wallet. When you press “Open Berry Wallet” or scan the code, the link gives the app only the address of the sign-in request on our site. The app then reads that request from us (our site's name, a one-time number and its times) and sends its answer straight to us: your Nano address, your signature and the signed text. We receive those three things only: no balance, contact or key. What the app itself keeps is under Berry Wallet's own terms.
WordPress sites that use Nano Unlock. Our free WordPress plugin (see /wordpress) checks payments with our node unless the site's owner sets another one. The site's server, not its readers, calls the node: with the owner's public Nano address, the amount it waits for and a payment's block hash, and a user agent that names the plugin and the site's address. The node sees the server's IP address. It sends nothing about the site's readers, and we use these calls only to answer them: we keep no record of them, except an error line when a call fails. A Nano address and its payments are public on the network.
Next.js sites that use Nano Unlock. Our free package for Next.js (see /nextjs) does the same: the site's server, not its readers, calls our node unless the site's owner sets another one, with the owner's public Nano address, the amount it waits for and a payment's block hash. The node sees the server's IP address. For a site on Cloudflare Workers (see /cloudflare) it sees an address of Cloudflare and the name of the site's Cloudflare zone instead, and counts the site's calls by that name for one minute. It gets nothing about the site's readers, and we keep no record of these calls, except an error line when a call fails.
NFT looks. If you check an NFT look for the 3D room, the server sends your Ethereum address to a public Ethereum node and asks IPFS gateways and the NFT project's API for the art.
Bluesky, Mastodon and Threads, where cross-posting is on, receive what you post, from the account you connect.
We may share data when the law requires it, or to report illegal content or activity to the authorities.

6. Abuse and enforcement

To protect the site and its users, we may flag a Nano address, together with a one-way hash of an IP address, as an abuser, and limit or block what it can do. We keep such a flag for as long as it is needed. See the acceptable use rules.

7. Children

Some pages are made for children, such as Piggy's Farm. A child who only watches or plays for free gives us nothing: those pages ask for nothing, and free play keeps its progress in the browser. Signing in, payments, rewards, feedback with a fee and a public trophy room are for adults (18 and older) only. Before them, the site asks the year of birth. It keeps only the answer: on your device ("adult" or not), and, for a signed-in adult, that the account confirmed it and when. It never keeps the year. If you believe a child has given us personal data, write to [email protected] and we will delete it.

Kids pages

The Kids section (/kids) is four bedtime books, Goodnight, Genesis Tree, Goodnight, Honey Board, Goodnight, Golden Pineapple and Goodnight, Windmill, and five games: Coin Parade, Piggy's Farm, Block Builders, The Village That Votes and Scam Spotter. On a kids page:

There is no sign-in, no account, no payment, no prize, no ad, no chat, and no box for a child to type into.
The site sets no cookie. If a grown-up signed in elsewhere on this site, the browser still sends that sign-in cookie with the page request (browsers do this for every page of a site), but the kids page does not read it or check the sign-in.
There is no analytics and no tracking. The page loads its fonts, pictures, sounds and code from nano133.com only, and asks no other company's server for anything.
The browser keeps only the game's own settings and progress on the device (for example, that the farm has shown its tapping hand), and the last page of a book, as a number only. Never a name or an ID. The Cookie Policy lists each item.
Every way off the page, and the grown-up settings, sit behind a check for an adult: type a number that is shown in words. The check runs in the browser and sends nothing.

The arcade is not a kids page: it is for ages 13 and up, and its paid rounds and the faucet for ages 18 and up (see who may use the site). Nano Island and its games (Coin Bees, Banano, Ananos and Quorum Kitchen) are for ages 18 and up, also their free play: the age screen comes at its door, before the island loads.

As for every page, our hosting and network providers (section 5) see each request, with its IP address and browser type, in their request logs. If the page has an error, the browser sends us the error message, the page and the browser type, with no IP address kept and no cookie (section 1). Cloudflare can ask the browser to tell it when a connection to the site fails (Network Error Logging).

8. Your choices and rights

Clear your browser storage to remove your settings, progress and purse from this browser (back up your purse first). A passkey stays in your device's passwords after that; delete it there if you no longer want it.
Sign out to end your sign-in. Disconnect a cross-post account to delete its tokens.
Turn off your trophy room in My Prizes: its page then says only that the room is private, and your player card shows nothing. Your Nano address is hidden unless you turn it on there. You can also hide single prizes.
Delete your data yourself on Delete my data (also in the account menu). First you sign in there, as everywhere on the site: with a passkey, your purse, Berry Wallet, NanChat or Nautilus. A sign-in of the last 10 minutes proves that the address is yours, and so does the signature of this browser's purse; an older sign-in asks you to sign in again. Before you confirm, the page shows the account's name, a short form of its address, and how this browser signed in. Then your sign-ins end on every device, and what we keep about your address is deleted. Public records that other people are in (leaderboards, the arcade line, duels, tips, shared Kanban cards, ideas others voted on) stay, shown as "Deleted player" or without a name. Your rows on the Nano Island boards are deleted, and so are the reviews of your paid Ananos runs. A leaderboard can show your old name for up to about 2 minutes after that. Payment records stay for accounting for 7 years, with your address replaced by a one-way code. While a refund or a payment of yours is still on its way, the rest waits until it arrives, and then happens without you. If a part of the deletion fails, we try again by ourselves until it is done; you do not need to ask twice. Until it is done you cannot sign in with that address (for 1 day at most; a sign-in after that stops the request, and you can ask again). After it is done, the address can make a new account.
Write to [email protected] to ask what we hold about a Nano address you control, to correct it, or to delete it. We may ask you to prove that you control the address (for example by signing in with it). We cannot erase the public ledger, and we keep payment records as long as we need them.
Depending on where you live, you may have more rights under the law (for example in the EU, the UK or California). Write to us to use them.

9. Security

We store a sign-in only as a hash of its cookie, key every IP hash with a secret, encrypt cross-post tokens, use secure cookies, and keep the site's own keys in a secret store. No system is perfectly secure. Report a security problem with the Security tab of the Feedback button.

10. Changes

We may change this policy. We change the date at the top when we do, and give notice on the site for a change that matters.

11. Contact

Pugs, LLC, the operator of nano133.com: [email protected], or by post:

Pugs, LLC
30 N Gould St, Ste N, Sheridan, WY 82801