Privacy Policy

1 Introduction & Scope

Welcome to Pi Lottery ("we", "us", or "our"), a decentralized entertainment application (dApp) built to operate inside the Pi Browser on the Pi Network.

This Privacy Policy explains how our platform handles information when Pioneers connect their Pi accounts, purchase lottery tickets, and participate in prize rounds. We adhere strictly to the principle of data minimization: we collect only what is cryptographically and operationally required to verify participation and disburse rewards.

2 Information We Collect

When you authenticate and interact with Pi Lottery, we collect only the following limited data points through the official Pi Network Javascript SDK:

• Pi Username: Your public Pioneer username used to identify your ticket ownership and display previous winners on the transparency board.
• Pi User ID (UID): A unique, pseudo-anonymous alphanumeric string assigned by the Pi Network to associate your ticket purchases with your account.
• Public Wallet Address: Provided via the user-granted wallet_address SDK scope for the sole purpose of executing automated App-to-User (A2U) prize payouts.
• On-Chain Transaction Identifiers: Blockchain transaction hashes (TXIDs) and Pi Payment IDs created during ticket purchases and prize distributions.
• Draw Participation Records: Timestamps, round numbers, and ticket counts registered in each active draw.

3 What We Strictly DO NOT Collect

To ensure non-custodial safety and uphold Web3 security standards:

4 How We Use Your Data

The information we collect is utilized exclusively for the core functions of the lottery dApp:

• Authentication & Session Validation: Confirming your active session via the Pi Network backend verification endpoint (https://api.minepi.com/v2/me).
• Ticket Minting & Pool Allocation: Generating unique ticket entries tied to your Pi UID and crediting 80% of ticket value into the round's jackpot pool.
• Automated Winner Selection & Payouts: Selecting winning tickets via cryptographically fair random algorithms and initiating automated A2U payments to the winner's wallet address.
• Transparency & Anti-Fraud: Preventing duplicate ticket replay attacks and maintaining verifiable records of finished rounds.

5 Data Storage & Infrastructure

Pi Lottery is architected on enterprise-grade edge infrastructure:

• Cloudflare D1: Ticket records, draw metadata, and winner records are persisted in a distributed SQL database hosted by Cloudflare D1. Data is encrypted both in transit (TLS 1.3) and at rest.
• Cloudflare Workers: All API requests are processed serverlessly at Cloudflare edge data centers without maintaining persistent application servers that could be exposed to vulnerabilities.
• Local Browser Storage: We use your local browser localStorage strictly to cache your selected language preference (English/Arabic) and prevent repetitive win alert popups. No sensitive credentials are stored locally.

6 Blockchain Transparency & Public Ledger

By using Pi Lottery, you acknowledge that transactions conducted over the Pi Network blockchain are public by design.

When you purchase tickets or receive an automated jackpot payout, transaction records (including sender/receiver addresses, timestamps, and Pi amounts) are immutably logged on the Pi Horizon blockchain ledger. These ledger records cannot be altered, redacted, or removed by Pi Lottery.

7 Third-Party Services

Our dApp interfaces with the following trusted third-party providers:

• Pi Network (SocialChain Inc.): Provides authentication, identity verification, and payment settlement APIs (minepi.com).
• Cloudflare Inc.: Provides serverless hosting, edge compute, and D1 database security.

We do not use Google Analytics, Facebook Pixel, advertising SDKs, or any data broker integrations.

8 Data Retention & User Rights

Ticket and draw history records are retained in Cloudflare D1 for historical round auditing and transparency display.

Because we do not maintain off-chain user profiles, passwords, or personal files, your privacy footprint remains tied exclusively to your pseudo-anonymous Pi Network account. You may cease using the dApp at any time by closing the Pi Browser tab or disconnecting app authorizations in your Pi account settings.

9 Security Measures

We employ robust defensive practices including HTTPS-only communication, strict CORS origins, rate limiting on API endpoints, and automated secret isolation through Cloudflare Worker environment variables. Server API keys and payout signing credentials are never exposed to the client-side frontend.

10 Contact & Inquiries

If you have questions, feedback, or concerns regarding this Privacy Policy or your data within Pi Lottery, you may contact the development team directly: