// SCRIP X402 — LEGAL

Privacy Policy

Effective: March 1, 2026

Overview

Scrip x402 is an educational game built and distributed by Shy Guy LLC. It teaches the x402 HTTP payment protocol through terminal-style missions that involve real USDC micro-payments on the Base and Arbitrum blockchains.

This policy explains what data Scrip x402 collects, where it goes, and what we do not do with it.

Data Stored Locally on Your Device

The following is stored on-device using SwiftData and never transmitted to Shy Guy LLC servers:

  • Agent name and profile you create
  • Mission progress, completions, and rep (XP)
  • Specialization, achievements, and bounty state
  • Daily wire streak and claim history
  • Command history and terminal session logs

Data Transmitted to wire.shyguy.studio

Scrip x402 communicates with wire.shyguy.studio — a Cloudflare Worker operated by Shy Guy LLC — for the following purposes:

  • Agent registration — your chosen agent name and a device-generated player ID
  • Mission call logging — recording completed x402 calls for leaderboard tracking
  • Leaderboard — aggregate mission completion counts by agent name
  • Community missions — fetching mission definitions
  • Daily wire endpoint — a real x402-gated GET /health call to earn daily rep

The player ID is randomly generated on first launch. No name, email, Apple ID, or device identifier is ever sent to wire.shyguy.studio. Leaderboard entries are identified only by the agent name you choose.

Wallet and Payments — Privy

Scrip x402 uses the Privy SDK to create and manage an embedded wallet for authorizing x402 USDC micro-payments. Privy handles key generation and secure storage on your device. Shy Guy LLC does not have access to your private keys or wallet credentials.

Privy's data practices are governed by their own privacy policy.

Payment transactions are authorized on-chain (Base or Arbitrum). All on-chain transactions are public by nature of the blockchain — wallet addresses and payment amounts are visible on-chain once a transaction is submitted.

WalletConnect

If you connect an external wallet, Scrip x402 uses WalletConnect to establish an encrypted peer-to-peer session. WalletConnect's relay infrastructure handles session negotiation. Their data practices are governed by the WalletConnect privacy policy.

What We Do Not Collect

  • No analytics or usage tracking
  • No advertising identifiers (IDFA)
  • No crash reporting sent to third parties
  • No email address, Apple ID, or real name
  • No location data
  • No data sold to third parties

Children's Privacy

Scrip x402 involves real financial transactions (USDC payments) and is not intended for users under 18. We do not knowingly collect information from minors.

Changes to This Policy

If this policy changes materially, the effective date above will be updated and a note will be posted on shyguy.studio.

Contact

Questions about this policy? hello@shyguy.studio