Privacy

What this site does not do

The $BEAST website does not run advertising trackers or analytics. It does not ask for a wallet seed phrase, private key, token approval, or blockchain transaction to use an account.

Data stored in your browser

The site uses local storage to remember that you dismissed the privacy notice, temporarily cache the latest $BEAST market values with their update time, and preserve local game progress and settings.

When the game checks the online Captain's Log, the site sets a secure session cookie for guests as well as account holders. The cookie contains a random session identifier rather than a password or wallet information. It is protected from JavaScript access and is used to protect account requests, bind temporary run tickets to this browser, and keep an account signed in if you choose to use one.

You can remove this information at any time by clearing site data for beastmeme.ink in your browser settings.

Game accounts and public scores

A game account stores your chosen username, a one-way password hash, account status, sign-in security information, and account timestamps. Your username and accepted scores can appear publicly in the Hall of Captains. Your password is never stored as readable text.

An email address is optional and remains private. If provided, it is used only for confirmation and password recovery. It is not displayed on scoreboards or public profiles. Email sign-in and recovery become available only after the address is confirmed.

Starting an online voyage creates a temporary ticket containing its mode, seed, rules versions, expiry, and an opaque hash tied to the browser session. Unclaimed expired tickets and expired account links are removed after a seven-day retention period. A claimed voyage can also store the score, duration, collectibles, defeated enemies, relics, lore, game version, and validation result. Competition voyages additionally store a compact record of control inputs and choices so the server can replay the run. Competition input records are removed 90 days after a competition is locked or cancelled, while accepted scores remain until account deletion. Pending claims stay in local browser storage until accepted or expired. Standard guest progress remains in the browser if no score is claimed.

Account and competition security

The service processes limited connection and attempt information to rate-limit sign-ins, prevent automated abuse, validate run tickets, and investigate suspicious competition results. Administrative competition changes are recorded in a private audit log.

Account sessions expire and can be ended by signing out. The account controls let you change your password or private recovery email, review and revoke sessions, or delete your account and scores. Password changes and resets end existing sessions. Deletion removes account details and score history; a non-identifying record remains where needed to preserve administrator audit history.

Market data

The homepage requests public pair data from Dexscreener. That request lets Dexscreener receive normal connection information such as your IP address, browser details, and the referring site. A cached value is shown if the service is temporarily unavailable.

SuperSwap

The SuperSwap frame is not loaded automatically. If you choose Load SuperSwap, your browser connects directly to superswap.ink. That service may store its own cookies or other browser data and applies its own privacy terms.

Beastify images

Beastify reads your selected image through browser file and canvas features. The image and your edits remain on your device and are not uploaded to this website. Closing or refreshing the editor clears the working image.

External links and hosting

Telegram, X, Dexscreener, and other external links open services with their own privacy practices. The website host may process standard request information, including IP address, requested URL, browser details, and timestamps, to deliver and secure the site.

If optional email delivery is enabled and you provide an email address, the configured delivery provider receives that address and the confirmation or recovery message needed to send the email.

Questions

For a privacy question about this website, contact the community through Telegram or X.