01 Introduction

Artisam Labs ("we", "us") operates xGameFi — commerce infrastructure that lets game studios sell in-game items through Stellar-powered storefronts. This policy explains what we collect, why, and the choices you have. It covers this marketing website and the xGameFi application at app.xgamefi.shop.

02 Information we collect

• Studio & admin accounts: username, hashed password (argon2id), and role, created when a studio is onboarded.
• Player data: Stellar wallet address (the player's public key, e.g. G…) and an optional handle. Players authenticate by signing a nonce with their wallet — no password and no email required.
• Studio configuration: payout wallet address, API base URL, webhook URL, and per-studio API keys (stored hashed; full key shown once).
• Transaction data: order, payment, payout, P2P trade, referral, and promotion records, including on-chain Stellar transaction hashes and amounts.
• Usage data: pages visited, browser type, IP address, and referral source, gathered via analytics cookies (see below).
• Cookies: small files on your device used for sessions, preferences, and analytics.

03 How we use your information

• To operate studios, storefronts, checkout, P2P trades, referrals, and promotions.
• To verify payments on-chain and deliver signed webhooks to your game server.
• To send payouts to studio wallets and process referral rewards.
• To respond to inquiries and provide support.
• To improve the product, website content, and user experience.
• To fulfill legal obligations and detect or prevent fraudulent activity.

04 Sharing your information

We do not sell or rent personal information. We share data only with: Stellar network (payments and payouts are public on-chain by design); service providers (hosting, databases, object storage) bound by confidentiality; partner studios, who receive their own players' transaction data via signed webhooks; and legal authorities when required by law.

05 Data retention

Account and transaction records are retained for as long as needed to operate the service and meet financial/audit obligations. On-chain transaction data is permanent and outside our control. Studio API keys can be revoked at any time.

06 Data security

We apply technical and organizational safeguards — hashed passwords, httpOnly session cookies, HMAC-signed webhooks with replay windows, tenant isolation per studio, and SSRF protection on every studio-supplied URL. No method of internet transmission is completely secure.

07 Cookies

We use three types: essential (session and authentication), analytics (visitor behavior), and preference (your settings). You can manage cookies through the consent prompt on this site or through your browser controls.

08 Your rights

• Access, correct, or delete your data.
• Withdraw consent and opt out of marketing communications.
• Revoke studio API keys and rotate webhook secrets.

Exercise any of these by contacting xgamefi@artisam.xyz.

09 Third-party links & services

This site and app link to third parties (e.g. Stellar, Freighter wallet, studio storefronts). We are not responsible for the privacy practices of external websites. Wallet transactions are governed by the Stellar network's own rules.

10 Changes to this policy

Updates are posted on this page with a revised date. Continued use of the site indicates acceptance of the updated policy.

11 Contact us

Email: xgamefi@artisam.xyz
Operator: Artisam Labs — artisam.xyz