UNDERDIGS — Privacy Policy

Last updated: 30 October 2026 (version 1.0)

The story in UNDERDIGS plays offline. There is no account and no sign-in, and OSHO GAMES runs no server for this game, so the game sends nothing to us. Connecting a Solana wallet is optional and is used only for the Chain Vault and the museum's last door. If you choose to record a Chain Vault result, your wallet address, your move count and (later) your moves are written to Solana, a public blockchain: anyone can read them, and they cannot be deleted.

What the app collects on its own

Nothing. There is no analytics, no advertising, no crash reporting, no sign-in and no third-party SDK that sends data about you. The game engine's diagnostic data and hardware statistics are turned off.

The app asks Android for two permissions: internet access (for the Chain Vault and the last door, and to talk to a wallet app on the same device) and vibration (which you can switch off in the settings). Android also adds one permission that only this app itself can use. The app has no access to your location, camera, microphone, contacts, files or notifications.

While you play the story, the app sends nothing anywhere. It goes online only when you open the Chain Vault or the last door, as described below.

What the app stores on your device

The app keeps the following in its own private storage on your device:

Progress: the missions you have reached and cleared, your fewest moves, likes, the treasures and parts you have collected, the story scenes and radio talk you have seen, your crew, your notebook clues, how many hint demos you have left today, and similar counters.
Settings: language, sound volume, screen shake, vibration, effects and icon labels.
Chain Vault (only if you use it): your wallet's public address and the authorisation token your wallet app issues so that the next connection is quicker; your record book for each wallet (the vaults you recorded, your move counts, seals, the random values used for the seals, your move sequences and the transaction signatures); a list of the wallet addresses that were first to crack each vault, copied from the public records on Solana so that their crests can be shown on the diggers' wall (these are other players' public addresses, newest first, with a limit); and a cache of vault data rebuilt from Solana (block numbers, vault layouts and example solutions).
The last door (only if you open it): the wallet address that opened it, its signature and the time, and a list of the wallet addresses that have opened the door on this device, so the door can show its wall of diggers.

Choosing Disconnect in the game removes your wallet address and the authorisation token, and asks your wallet app to withdraw this app's authorisation. In the story menu you can also clear the marks for scenes you have seen and your notebook. To remove everything, uninstall the app or clear its data in Android's settings. Records already written to Solana are not affected — see below.

None of this leaves your device through the app, except what you choose to write to Solana. The Chain Vault and last-door data listed above (your wallet address, the authorisation token, your record book, the first-to-crack list and the door records) are excluded from Android's device backup (for example, a backup to your Google account, or a transfer to a new phone). Your progress and settings may be included in that backup, depending on your device settings, so you can continue on a new phone. That backup is handled by Android and your Google account; it never reaches OSHO GAMES. The app never holds your private key or seed phrase.

Connecting a wallet (optional)

Connecting uses the Solana Mobile Wallet Adapter, which talks to a wallet app installed on the same device through a connection that stays inside the device. We never see your private key or seed phrase. The app may ask your wallet to do three things, and your wallet shows you each request before anything happens:

Connect — share your public address with the app.
Record a Chain Vault result — only when you press record. The app prepares a transaction; your wallet signs it and sends it to Solana. The network fee (about 0.000005 SOL) is paid from your wallet to the Solana network. The transaction sends no SOL to anyone else.
Open a seal — only when you press "open the seal now" in your record book, after the vault has closed. This sends a transaction that only opens the seal of your earlier record (see below), with the same small network fee.
Open the last door — sign a short message (not a transaction; no fee).

What is written to Solana when you record

Each record is one transaction from your wallet. It contains a transfer of 0 SOL from your wallet to itself (which carries the vault's marker address), and a memo in this form:

UD1 W=<wallet address> C=<D|W>.<vault>.<move count>.<hint 0|1>.<seal> R=<D|W>.<vault>.<random value>.<moves>

C is the new record: the kind of vault (D for the daily vault, W for the weekly Seeker vault) and its name, your move count, whether you used a hint, and a seal — a value that locks in your moves without showing them.
R opens the seal of your earlier record, once its vault has closed: the random value and the moves themselves (one letter per move). From then on, anyone can replay that solution.

A seal is opened either together with your next record, or on its own when you press "open the seal now" (a transaction whose memo has only UD1 W=… R=…). If a seal is never opened, the moves stay hidden and that record does not count in the rankings, because nobody can check it.

No name and no picture are written: the game has no display names, and your thief's crest is drawn on each device from your wallet address. Your wallet address is already public on Solana. What is written to Solana is public, can be read by anyone, and cannot be changed or deleted — by you or by us.

Reading Solana

When you open the Chain Vault or the last door, the app reads Solana through one service only: Solana's public RPC endpoint, https://api.mainnet-beta.solana.com. It asks for:

block information, to find the first block of the day or week that the vault is built from (block numbers, times and block hashes);
the transactions that mention a vault's marker address — an address made from the vault's name, which belongs to nobody — and their memos and fee payers, to build the rankings and replays;
your wallet's SOL balance, and its Token-2022 token accounts, to check whether it holds a Seeker Genesis Token;
when you record or open a seal: a recent blockhash to build the transaction, and its status to confirm it arrived.

The only addresses the app sends are your own wallet address and vault marker addresses. Other players' addresses only come back as part of the public records. As with any request over the internet, the RPC service can see your device's IP address; it is operated by a third party, not by OSHO GAMES.

Seeker owner vault (optional)

If your connected wallet holds a Seeker Genesis Token, the game opens a weekly Seeker vault and shows the ◆ mark next to your records. The check reads your wallet's token accounts as described above; nothing else is sent.

The last door

After the story, the last door in the museum opens with a signature. Your wallet signs this message, shown in the language you play in (in English, it reads):

UNDERDIGS
Open the door behind the founders' vault
Thief: <wallet address>
<date, YYYY-MM-DD (UTC)>
No fee. Nothing is sent to the chain

It is a message, not a transaction: there is no fee and no SOL is needed. The signature is checked on your device and kept there. It is not sent anywhere.

Who else receives anything

OSHO GAMES runs no server for this game and receives nothing from it. There is no analytics provider, no advertising network and no data broker. The only outside service the app contacts is the public Solana RPC service above, and only when you open the Chain Vault or the last door. Records you choose to write go to the Solana network through your wallet app, and are public.

Children

Played without a wallet, the game collects nothing, so it collects nothing from children. The Chain Vault requires a Solana wallet, and the records it writes are public and permanent. There is no chat, messaging or other way for players to communicate.

Changes

If a future version collects anything not described here, this page will be updated before that version is released, and the change will be described here.

Contact

Questions about this policy: ai.hitori.osho@gmail.com