Privacy

Last updated 27 October 2026

This page explains what paperfight.xyz (“PaperFight”, “we”, “the PaperFight team”) handles. Short version: no accounts, no cookies, no ads, no selling data.

On your device

Your nickname, stats, level and settings are saved on this device (browser storage). Your 1-tap trading key is created and kept in your browser, encrypted with a key the browser can’t export. It never reaches our servers. Clearing your browser data removes all of it.

Your wallet

When you connect, your public wallet address is used in your browser to read your Papertrade account and to sign your own trades. We don’t store your address on our servers, with two exceptions: the jackpot, and a public name if you choose one.

Public name

Going public is optional. Your browser confirms it is your wallet with a free signature (no transaction): your 1-tap key signs it in the background, or your wallet does if 1-tap is off. To check a 1-tap key, our server reads public data: the key’s registration on HyperEVM and whether Papertrade still lists it as active. Our server stores your chosen name with your wallet address in Cloudflare’s storage. The name is shown publicly on the points board and the live feed instead of your short address. Your full address is never shown next to it. Tap Make private on your profile at any time: the name disappears, and we keep only a note that it was removed so an old signature can’t be reused.

Jackpot claims

When you beat the Solo boss, your browser sends your public wallet address and that fight’s position ID to our server. That lets us check the jackpot against Papertrade’s public records. The claim is written to our server logs at Cloudflare, and PaperFight keeps what it needs to verify and pay the jackpot. If you win, the short form of your address (like 0xabc…123) and the payout transaction are shown publicly on the site.

Papertrade requests

Calls to Papertrade go through a small pass-through on our domain (because Papertrade blocks direct browser calls). It forwards the request and returns the answer. It holds no keys, signs nothing, stores nothing and doesn’t forward cookies. Papertrade sees these requests and handles them under its own policies.

Prices

Live BTC and ETH prices come straight from Hyperliquid’s public API, which sees your IP address like any website you load.

Basic usage stats

We collect a few anonymous events to keep the site working: page errors, failed wallet or trade steps, and funnel steps (visit, share, connect, 1-tap on, fight started, result, and Practice started, finished or switched to a real fight). Links in shared cards carry a short tag (card or profile, Solo level, channel, and “practice” for Practice cards). We keep that tag on your device for up to 14 days, with a flag for your first connect and first fight, so we can count how many fights started from a share. Counts are stored as anonymous totals with Cloudflare. They carry no wallet address, no name and no cookie, only a random ID that lasts until you close the tab. Our host, Cloudflare, processes standard request logs (like IP addresses) to run and protect the site.

What we don’t do

No advertising trackers, no selling or sharing data for marketing, no profiles.

Age

PaperFight is for adults (18+) only.

Changes

We may update this page. The date at the top shows the latest version.

Contact

Questions? Reach out through PaperFight’s official channels.