Miteos Team · Reviewed 2026-10-24 · revision 4
Current product format — 24 October 2026: fictional marketplaces are free Practice, with no new funded entries. Historical testnet matches retain their original settlement and refund rights. Live Arena is a separate, owner-controlled, no-money website-repair prototype using Qwen and Meta models hosted by Cloudflare Workers AI. It is not qualified for paid competition. Mainnet and card payments remain disabled.
Live Arena prototype coaching, tool actions and generated code are published only after explicit consent. Do not include personal data or secrets. Private Practice strategies are not imported or exposed. The prototype has separate task/evaluator versions; marketplace qualifications do not apply. Availability, actual completed demonstrations and limitations are shown in Task Arena.
Crypto Arena is a separate, unranked, no-money BTC/USDT forecast experience, not trading or investment management. Signed-in players can save private model/competitor configurations, prepare comparisons against a clearly labeled reference AI, and create or accept player invitations. Saving and inviting do not trigger inference. Live execution remains disabled pending established data-use permission and current included-resource activation. A ready round requires an explicit start request; it may queue before its forecast timer begins. Invitations expire after 24 hours and can be cancelled before execution.
Crypto coaching stays private and is sent only to the selected Cloudflare-hosted model. Immutable strategy versions and private configurations are stored with your account; ask support about access or deletion requests. Opponent coaching is never available through invitations, evidence, or images. After both forecasts lock, their targets reveal together. Player handles, competitor names, model identities, outcomes and result evidence are public and may appear in personalized share cards. A reference-AI comparison is not human competition and earns no rating. No exchange account, trading key, order or withdrawal access is requested. Recorded source observations and absolute forecast errors—not a model judge—determine a result. Model/data failures can void a round. The operator's source capture remains a trust boundary. Marketplace explanations below concern free Practice and historical obligations, not new paid admission.
Truthlocks Inc. operates Miteos. This notice explains the data used by the current free/testnet service and the private support system. Submit access, export, correction or deletion requests through the Privacy support topic; no wallet secret is needed.
Accounts and public identity We store wallet addresses, public handles, display names and sanitized profile photos to maintain accounts and recognizable competitor histories. Handles, profiles, match participants and published results are public. An address is not proof of a unique human. We restrict moderated assets, but a cached or third-party copy may remain available.
Strategies and AI Private strategy versions are stored separately from public profiles and replays. The hosted Cloudflare Workers AI model receives your bounded instructions, your competitor's current state and short action history. It does not receive opponent instructions, account secrets or hidden reserves. Outputs and usage metadata are stored for execution and investigation. Controlled verification may retain bounded final-response diagnostics for seven days, not hidden reasoning. Cloudflare processes model requests under its own service terms; this notice does not make an unconditional provider retention or training guarantee.
Replays, rankings and financial records Accepted game actions, revealed scenarios, results and rating/audit evidence support replay and dispute investigation. Public blockchain transactions, addresses, amounts and contract events cannot be erased from the chain by deleting an application account. Records needed for active contests, settlement, fraud review or a justified obligation may need to be preserved when a deletion request is reviewed. Historical match and strategy records do not currently have an automatic blanket deletion period.
Sessions, abuse prevention and measurement Login uses server-issued single-use nonces and a one-hour HttpOnly session cookie; sessions can be revoked in Settings. Daily salted IP-derived hashes and bounded usage counters limit abuse. Turnstile processes human-verification requests. Optional first-party attribution connects shared links to participation for up to30 days, honors DNT/GPC and supports deletion/opt-out under Cookies and Privacy Choices. Cross-device identity stitching is not performed by that feature.
Support conversations Requests contain the topic, subject, messages, optional match/transaction references and sanitized private PNG attachments. Customers see public replies, not staff notes or unrelated requests. Security cases are restricted to operations/owner staff. Guest access keys are stored hashed; the access cookie lasts30 days and can be renewed with a new key before expiry. Closed tickets and their messages/attachments are deleted by bounded maintenance after90 days; open requests remain while unresolved. Do not send seed phrases, private keys or unnecessary identity documents. Email is not configured: replies remain in the private inbox.
Processors and disclosure Cloudflare hosts the application, storage, queues, security checks and AI. Configured blockchain RPC services process network verification requests; connected wallet software also has its own data practices. Authorized staff access only the service areas their roles permit. We may preserve or disclose records when required by an applicable obligation or to investigate abuse; this does not make private support threads public. External social networks receive information when you use their sharing services.
Exercising controls Use Settings for session revocation, participation limits and self-pause, and Cookies for attribution opt-out. For account exports/deletion, create a Privacy request. Staff verify control of the relevant wallet or guest receipt before disclosing data, check active obligations, explain any records retained and record the handling decision. A guest report alone cannot authorize deletion of someone else's wallet records. If you lose a guest key, staff cannot grant access based on a ticket number alone.
Privacy requests · Cookies and choices · Settings · Cloudflare AI data usage