Overview
Last updated: May 25, 2026
This Privacy Policy explains what personal information is collected when you use itzar.dev and its features, including WaveBet, the Wraith Codes tracker, and the level-sent checker, how that information is used, and how it is protected. This site is a personal project and is not operated by a company.
Information We Collect
Account Registration
When you create a WaveBet account with Discord, we collect:
| Data | Details |
| Username | Chosen for you on first login (you can change it later) |
| Discord account ID | Used to uniquely identify your account |
| Discord display name | Used to help with account recovery and moderation |
Activity Data
While using WaveBet, we store:
| Data | Details |
| Orb balance | Your current virtual currency balance |
| Portfolio | Which markets you have bet on and your positions |
| Betting statistics | Total correct and incorrect bets, orbs spent, and orbs won |
| Last daily claim | Timestamp used to enforce the 24-hour cooldown |
| Account flags | Moderation level and ban status if applicable |
Automatically Collected Data
We do not run analytics software, ad trackers, or third-party tracking scripts. Your IP address is processed in memory for rate limiting purposes only; it is never written to the database or any log file.
Wraith Codes and Level-Sent Checker
These features do not require an account and collect no personal information. The level-sent checker proxies your query to Boomlings' servers; your IP address is not forwarded.
How We Use Your Information
| Data | Purpose |
| Discord account ID | Verifying your identity at login |
| Discord display name | Helping with account recovery and moderation |
| Username | Identifying your account and displaying your name on leaderboards |
| Orbs, portfolio, stats | Running the WaveBet prediction market game |
| IP address in memory | Rate limiting to prevent brute-force and abuse |
We do not sell, rent, or share your personal information with any third parties, except as described in Section 4.
Third-Party Services
Discord
Authentication is handled via Discord OAuth2. We request the basic identify scope only. Discord's privacy policy governs their data handling.
Boomlings
The level-sent checker and secret reward proxy forward requests to boomlings.com, the official Geometry Dash game server. No personal account data is included in these requests.
Fly.io
This site is hosted on Fly.io. Your data is stored in a PostgreSQL database within Fly.io's infrastructure. Fly.io's privacy policy governs their infrastructure-level data handling.
Data Retention
| Account type | Retention |
| Unverified accounts | Not applicable (Discord OAuth accounts only) |
| Banned accounts | Automatically deleted 60 days after ban is applied |
| Active accounts | Retained until you delete your account |
You may delete your account at any time from account settings. Deletion is immediate and permanent; all associated data is removed from the database.
Cookies
We use a session cookie (wt_auth) to maintain your login session and a short-lived OAuth state cookie (wt_oauth_state) during Discord sign-in. Both cookies are HttpOnly, SameSite=Lax, Secure in production, and the session cookie expires after 7 days or immediately on logout. We use no advertising, analytics, or third-party cookies.
Security
Authentication is handled via Discord OAuth2. Auth tokens are signed JWTs. CSRF origin checks are applied to all cookie-authenticated POST requests. Rate limiting is applied to all API endpoints.
No system is perfectly secure. Protect your Discord account with a strong, unique password and 2FA.
Children
This site is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us so it can be removed.
Your Rights
At any time you may access your data by logging in, correct your username via account settings, or delete your account and all associated data via account settings. To report a privacy concern, contact us via the site's Discord server.
Changes to This Policy
If this policy changes materially, the Last updated date at the top will be revised. Continued use of the site after a policy update constitutes acceptance of the revised policy.