Privacy Policy

How itzar.dev and WaveBet collect, use, and protect your data.

Overview

Last updated: May 25, 2026

This Privacy Policy explains what personal information is collected when you use itzar.dev and its features, including WaveBet, the Wraith Codes tracker, and the level-sent checker, how that information is used, and how it is protected. This site is a personal project and is not operated by a company.

Information We Collect

Account Registration

When you create a WaveBet account with Discord, we collect:

DataDetails
UsernameChosen for you on first login (you can change it later)
Discord account IDUsed to uniquely identify your account
Discord display nameUsed to help with account recovery and moderation
Activity Data

While using WaveBet, we store:

DataDetails
Orb balanceYour current virtual currency balance
PortfolioWhich markets you have bet on and your positions
Betting statisticsTotal correct and incorrect bets, orbs spent, and orbs won
Last daily claimTimestamp used to enforce the 24-hour cooldown
Account flagsModeration level and ban status if applicable
Automatically Collected Data

We do not run analytics software, ad trackers, or third-party tracking scripts. Your IP address is processed in memory for rate limiting purposes only; it is never written to the database or any log file.

Wraith Codes and Level-Sent Checker

These features do not require an account and collect no personal information. The level-sent checker proxies your query to Boomlings' servers; your IP address is not forwarded.

How We Use Your Information

DataPurpose
Discord account IDVerifying your identity at login
Discord display nameHelping with account recovery and moderation
UsernameIdentifying your account and displaying your name on leaderboards
Orbs, portfolio, statsRunning the WaveBet prediction market game
IP address in memoryRate limiting to prevent brute-force and abuse

We do not sell, rent, or share your personal information with any third parties, except as described in Section 4.

Third-Party Services

Discord

Authentication is handled via Discord OAuth2. We request the basic identify scope only. Discord's privacy policy governs their data handling.

Boomlings

The level-sent checker and secret reward proxy forward requests to boomlings.com, the official Geometry Dash game server. No personal account data is included in these requests.

Fly.io

This site is hosted on Fly.io. Your data is stored in a PostgreSQL database within Fly.io's infrastructure. Fly.io's privacy policy governs their infrastructure-level data handling.

Data Retention

Account typeRetention
Unverified accountsNot applicable (Discord OAuth accounts only)
Banned accountsAutomatically deleted 60 days after ban is applied
Active accountsRetained until you delete your account

You may delete your account at any time from account settings. Deletion is immediate and permanent; all associated data is removed from the database.

Cookies

We use a session cookie (wt_auth) to maintain your login session and a short-lived OAuth state cookie (wt_oauth_state) during Discord sign-in. Both cookies are HttpOnly, SameSite=Lax, Secure in production, and the session cookie expires after 7 days or immediately on logout. We use no advertising, analytics, or third-party cookies.

Security

Authentication is handled via Discord OAuth2. Auth tokens are signed JWTs. CSRF origin checks are applied to all cookie-authenticated POST requests. Rate limiting is applied to all API endpoints.

No system is perfectly secure. Protect your Discord account with a strong, unique password and 2FA.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us so it can be removed.

Your Rights

At any time you may access your data by logging in, correct your username via account settings, or delete your account and all associated data via account settings. To report a privacy concern, contact us via the site's Discord server.

Changes to This Policy

If this policy changes materially, the Last updated date at the top will be revised. Continued use of the site after a policy update constitutes acceptance of the revised policy.