Privacy Policy

Last updated: October 20, 2026

DegenHUD is a browser extension that keeps your play data on your own device. This policy covers the extension (Part 1) and the website at degenhud.com, where you sign in, buy access keys and manage your account (Part 2).

Part 1: The Extension

Where it runs

The extension activates only on Stake game pages (stake.com, stake.us and Stake mirrors). It does not read, run on or watch any other website. It requests these browser permissions and nothing more: storage and unlimitedStorage (to keep your history locally), tabs and sidePanel (to open its own panel next to the game), and alarms (to schedule reminders you set, such as a bonus claim). Its only host permissions are our own service, api.degenhud.com (formerly api.stakehud.com), and its previous address api.boostbot.gg, kept so older versions keep working.

What stays in your browser

Everything DegenHUD shows you is stored in the extension's local storage on your device: your bet log and session history, statistics, strategy and calculator settings, bonus and reload claim logs, and your access key. None of it is uploaded to us. You can export it as an archive, clear all or part of it from the extension's settings, and removing the extension deletes it.

What it sends to us

• Access key checks: your key, a random device ID the extension generates, and your browser's user-agent string, so the key can be validated and the device limit enforced. This is the only record we hold that ties to you: which key was used on which device, and when it was last seen.
• Provably-fair verification: when you choose to verify rounds, the revealed server seed, client seed and nonce range for those rounds, so the results can be recomputed and returned to you. Seeds are used for that calculation and are not linked to a profile.
• Reference data downloads: game paytables, tool bundles and the live bonus code feed. These are downloads to you; nothing about your play goes the other way.

It does not send us your balances, bets, results, account details or anything else about your Stake account.

What it does with Stake

To read live results, seeds, VIP progress and bonus offers, the extension makes requests to Stake directly from your browser, using the session you are already signed in with. These are the same requests the Stake page itself makes. They go from you to Stake and never pass through our servers. We never see or store your Stake session, login or account details. Stake's own privacy policy governs that traffic.

No tracking

The extension contains no advertising, analytics or telemetry. It does not report crashes, usage, or which features you open.

Part 2: Website & Account

• Signing in with Google: we receive Google's ID for your account, your name, your email address (only if Google has verified it) and your profile picture. The ID is how we recognise you on your next sign-in. The name, email and picture are shown on your account page and are not used for marketing or shared. The Google access token is revoked after that one lookup.
• Signing in with Discord: we receive your Discord user ID, display name and avatar, and keep them in a session record for up to 30 days. We do not receive your email, your servers or any permission to act as you, and the Discord access token is discarded after that one lookup.
• Access keys and devices: each access key records the devices that have used it (a random ID and the browser's user-agent string), when each was last seen, and which account the key is linked to. This enforces the device limit and lets you remove a device yourself.
• Purchases and referrals: an invoice and purchase record for each key bought: the plan, price, SOL amount and rate at the time, the deposit address used and the key issued. If you gave them, it also holds a contact detail and the ID or username of whoever referred you.
• Support messages: the name, email address and message you send from the contact page or by email to support@stakehud.com, any images or logs you attach, and our replies, kept as a ticket on your account. The message text is encrypted on our servers; a short hash of the sending IP address is kept to deter abuse, not the address itself. Attachments are deleted with the ticket.
• Friends and chat: if you use it, a handle and friend code, your friends list, requests and blocks, and the messages and images you send to friends or groups. Message text is encrypted on our servers; messages and images are deleted after 30 days, or sooner if you delete them. When someone reports a message, a copy of that message is kept with the report until it is dealt with. We read reports and may pause chat for an account.

The website sets one cookie, used only to keep you signed in. There is no advertising or analytics tracking.

Applies to Everything

What we share

Nothing is sold, rented or shared with third parties for their own use. Data leaves our systems only where a feature requires it, as described above.

Storage and security

Records we hold are kept in a private database accessible only to our service and its operator. No system is perfectly secure; report anything suspicious through the contact page.

Retention

Extension data lives only on your device, for as long as you keep it. Records on our side are kept while they are needed for the features that created them.

Your choices

Clear or export your data from the extension's settings, or remove the extension. Sign out of the website at any time, which ends the session record, and remove any device from a key on your account page. To have your records deleted, use the contact page.

Children

DegenHUD is only for users aged 18 or over, or the age of majority where you live if higher. No data is knowingly collected from anyone below that age.

Changes

If this policy changes, the date at the top of this page will be updated. Continued use after a change means you accept the updated policy.

Contact

For questions about this policy or a data request, use the contact page.