tinylegendsgame.io: how it really works

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Wallet connection

“…s Check. EVM wallet Paste your wallet address below No wallet connection, no signing: just paste your address (your launch g…”E30

Wallet libraries in its code: EIP-6963 wallet discoveryE10

Wallet requests in its code: personal_sign, eth_requestAccountsE28 E27

Calls its own backend /api/x/me, /api/config, /play/index.htmlE15 E16 E17 E18

Wallet code EIP-6963 wallet discoveryE10 E28 E27

Contract calls in its code none seen

Talks to AI services none seen

Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 0 steps. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

What it is

The Internet Archive first saved this site on 2026-10-26 (16 days ago).E31
The site describes itself as: “Tiny Legends: a pixel idle RPG coming soon to mobile and browser. 24 heroes, 15 lands, World Boss, Guild War, Labyrinth and Arena. The white”E2
In your browser it can copy text to your clipboard, saves small bits of data in your browser and can open your device's share menu.E11 E12 E13
It has sections such as /game, /how-to-play, /guide, /api and /privacy.E26
While loading, it called 8 endpoints on its own servers, such as /api/x/me, /api/config, /play/index.html and 5 more.E15 E16 E17 E18

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 1

static.cloudflareinsights.com

Cloudflare Web Analytics: page-view counter

1×E6

FontsDownload typefaces. 2

fonts.gstatic.com	Google Fonts: fonts	4×E7
fonts.googleapis.com	Google Fonts: fonts	1×E5

Crypto and wallets

Wallet tools in the code: EIP-6963 wallet discovery.E10
personal_sign: asks you to sign a text message (often to log in; moves no funds by itself).E28
eth_requestAccounts: asks to connect your wallet, which shows the site your address.E27
Chains named in the code: Robinhood Chain.E29

How key features work

Connecting your wallet

It connects to crypto wallets using EIP-6963 wallet discovery, personal_sign and eth_requestAccounts. Connecting shows the site your wallet address; it doesn't move funds by itself.E10 E27

EIP-6963 wallet discoverypersonal_signeth_requestAccounts

Reading the blockchain

It reads blockchain data (Robinhood Chain) to show balances, prices or contract state.E29

Robinhood Chain

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/x/login).E25

/api/x/login

Loading its content

Its content loads from its own API while you browse (/api/x/me, /api/config, /play/index.html, /api/apply/stats and 2 more).E15 E16 E17 E18 E19

/api/x/me/api/config/play/index.html/api/apply/stats/api/apply/leaders/api/hype

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E14

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics (found in its traffic or its code).E6

Cloudflare Web Analytics

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E12 E8

local_storagelocalStorage

Cookies and storage

Names only. We never store the values.

localStorageE8: tl_xs

Pages and API calls

Pages it links to

//game/how-to-play/guide/api/privacy

Endpoints

Called while loading (seen) or named in the code (code).

tinylegendsgame.io/api/x/me	seenE15
tinylegendsgame.io/api/config	seenE16
tinylegendsgame.io/play/index.html	seenE17
tinylegendsgame.io/api/apply/stats	seenE18
tinylegendsgame.io/api/apply/leaders	seenE19
tinylegendsgame.io/api/hype	seenE20
tinylegendsgame.io/api/quests/leaders	seenE21
tinylegendsgame.io/api/quests/dash	seenE22
/api/hype	codeE23
/api	codeE24
/api/x/login	codeE25

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1

Page title: Tiny Legends

page title · https://tinylegendsgame.io/

E2

Page description: Tiny Legends: a pixel idle RPG coming soon to mobile and browser. 24 heroes, 15 lands, World Boss, Guild War, Labyrinth and Arena. The whitelist is op

page description · https://tinylegendsgame.io/

E3

Main heading: Tiny Legends

page h1 · https://tinylegendsgame.io/

E4

108 request(s) to tinylegendsgame.io

types: 97 image, 8 fetch, 1 document

GET https://tinylegendsgame.io/ · image · 108 requests · network recording

E5

1 request(s) to fonts.googleapis.com

types: 1 stylesheet

GET https://fonts.googleapis.com/css2 · stylesheet · network recording

E6

1 request(s) to static.cloudflareinsights.com

types: 1 script

GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording

E7

4 request(s) to fonts.gstatic.com

types: 4 font

GET https://fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 · font · 4 requests · network recording

E8

localStorage: 1 key(s) saved in your browser

localStorage keys: tl_xs · values not stored

E9

Cloudflare Turnstile found in the code

tinylegendsgame.io/ (page HTML) @ 3073:130 · “turnstile.render” · pattern scan

E10

EIP-6963 wallet discovery found in the code

tinylegendsgame.io/ (page HTML) @ 2837:21 · “eip6963:announceProvider” · pattern scan

E11

Uses the browser ability: clipboard_write

can copy text to your clipboard

tinylegendsgame.io/ (page HTML) @ 2152:21 · “clipboard.writeText(” · pattern scan

E12

Uses the browser ability: local_storage

saves small bits of data in your browser

tinylegendsgame.io/ (page HTML) @ 1656:27 · “localStorage.setItem(” · pattern scan

E13

Uses the browser ability: web_share

can open your device's share menu

tinylegendsgame.io/ (page HTML) @ 2650:103 · “navigator.share(” · pattern scan

E14

Uses the browser ability: canvas

draws graphics on a canvas

tinylegendsgame.io/ (page HTML) @ 1725:46 · “getContext('2d'” · pattern scan

E15

The page called /api/x/me on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/x/me · fetch · network recording

E16

The page called /api/config on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/config · fetch · network recording

E17

The page called /play/index.html on tinylegendsgame.io (HEAD)

HEAD https://tinylegendsgame.io/play/index.html · fetch · network recording

E18

The page called /api/apply/stats on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/apply/stats · fetch · network recording

E19

The page called /api/apply/leaders on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/apply/leaders · fetch · network recording

E20

The page called /api/hype on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/hype · fetch · network recording

E21

The page called /api/quests/leaders on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/quests/leaders · fetch · network recording

E22

The page called /api/quests/dash on tinylegendsgame.io (GET)

GET https://tinylegendsgame.io/api/quests/dash · fetch · network recording

E23

Code reader found the endpoint /api/hype

how: call:fetch

tinylegendsgame.io/ @ 28:27 · “/api/hype” · the code reader

E24

The code names the endpoint /api

tinylegendsgame.io/ (page HTML) @ 19:30 · “/api” · pattern scan

E25

The code names the endpoint /api/x/login

tinylegendsgame.io/ (page HTML) @ 1163:169 · “/api/x/login” · pattern scan

E26

6 links to pages on the same site

page links · https://tinylegendsgame.io/ · /, /game, /how-to-play, /guide, /api, /privacy

E27

Wallet request in code: eth_requestAccounts

asks to connect your wallet, which shows the site your address

tinylegendsgame.io/ (page HTML) @ 2890:36 · “eth_requestAccounts” · pattern scan

E28

Wallet request in code: personal_sign

asks you to sign a text message (often to log in; moves no funds by itself)

tinylegendsgame.io/ (page HTML) @ 2901:36 · “personal_sign” · pattern scan

E29

Chain in code: Robinhood Chain

tinylegendsgame.io/ (page HTML) @ 2835:104 · “chain.robinhood.com” · pattern scan

E30

The site says: “…s Check. EVM wallet Paste your wallet address below No wallet connection, no signing: just paste your address (your launch g…”

page text · https://tinylegendsgame.io/ · …s Check. EVM wallet Paste your wallet address below No wallet connection, no signing: just paste your address (your launch g…

E31

The Internet Archive first saved tinylegendsgame.io on 2026-10-26 and has snapshots from 2 different days

page web archive · https://web.archive.org/web/20261026134055/tinylegendsgame.io

Limits

We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
Some trackers only load after you accept cookies or log in, so the real list can be longer.
We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 2YN5Byem.

tinylegendsgame.io

tinylegendsgame.io talked to 3 outside services on a first visit, including 1 that measures visits or shows ads.E6