> For the complete documentation index, see [llms.txt](https://theluckyducks.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://theluckyducks.gitbook.io/docs/races/delegated-play.md).

# Playing without signing every action

Let The Lucky Ducks sign your in-game actions for a period you choose, and keep money leaving the platform on your own signature.

The Lucky Ducks can sign your in-game actions for you, for a period you choose. Joining then takes one tap: no wallet popup, no waiting on a confirmation. The app calls it delegated signing, and the panel on the Player page carries that name.

It exists for phones, where a wallet round trip per action is the slowest part of a race. This page is the detail; [Playing without your wallet app](/docs/races/without-the-wallet-app.md) is the whole path, sign-in half included.

## What you need

* A [verified wallet](/docs/trust-and-fairness/verification.md). The program refuses to grant this to an unverified one, for the reason below.
* A [player vault](/docs/economy/player-vault.md) with a balance, since the actions spend from it rather than your wallet.
* One signature to turn it on, choosing how long it lasts.

That is your last signature until it expires or you turn it off.

<figure><img src="https://3421471796-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7dtEnU4lv7j0vOpw19z4%2Fuploads%2Fgit-blob-d4d0404c802d0388cccb52d210d8c34016dc786c%2Fapp-delegated-signing-panel-banner.png?alt=media" alt="The delegated signing panel on the Player page with a duration selector and a revoke button"><figcaption><p>The panel that grants the permission is also where you revoke it.</p></figcaption></figure>

## Why it needs a verified wallet

Not signing every action is half the problem. The other half is getting in: opening the app meant signing a message in your wallet, which is the same handoff delegation was meant to remove.

A linked account closes that gap, because you sign in with it and the wallet app stays shut all session. Granting this without one would be turning on a feature you have no comfortable way to reach.

{% hint style="success" %}
Turning it **off** needs nothing at all. Revoking is always available, whatever state everything else is in.
{% endhint %}

## What it can do

Everything you do inside the game:

* Create a race, join one, leave one during the lobby.
* Claim a prize, cancel your own race, trigger a refund.
* Offer, accept and decline rematches.
* Claim a tournament prize you won.
* Every team action: create, update, join, leave, invite, remove, disband.

## What the permission can never do

It covers playing, not your money leaving the platform. Read the table as limits on the **permission**, not on you.

| Action                          | Why it is excluded                                                                                           |
| ------------------------------- | ------------------------------------------------------------------------------------------------------------ |
| Withdraw from your vault        | Moving value out is the line the whole design rests on. Only your wallet can authorise it                    |
| Close your player account       | Same reason. This is the other exit                                                                          |
| Deposit into your vault         | Not merely disallowed. Money leaving your wallet requires your wallet's signature, so nothing else can do it |
| Extend or change the permission | The permission is your consent. Anything that could extend itself would have no expiry                       |

{% hint style="info" %}
Money moves around inside the platform on a signature you granted. It only leaves on yours.
{% endhint %}

**Your own access never changes.** Deposit and withdraw whenever you like, with a live grant or without one: those buttons always ask your wallet, and a grant neither locks your balance nor puts a queue in front of it. The same goes for closing your account.

## Turning it on and off

Choose 1, 7 or 30 days. It expires on its own, so a permission you forget cannot last forever.

Revoke whenever you like with the Revoke button, which the panel shows while a grant is live. It takes effect at once, and it keeps working even if the platform has switched the feature off for everyone, so you can always withdraw consent. Verification is not required to revoke either: nothing about your account can put the off switch out of reach.

Extending uses the same panel, with Extend in place of Enable, and needs the same verified wallet.

Where your winnings land sits on the same screen but is a separate choice, and a grant does not move it: revoking one, or letting it lapse, does not send your prizes and refunds back to your wallet. See [Where your winnings land](/docs/economy/player-vault.md#where-your-winnings-land).

<figure><img src="https://3421471796-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7dtEnU4lv7j0vOpw19z4%2Fuploads%2Fgit-blob-0624ddd388d5a35e29e1aa5a4c7404fae62e55cd%2Fapp-delegation-revoke-banner.png?alt=media" alt="The Revoke button in the delegated signing panel while a grant is live"><figcaption><p>The off switch needs no verification and takes effect at once.</p></figcaption></figure>

## What it costs

Each action signed for you reimburses a flat per-action charge from your vault's SOL balance, set by the platform and 0.0001 SOL as it stands, which covers submitting the transaction on your behalf.

A token claim sent for you may also have to open a token account the payout goes to: a winner's, their vault's if they pool winnings there, or the platform's. Your vault pays that rent, for a teammate's account as for your own, and the program bills it only for accounts it actually creates. When too many are missing for the claim to open them itself, the claim fails, a separate step opens them and the claim is sent again. That step is a transaction of its own, so it takes the per-action charge with the rent, and it charges nothing if it finds every account already open.

A tournament prize paid over several transactions takes the per-action charge once per transaction, from the vault of the winner each one is sent for. When the platform starts such a claim for you, it also fronts the rent of the small account that tracks the progress and takes it back at the end, so that never reaches your vault.

The confirmation in front of a tournament claim states that charge per transaction, says when a team your size takes several, and on a token pot that opening a winner's token account adds its rent. The claim is sent for you only when your vault's SOL covers the charge for every transaction it expects. The rent is not part of that check, because which accounts are missing is not known until the claim runs: a transaction your vault cannot cover is refused whole, and nothing in it moves.

When a refund, a cancellation or a declined rematch sent for you has to reopen someone's token account, the platform pays that rent, never your vault. The one account your vault does pay for there is your own: if you pool payouts in your vault and it has never held that token, the vault's account for it is opened in the same transaction, and your vault repays that rent along with the per-action charge.

{% hint style="warning" %}
**An action that pays you still needs SOL in the vault.** Claiming costs a fee even though money is coming to you, so a vault holding tokens and no SOL cannot claim.

**There is no fallback to your wallet.** Signing for yourself, your wallet is right there and covers what your balance cannot. A delegated action has nowhere to fall back to, so it stops and asks you to top up. Joining a race is checked before it is sent: when your vault does not cover the entry and your wallet is connected, the app hands the join to your wallet to sign instead.
{% endhint %}

## What happens after you tap

The action is queued, then submitted. Queued is not landed, so the app waits for the on-chain result before telling you it worked. If it fails you are told, and nothing is charged for an action that never happened.

## Choosing a duration

A shorter permission is a smaller window, and the honest risk is not theft: nothing here moves your money off the platform. What a misused permission could do is spend your vault on races you did not choose, or act on your teams, including disbanding one you created. A lost entry fee is recoverable. A disbanded team is not.

Play daily and a long duration is reasonable. Trying it once, pick a short one. The choice is per player for exactly that reason: your exposure should be yours to size.

<figure><img src="https://3421471796-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7dtEnU4lv7j0vOpw19z4%2Fuploads%2Fgit-blob-1ecc86997c2aa73231968a74a86ee975ee4478c2%2Fapp-delegation-duration-selector-banner.png?alt=media" alt="The duration selector in the delegated signing panel with the options up to 30 days"><figcaption><p>The window is yours to size, and it expires on its own.</p></figcaption></figure>

{% content-ref url="/pages/kJG5OpI4h0Yibms7dkkR" %}
[Your player vault](/docs/economy/player-vault.md)
{% endcontent-ref %}