//DATA-DIRECTIVE// INFORMATION HANDLING

Privacy Policy

Last updated: 2025-09-19

//SEC-01

Scope

This Privacy Policy explains how this website and related services (the "Service") collect, use, disclose, and retain information. By using the Service, you agree to this Policy.

//SEC-02

Information We Collect

  • Account and profile data: Information received from authentication providers and our authentication layer (e.g., Supabase), including identifiers and limited profile data from providers such as Discord and Roblox. Examples include user IDs, usernames/display names, avatar URLs, and other profile metadata made available by those providers.
  • Authentication and session data: Session identifiers and tokens necessary to keep you signed in and secure the Service.
  • Cookies: We use cookies strictly necessary for authentication and session management (including but not limited to sb-access-token, sb-refresh-token, auth-token, user-data, arisaka_pkce_verifier). These cookies are set to operate the Service and do not provide targeted advertising.
  • Usage data: Basic technical data automatically collected when you use the Service (e.g., IP address, device and browser information, timestamps, pages requested, referral URLs).
  • Service activity data: Data related to features you use on the website, which may include game- or profile-related metadata (for example, inventory/cosmetic states, progress, or administrative statuses as applicable to your role).
  • Communications: Information you intentionally provide when you contact us or interact with support channels.
//SEC-03

How We Use Information

  • To operate, maintain, and improve the Service.
  • To authenticate users and manage sessions.
  • To provide features, record progress, and operate game systems.
  • To monitor, prevent, and detect abuse, fraud, or misuse.
  • To comply with legal obligations and enforce terms and policies.
  • To perform analytics and diagnostics (non-advertising).
//SEC-04

Legal Bases (where applicable)

  • Consent (for optional features where consent is requested).
  • Contract (to provide the Service you request).
  • Legitimate interests (e.g., securing, improving, and operating the Service).
  • Compliance with legal obligations.
//SEC-05

Sharing of Information

  • Service providers and infrastructure: We rely on providers to run the Service (e.g., Supabase for auth/database; cloud hosting and deployment; optional analytics infrastructure). These providers process data on our behalf under appropriate agreements.
  • Third-party authentication: When you choose to sign in with a provider such as Discord or Roblox, that provider processes your information under its own terms and policies.
  • Team members/administrators: Limited access to data to administer the Service, support users, and enforce rules.
  • Legal and safety: We may disclose information to comply with the law, enforce our terms, or protect rights, property, or safety.

// We do not sell your personal data.

//SEC-06

Retention

We retain information for as long as needed to operate the Service, comply with legal obligations, resolve disputes, and enforce agreements. Where possible, data is de-identified or deleted when no longer needed.

//SEC-07

Cookies and Tracking

We use cookies that are required for authentication and core functionality. If you disable these cookies in your browser, some parts of the Service may not function. We do not use cookies for targeted advertising.

//SEC-08

Children's Privacy

The Service is intended for users aged 13 and over. If you believe we have collected information about a child under the age of 13, please contact us so we can take appropriate action.

//SEC-09

Data Security

We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

//SEC-10

International Transfers

Information may be processed and stored in countries other than your own with different data protection laws. We apply appropriate safeguards as required by law.

//SEC-11

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export your data, and to object or withdraw consent where applicable. To exercise these rights, use the contact method described below. We may request verification of your identity.

//SEC-12

Changes to this Policy

We may update this Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

//SEC-13

Contact

For privacy requests or questions, please contact us using the support channels listed on the website or associated repository.