This Privacy Policy describes how Arcstone ("we", "us", or "our") collects, uses, and protects your information when you use our game and related services. By creating an account or using Arcstone, you agree to the practices described here.
1. Information We Collect
- Account information: your email address, display name, and hashed password when you register.
- Character and save data: realm profiles, character names, class choices, inventory, action history, and progress metadata (timestamps, action counts, run outcomes).
- Interest list: if you register interest on our website, your email address, your language and the optional answers you give (a preferred world, how you heard about us). We use them only to send your invitation and related updates about Arcstone, keep them for up to 12 months, and delete them sooner if you email us.
- Gameplay content: text commands you enter and the AI-generated narrative responses, used to power the story and detect abuse.
- Usage data: feature interactions, session durations, and in-game events (e.g. run starts, purchases) to improve balance and stability.
- Technical data: browser type, operating system, IP address, and error logs for security and debugging.
- Payment data: if you subscribe to a paid plan, payment is processed by our payment provider. We do not store your full card number or CVV.
- Local storage: preferences such as UI mode and language are stored in your browser's local storage. No personal data is stored there.
2. How We Use Your Information
- Deliver the game: authenticate sessions, load and save progress, render scenes.
- Process payments and manage subscription access, including tier-gated features.
- Send transactional emails (e.g. email verification, password reset).
- Maintain security: detect abuse, investigate fraud, and enforce our Terms.
- Improve Arcstone: aggregate gameplay data informs balancing, content quality, and feature decisions. We do not use your personal information to train AI models.
- Respond to support requests and feedback you submit directly to us.
3. AI Service Providers
Arcstone generates narrative content by sending your in-game prompts and context to third-party AI providers. These prompts may include your character name, inventory, and recent actions but we minimise personal data in prompts where possible. AI providers process this data under their own privacy policies and are contractually restricted from using it for purposes beyond service operation.
4. Data Sharing
We do not sell or rent your personal data. We share data only with:
- Service providers: hosting, database, payment processing, and error monitoring — solely to operate Arcstone.
- AI providers: as described in section 3 above.
- Law enforcement: where required by applicable law, court order, or to protect the safety of users or the public.
5. Cookies and Local Storage
We use session cookies for authentication. We use browser local storage for UI preferences (mode, language). We do not use third-party advertising or tracking cookies.
Product analytics: we count how players move through sign-up, upgrade prompts and the plans page, in our own database and under a pseudonymous id rather than your account. It is first-party and cookieless, nothing is sent to a third party, and the raw events are deleted after 90 days.
6. Data Retention
- Account data and saves are kept until you delete them or request account deletion.
- Server logs and error diagnostics are retained for up to 90 days.
- Aggregated, anonymised usage data may be retained indefinitely for product analysis.
- Payment records are retained as required by financial regulations.
7. Your Rights and Controls
- Access and correction: you can view and update your display name and email from your Account page.
- Delete saves: individual saves and character profiles can be deleted from the in-game menus.
- Account deletion: contact us to permanently delete your account and associated data.
- Data portability: you may request an export of your account data by contacting support.
- Depending on your jurisdiction, you may have additional rights (e.g. under GDPR or CCPA). Contact us to exercise them.
8. Security
We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is fully secure; please use a strong, unique password and report suspected security issues to us immediately.
9. Children
Arcstone is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.
10. International Transfers
Your data may be processed in countries other than your own. Where we transfer data internationally, we ensure appropriate safeguards are in place consistent with applicable law.
11. Changes to This Policy
We may update this policy as the game evolves. Material changes will be notified via email or an in-game notice. Continued use after the effective date constitutes acceptance of the updated policy.
12. Contact
For privacy questions or data requests, email us at help@playarcstone.com.