Privacy Policy

Delete your Arcadity account

You can request deletion of your Arcadity account and associated personal data without installing the app or signing in. Email [email protected] from your account email address and tell us you want to delete your account. We may verify ownership before processing the request. Never send a password or sign-in code. You can also request deletion in the website or Android app under Account settings → Security.

Email an account deletion request

1. Information we collect

Account information includes your email address, account identifiers, nickname, avatar, and any profile details you choose to provide, such as a country or bio. If you sign in with Google, we receive basic account information such as your name, email address, and profile image. We also store sign-in sessions and related device, browser, and IP information for authentication and security. Game information includes scores, inputs and replays where supported, match and challenge history, rankings, progress, virtual balances and transaction records, and social interactions such as friendships and likes.

2. Service activity and diagnostics

Competition entry, submissions and settlement records are necessary to provide matches and results. Website product analytics is collected automatically without a choice dialog. Android product analytics remains optional and off by default. Arcadity does not record website or Android screen visuals. Arcadity website analytics, and Android analytics when enabled, record visits, screens, game selections, loading, submission attempts and result actions, with anonymous or verified account identifiers, business sessions, timestamps, platform, version, language and campaign information. These events may be forwarded to PostHog Cloud EU; the website does not load Google Analytics through this collection pipeline. Previous Android crash and unresponsive-process reports require product-analytics permission; they remain anonymous and exclude stack traces, credentials and game state. Arcadity resolves country and region locally from the network observed when a request arrives. An offline upload describes its upload network, not its earlier location. Raw analytics IP addresses are kept separately for seven days and are not sent to PostHog. Infrastructure and security services also process connection information under their own policies. Sentry provides error diagnostics when enabled. See our Cookie & Storage Policy for storage and choices. With your separate permission on the Zoodoku practice page, Google Ads receives practice-start, completed-board and second-practice-start events, an event deduplication identifier, ad-click identifiers, campaign parameters, and browser/network information to measure ad performance. This is separate from Arcadity product analytics. We do not send account IDs, emails, phone numbers or gameplay recordings through this integration; enhanced conversions and personalized advertising are disabled. Declining does not affect play. You can change your choice using Ad measurement settings below the practice board. Google processes data under its own privacy and advertising policies.

3. Why we use information

We use information to provide accounts and games, save progress, run and settle competitions, show results and rankings, enable social features, deliver sign-in or account-security messages, and send notifications you enable. We also use it to prevent abuse and cheating, diagnose errors, understand service usage, improve the service, and respond to support or privacy requests. Where applicable law requires a legal basis, we rely on providing the service you request, legitimate interests in security and service improvement, compliance with legal obligations, or consent where required. Agreeing to the Terms of Service does not itself constitute consent to optional tracking.

4. Information visible to other players

Your player identifier, nickname, avatar, and profile details may be visible on public profiles, leaderboards, match results, and shared links. Scores, rankings, honors, and game activity can also be visible through these features. Replays and results may contain your gameplay and nickname where sharing is supported. Do not put private or sensitive information in a public nickname, bio, or other profile field. Your sign-in email is not intended to be displayed on your public player profile.

5. Service providers and disclosures

We use Hetzner and Cloudflare for infrastructure, Google for sign-in, Resend for account emails, Sentry for diagnostics when enabled, and PostHog Cloud EU for product analytics. PostHog receives pseudonymous identifiers, event data and technical context; our project discards client IP data. Providers receive information needed for their role and may process it under their own policies. We may disclose information where legally required, to investigate abuse or to protect users and the service. Information may be processed outside your country. Contact us for applicable data-transfer arrangements.

6. Retention and account deletion

We retain account and gameplay information as needed to provide accounts, preserve competition results, protect the service and meet applicable obligations. Arcadity analytics events are retained for 365 days; raw analytics IP addresses are inaccessible after seven days and excluded from long-term analytics backups. PostHog retention follows the configured plan; event retention follows the project settings. Sign-in sessions can last up to 30 days and may renew. Request account deletion in Account settings → Security and follow the verification email. Deletion clears linked analytics events, identity mappings, recent IP data and pending exports, and queues asynchronous deletion of PostHog persons and events. Cloud deletion may take additional time and is retried if it fails. Sign-in identities and profile data are removed and the player name becomes Deleted Player. Some historical competition, transaction and deleted-account records may remain to preserve results, prevent abuse or meet obligations. Unlinked events, provider logs and backups may have separate retention schedules.

7. Your choices and rights

You can edit supported profile fields, manage connected sign-in accounts and sessions, disable browser notifications, and request account deletion through account controls. You can clear or block browser storage or clear the Android app’s storage, although this may sign you out or affect game features. Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or obtain a copy of your personal information, object to certain processing, withdraw consent where applicable, or complain to a data-protection authority. Email [email protected] to make a request. We may need to verify that the request concerns your account before providing or changing information.

8. Children, security, and policy changes

Arcadity is a general-audience competitive gaming service, not a service directed to children under 13. You must be at least 13 to use Arcadity and meet any higher minimum age required by the law where you live. We do not knowingly collect personal information from children under 13. For a concern about a child below the applicable minimum age, use the children's privacy reporting instructions below. We use access controls and other measures to protect information, but no online service can guarantee absolute security. We may update this policy when the service or its data practices change; the date above identifies the current version. Material changes will be communicated as required by applicable law.

9. Android push notifications

If you enable Android notifications, Google Firebase Cloud Messaging (FCM) delivers challenge invitations and match results. Firebase processes an installation identifier, messaging token, app version and technical device metadata for this service. Arcadity links your push token and app installation to your current account, and sends Google the notification text and identifiers needed to open the relevant challenge or result. Our device binding expires after 90 days without renewal and is removed on account deletion. Signing out revokes the local binding immediately and attempts server removal; disabling notifications stops display and requests removal of the binding. You can manage permission in Android system settings. This integration does not add Firebase Analytics or advertising tracking. Notification permission and open events may be included in Arcadity's service analytics; provider retention follows Google's policies.

Report a children's privacy concern

If you believe a child below our minimum age has used Arcadity or provided personal information, email [email protected]. You do not need an Arcadity account or access to the child's sign-in email to report a concern. Include a player ID or public profile link if known, a brief description of the concern, and whether you are the child's parent or guardian. Do not send passwords, sign-in codes, identity documents, or the child's full date of birth in your initial message.

Reports are reviewed manually. We may ask for the minimum information needed to locate the account, assess the concern, and verify a parent or guardian's authority before disclosing or changing account information. If we learn that a user is below our minimum age, we will take steps to stop their access and further collection or use of their personal information, and delete that information, except where limited retention is required by law. We will explain the action taken and any applicable retention or provider-deletion delays to the verified requester. A report does not automatically delete an account, and parental permission does not override our minimum age.

Email a children's privacy concern

Contact

Arcadity is operated under the name Arcadity.com. For support, privacy requests, or questions about these policies, email us. Please include enough information to identify your account or request; never send a password or sign-in code.