Privacy Policy (GDPR / Germany)
Last updated: March 2, 2026
Source: arcane-web/app/legal/privacy/page.tsx
1. Controller (Verantwortlicher)
Controller under Art. 4(7) GDPR:
- Entity/name: Arcane
- Email: realraced@gmail.com
Data Protection Officer: Not appointed.
2. Data Categories
- Identity/account data (for example Discord ID, username, profile data).
- Service configuration data (instances, settings, license allocations, status).
- Support/ticket data and communication history.
- Billing/transaction metadata (amount, duration, method, status, timestamps).
- Technical logs and security events.
- Automation login data you submit for operation: account email may be stored; password is not stored.
3. Purposes and Legal Bases (Art. 6 GDPR)
- Contract performance and pre-contractual steps (Art. 6(1)(b) GDPR).
- Legal obligations (Art. 6(1)(c) GDPR), including accounting/tax duties.
- Legitimate interests (Art. 6(1)(f) GDPR), such as security, fraud prevention, platform integrity, diagnostics, and service improvement.
- Consent where required (Art. 6(1)(a) GDPR), with withdrawal possible at any time.
4. Recipients and Processors
Data may be shared with processors/service providers for hosting, authentication, payment handling, monitoring, and support operations under Art. 28 GDPR agreements where required.
Data is disclosed to authorities only where legally required.
5. International Transfers
If data is transferred outside the EU/EEA, Arcane applies safeguards under Art. 44 et seq. GDPR (for example adequacy decisions or Standard Contractual Clauses), where required.
6. Storage Periods
Arcane retains personal data only as long as necessary for service delivery, support, security, and legal compliance. Statutory retention obligations (for example under German tax/commercial law) remain unaffected.
7. Your GDPR Rights
Subject to legal requirements, you have rights under Art. 15-22 GDPR, including:
- Access (Art. 15), rectification (Art. 16), erasure (Art. 17), and restriction (Art. 18).
- Data portability (Art. 20).
- Objection rights under Art. 21, including objection to processing based on legitimate interests.
- Withdrawal of consent (Art. 7(3)) with effect for future processing.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), especially in your habitual residence/workplace or at the controller's seat.
9. Obligation to Provide Data
Some data is required to provide Arcane services. Without required data, contract performance may be impossible or limited.
10. Automated Decision-Making
Arcane does not carry out automated decision-making producing legal or similarly significant effects within the meaning of Art. 22 GDPR, unless explicitly stated otherwise.
11. Changes to This Policy
Arcane may update this Privacy Policy. Changes are effective on publication with an updated date.