PRIVACY POLICY

To operate an ARENACTIVE account we may store a username, email address, password hash, interface language, region, email-verification status, account role/status and service timestamps. Passwords are stored only as secure hashes.

• Profile: display name, bio, selected games, languages, gaming preferences and reputation.
• Matchmaking: selected game, search preferences, lobbies, squad membership, ready/presence states and required session status.
• Social features: friends, invitations, blocks, reports and necessary moderation records.
• Security: IP address, session/security states, rate-limit data and limited technical logs when needed to protect the service.

ARENACTIVE applies the same privacy principles to voluntary connections with supported gaming platforms, including Steam, Microsoft/Xbox, Epic Games and Riot. The exact connection method depends on the capabilities provided by each platform.

• Where a platform supports official authorization or account verification, the user completes that process with the relevant provider and approves only the information requested for the connection.
• Depending on the platform, ARENACTIVE may process a stable external account identifier, display name, gaming identifier, connection status and the minimum technical data needed for the selected feature.
• ARENACTIVE does not receive third-party platform passwords and does not use connected accounts for purchases, reading private messages or accessing account data unrelated to ARENACTIVE features.
• Where direct platform connection is not available, a user may provide a gaming identifier manually; that identifier is used only for player-discovery and gaming-group features.

Location for player discovery is optional and entered manually by the user. ARENACTIVE does not request browser GPS for this feature.

• A user may provide country, region/state and city; street address, home address and exact coordinates are not required.
• Users control whether their region and city are visible to other players.
• Location can be changed or cleared in account settings; ARENACTIVE does not create a movement history.

Text communication is used for player coordination and is retained for limited periods. ARENACTIVE does not record or store the content of voice conversations. Voice uses WebRTC; relay/TURN infrastructure may transport encrypted packets without creating an audio recording.

• Lobby chat: ordinary messages are generally retained for up to 48 hours.
• Direct messages: unread messages may be retained for up to 7 days; after reading, for a limited period generally up to 48 hours.
• A reported message may have a separate temporary moderation copy, generally for up to 7 days.
• Short-lived signaling and voice-presence data are used only to establish and maintain communication.

Data is used to provide requested ARENACTIVE features: registration and login, email verification, account recovery, player discovery, lobbies and matchmaking, friends, communication, gaming-platform connections and game-launch handoff features.

• Technical data is also used to prevent spam, fraud, abuse, safeguard bypasses and attacks on infrastructure.
• Optional gaming-platform connections are initiated by the user and can be disconnected.
• ARENACTIVE does not use gaming identities to sell personal data to advertisers.

ARENACTIVE uses necessary session cookies and local browser storage for login, security, language, user preferences and interface functionality.

• Third-party advertising cookies are not required for the current service.
• Necessary session cookies protect account access and are not intended for cross-site advertising profiling.

To operate the service, data may be processed by infrastructure providers supplying hosting, email delivery, network functions, TURN/WebRTC relay and security. When a user connects an external platform, limited information is exchanged with that provider only to perform the authentication or gaming feature requested by the user.

• We aim to share only the minimum information needed for the function.
• Steam, Microsoft/Xbox, Epic Games, Riot and other platforms apply their own privacy policies to their processing.

Account data is generally retained while the account exists or while required to provide the service. Short-lived chat, session and presence data is removed sooner. Limited security/audit records may be retained longer when necessary to investigate abuse, protect the service or comply with law.

• Passwords are not stored in plaintext.
• OAuth/API secrets and server credentials are not exposed to the browser unless a provider specifically uses a public client identifier.
• Administrative functions and external integrations are protected with technical access controls.

Users can edit profile information and disconnect supported gaming platforms in account settings. An ARENACTIVE account can be deleted through the available account-deletion function.

• Account deletion disables credentials and clears associated personal and social data within the working system.
• Minimal anonymized or security records may remain where necessary for integrity of completed events, abuse prevention or legal obligations.
• Privacy and personal-data requests can be sent directly to [email protected].

For questions about this Privacy Policy or how ARENACTIVE processes personal data, contact us at [email protected]. This address is dedicated to privacy and data-protection inquiries.

• Where applicable, you may use this contact to request access to personal data, correction of inaccurate data, deletion, restriction of processing, data portability, objection to processing, withdrawal of consent, or assistance with account and data deletion.
• To protect users and accounts, ARENACTIVE may need to verify your identity before completing certain requests. Do not send passwords, authentication codes, recovery codes or credentials for ARENACTIVE or third-party gaming platforms by email.
• Privacy requests are handled in accordance with applicable data-protection law. Where applicable law provides the right, you may also lodge a complaint with the competent data-protection supervisory authority.
• For ordinary technical or account-support questions that do not concern privacy or personal data, use the Support page.