Privacy Policy for Idle Arcana

1. Controller & Contact

Controller: Idle Arcana (Germany)

Contact: support@idlearcana.com

2. Data We Collect

Personal Data: Name, email, payment info.

Non-Personal Data: Cookies and usage analytics.

3. Lawful Basis & Purpose

Lawful Bases: Contract (processing orders, providing services) and legitimate interest (improving services).

Purposes: Account setup, order processing, game operation, user support, and improving user experience.

4. Data Sharing & Transfers

We do not sell or share personal data with third parties, except trusted service providers (e.g., payment processors) under strict confidentiality.

If data is transferred outside the EU/EEA, we use adequate safeguards (e.g., EU Standard Contractual Clauses).

5. Retention

We keep personal data as long as needed to fulfill the purposes or comply with legal obligations. Then it’s securely deleted or anonymized.

6. Your Rights

Under GDPR, you have the right to:

• Access your data and receive a copy.
• Rectify inaccuracies.
• Erase or restrict processing.
• Object to processing.
• Data portability where applicable.
• Withdraw consent at any time (if processing is based on consent).
• Lodge a complaint with your local data protection authority.

7. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from them.

8. Security

We implement technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

9. Cookies

We use cookies to enhance functionality and analytics. By using our site, you consent to our cookie usage. You can disable cookies in your browser settings.

10. Updates

We may update this policy. We will notify you by email or prominent notice. Continued use means acceptance of the revised policy.

11. Contact

For questions or data requests: support@idlearcana.com