1. Who is responsible
The controller of your data is Arcneo Studios · Barcelona, Spain · contact@arcneo.es. You can write to us at contact@arcneo.es for anything about your data.
2. What data we collect
We do not collect payment data. If paid plans arrive, payments will be handled by a payment provider (Stripe) and we will update this policy first.
- Account: your email address, an optional display name, and your password (stored only by Google Firebase Authentication, in hashed form; we never see it). If you sign in with Google we receive your Google account identifier, name and email.
- Preferences: whether you agreed to receive emails and when, where you signed up, and which upcoming tools you asked to hear about.
- Activity: the campaigns and battlemaps you download (your library), a log of those downloads with date and time, your daily battlemap token balance and the date of your last sign-in.
- Technical data: a session cookie and a language cookie (see the Cookie policy), and the IP address and browser information that our servers record in access logs for security.
3. Why we use it and on what legal basis
- To create and run your account, give you access to downloads and your library, and apply the daily token limit (performance of the service you request, GDPR art. 6.1.b).
- To keep the site secure, prevent abuse and understand which content is used (legitimate interest, art. 6.1.f).
- To email you about new free campaigns and launches, only if you ticked the box (consent, art. 6.1.a). You can withdraw it at any time and it does not affect your account.
- To meet legal obligations (art. 6.1.c).
4. Who receives your data
We do not sell your data and we do not run advertising. Your data is processed by providers acting on our behalf: Google (Firebase Authentication and Firestore database), and the server and network providers that host the website. Google may process data outside the European Economic Area under the safeguards of the EU–US Data Privacy Framework and/or standard contractual clauses.
We may disclose data to authorities when the law requires it.
5. How long we keep it
Account data, library and download history: while your account exists. Marketing consent: until you withdraw it. Server logs: for a limited period needed for security. After that we delete or anonymise the data, unless the law requires us to keep it longer.
6. Your rights
You can ask for access, rectification, erasure, restriction, objection and portability of your data, and withdraw your consent, by writing to contact@arcneo.es. We answer within one month.
If you think we are not handling your data properly you can complain to the Spanish data protection authority (AEPD, www.aepd.es).
7. Minors
Accounts are for people aged 14 or over. If you are under 14 you need your parent or guardian's permission to use the service.
8. Changes
We will update this page if how we use data changes, and change the date above.