What the Arena processes
- Your email address, verification records, session identifiers, and essential authentication records when you request or use a magic link.
- The username, avatar choice, optional bio, rating, results, room events, and provisional competition points tied to your Arena account.
- Limited technical and security signals needed to protect sessions, throttle abuse, diagnose failures, and investigate fair-play concerns.
Do not put sensitive information in your username or bio. Public profiles and standings may expose those fields, match history, rating, record, and provisional points. Email addresses and raw security signals are not public profile fields.
Why it is used
The data supports sign-in and account recovery, server-validated games, reconnection, profiles and standings, service security, troubleshooting, and human review of potentially unfair play. It is not used to require a token purchase or wallet connection, and the Arena does not sell personal information or use it for third-party advertising.
Cloudflare/OpenAI Sites provides the application and database runtime. Resend delivers requested sign-in email. Those providers may process the limited data needed to perform those services under their own terms.
Storage, retention, and controls
The Arena uses an essential session cookie and browser storage for saved room, queue, and reconnect state. No advertising cookie is intentionally installed by the Arena. Account, match, and security records are retained while needed to operate and protect the beta and preserve competition integrity.
A complete retention schedule and private self-service access, export, correction, and deletion channel are not published yet. Those controls must be documented before prize certification can open. Until then, avoid submitting information beyond what play requires.