Privacy Policy

Scope and contact

This policy describes information handled when you use the Arcadigo website, accounts, friendships, direct messages, parties, Bumper Bash, Pulse Pass, matchmaking, private challenges and support channels. Questions or data requests can be sent through the contact form. Do not send identity documents unless Arcadigo specifically requests them through a secure process.

Information you provide

An account includes username, email, password hash, optional country, avatar choice and privacy preferences. Arcadigo never stores the plain password. When optional Google sign-in is configured and you choose it, Google verifies your identity and returns a Google subject identifier and verified email address; Arcadigo stores the provider link but never receives your Google password. Friend requests, blocks, party membership and direct messages contain the accounts and text involved, delivery/read state and timestamps. Friend VS invitations contain the two participating accounts, game/challenge linkage, invitation status, expiry and response/use timestamps; a short-lived join credential is kept out of invitation lists and URLs and is supplied only to an authorized play session. Contact messages and private player reports contain the information you choose to submit; reports can include a category, details, reported account and related match.

Guests receive a generated display name and random token. The server stores a one-way token hash, expiry, avatar, temporary XP and limited security hashes. Registering can atomically transfer eligible guest progress to the new account.

Gameplay and technical information

To operate and protect matches, Arcadigo processes matchmaking mode and team size, party identity and membership, accepted friend VS participants, selected skill loadouts, rating, estimated region or latency, connection identity, room membership, input sequence data, match events, health, eliminations, results, disconnects and anti-abuse signals. The current game has no free-text match chat and does not collect match-chat messages. Friend-to-friend direct messages are a separate account feature and are unavailable during live play. The server—not the browser—determines authoritative positions, health, projectiles, cooldowns and outcomes.

Requests can include IP address, user agent, timestamps and a random request ID. Security records may include hashed addresses, rate-limit counters, suspicious input flags and administrator audit data. Raw secrets and passwords are excluded from structured application logs.

First-party and optional analytics

Arcadigo’s own servers can record events such as a homepage visit, play click, matchmaking start, human or AI selection, match completion, registration and challenge use. These limited first-party measurements use ordinary site requests and do not create Google identifiers or third-party advertising profiles. They are intended to understand reliability and product performance without inventing activity, and administrators can disable or adjust their collection.

Separately, Arcadigo offers optional Google Analytics 4 measurement through Google. The Google tag is not loaded and no Google Analytics cookies or events are sent unless you select Allow analytics. After consent, measurement can include page URL and title, referrer, timestamps, page interactions, browser and device information, approximate location derived from the request and random client and session identifiers. Arcadigo does not intentionally send usernames, email addresses, private messages, guest tokens or detailed gameplay inputs to Google Analytics. Advertising storage, advertising user data and ad personalization remain disabled. The purpose is to understand how people navigate Arcadigo and whether pages and features perform as expected. This optional processing relies on your consent.

Why information is used

Information is used to provide requested games, accounts, friendships, direct messages and parties, authenticate sessions, match players, verify results, calculate eligible XP and ratings, answer support requests, moderate misconduct, secure systems, measure reliability and comply with legal obligations. Optional Google Analytics data is used only for audience and feature measurement after consent. Where applicable, the basis may be performance of a service, legitimate interests in safety and improvement, consent, or legal obligation.

Sharing and international access

Data is available only to service providers and authorized personnel who need it for hosting, delivery, security or support, subject to appropriate obligations; to authorities when legally required; or in a business reorganization with protective terms. If you allow Google Analytics, Google receives the optional measurement data described above as Arcadigo’s analytics provider and may process it outside your country under its [Privacy Policy](https://policies.google.com/privacy) and applicable service terms. Arcadigo does not publish email addresses, guest tokens, internal room IDs or private reports.

Retention

Guest sessions, party invitations and friend VS invitations expire by design. Password-reset, friend VS join and match credentials are short-lived. Friend relationships, blocks, party and challenge history and direct messages are retained while reasonably needed to provide the feature, protect players, handle disputes and meet legal obligations. Security, match, report and audit records follow the same necessity principle. Deleted accounts may leave de-identified or legally required records, while public profile access is removed.

After analytics consent, the Google Analytics `_ga` and `_ga_TYB1XFN2NN` cookies can last for up to two years and may be refreshed when used. Arcadigo’s policy is to keep configurable Google Analytics user-level and event-level data for no more than 14 months; aggregated reports can remain longer. Withdrawing consent stops future collection in that browser but does not retroactively remove measurements already included in retained or aggregated reports. Other precise retention periods can evolve with operational and legal requirements.

Your choices and rights

Account settings control public country and match-history visibility. You can remove friends, leave parties and block unwanted interactions; a block prevents new messages and invitations between the accounts. Analytics settings in the footer lets you refuse or withdraw Google Analytics consent at any time without affecting access to Arcadigo; withdrawal stops future Google Analytics collection and removes its Arcadigo-domain cookies from that browser. You may request access, correction, deletion, restriction, portability or objection where local law provides those rights. Verification protects accounts from fraudulent requests. You may also complain to an applicable data-protection authority.

Children and changes

Arcadigo is not directed to children below the minimum age required to consent to an online service in their location. A parent or guardian who believes a child submitted information should contact Arcadigo. Material policy changes will receive a new effective date and, where appropriate, an in-product notice.