Privacy Policy

The data controller is a natural person established in France, running arkyve in a non-professional capacity, reachable at [email protected].

Their name is not published on this page. It has been given to the host named in the Terms of Use, and it is disclosed to the CNIL, to the courts, and to anyone who asks for it in order to exercise the rights set out below.

• Your account: an email address, or the identifier given by whichever provider you signed in with.
• An API key issued to the Interceptor and tied to your account, so an upload is known to be yours.
• Game data the Interceptor uploads: your heroes, your gear, a position in Ancient Inheritance.
• Anything you choose to publish, such as builds and guides.

Not collected: your Epic Seven credentials, your session with the game, or anything about you outside the game.

Uploaded game data is stored against your arkyve account. That is deliberate — it is what lets you see your own roster, and what lets you erase it. It also means the data is personal data under the GDPR even though it carries no name: the law covers anyone identifiable directly or indirectly, and your account identifies you. We would rather say that plainly than call it anonymous when it is not.

• Running the service you signed up for — performance of our agreement with you.
• Keeping it secure and stopping abuse — our legitimate interest in a service that works.

Railway hosts the application and the database, in its EU West region in Amsterdam. Cloudflare R2 stores game assets — artwork and icons, which are nobody's personal data. Both act on our instructions.

Both are also American companies, so their own staff and systems can reach what they host from outside the European Union. Where that happens, the transfer relies on whichever safeguard the law requires of them, such as the European Commission's standard contractual clauses. Nothing is sold, and there are no advertisers or analytics brokers.

Roster data stays until you delete your account. Deleting it removes the data from the live systems straight away.

Copies can survive a little longer in backups and database snapshots, until the host's ordinary rotation overwrites them. Those copies are not used to run anything; they exist for disaster recovery, and if one were ever restored the deletion would be applied again. We would rather describe that than promise an erasure that reaches further than it can.

Arkyve keeps no application logs. Railway does keep infrastructure logs under its own policy, including request metadata such as IP addresses; that retention is theirs, not ours, and we do not read them.

Numbers such as the share of rosters equipping a given artifact are stored as totals, holding no individual rows. A figure counts as anonymous only when nobody can be picked out of it, and dropping the account identifier is not on its own enough to get there — a total over a handful of players can still point at one. So a figure is only published where the group behind it is large enough that it cannot, and anything that fails that test stays personal data and is treated by this policy like everything else. Figures that do pass it fall outside the policy and are unaffected by account deletion.

You may request access, rectification, erasure, portability, restriction, or object to processing. Write to [email protected] and you will get an answer within a month. You may also lodge a complaint with the CNIL, the French supervisory authority.

Delete it from your account settings. That removes the account, its API keys and every uploaded piece of game data from the live systems straight away, on the terms described above. Aggregates already computed are untouched, because they identify nobody.

One cookie, holding your sign-in session. It is strictly necessary for a feature you asked for, so there is no consent banner. No tracking cookies, no analytics cookies.

Arkyve is not aimed at children. French law sets the age at which you can agree to this kind of processing on your own at 15; below it, a parent or guardian has to agree too. If a younger child has made an account, write to [email protected] and it will be removed.

Changes are posted here under a new date.

This document was written without a lawyer. It is a proportionate baseline for a free fan project, not a substitute for advice.