Logo

Privacy Policy

Effective Date: October 12, 2025

Last Updated: October 12, 2025

1. Introduction

PONK Studio ("us", "we", or "our") operates the website Arcraiders.build (hereinafter referred to as the "Service" or "Site").

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service. It also describes your rights regarding your personal data under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data Controller Information

  • Company Name: PONK Studio
  • Legal Status: Micro-entreprise (France)
  • Email: [email protected]
  • Website: https://arcraiders.build

3. Information We Collect

3.1 Personal Data You Provide

When you create an account on our Service, we collect the following information through our authentication provider:

Authentication Data:

When you sign up using OAuth providers (Google, Discord, Twitch), we receive:

  • Email address
  • Name
  • Profile picture (if provided by the OAuth provider)
  • Unique user identifier from the OAuth provider

User Profile Data:

  • Username/Pseudo
  • Avatar/Profile picture
  • User preferences (game settings, display preferences, favorites, etc.)

3.2 Automatically Collected Data

When you access and use our Service, we automatically collect:

Usage Data:

Information about how you interact with our Service, including:

  • Pages visited
  • Time and date of visits
  • Time spent on pages
  • Clicks and interactions
  • Features used

Device and Technical Data:

  • Internet Protocol (IP) address
  • Browser type and version
  • Device type and operating system
  • Unique device identifiers
  • Referral source
  • Language preferences

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. See Section 8 for detailed information about cookies.

4. How We Use Your Data

We use the collected data for the following purposes:

  • Service Provision: To provide, maintain, and improve our Service
  • Account Management: To create and manage your user account
  • Authentication: To verify your identity and provide secure access
  • Personalization: To customize your experience and remember your preferences
  • Analytics: To analyze usage patterns and improve our Service
  • Communication: To respond to your inquiries and provide customer support
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service

Legal Bases for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Consent: When you consent to specific processing activities (e.g., advertising cookies)
  • Contract Performance: To provide the Service you've requested
  • Legitimate Interests: For analytics, security, and service improvement (after balancing against your rights)
  • Legal Obligation: To comply with applicable laws and regulations

5. Third-Party Services and Data Sharing

We share your data with the following third-party service providers:

5.1 Authentication Services

Clerk - User authentication and management

  • Data Shared: Email, name, profile picture, authentication tokens
  • Purpose: Secure user authentication via OAuth (Google, Discord, Twitch)
  • Location: United States (Data Privacy Framework certified)
  • Privacy Policy: https://clerk.com/legal/privacy

Clerk is GDPR-compliant and acts as a data processor on our behalf.

5.2 Analytics Services

Google Analytics

You can opt-out by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

PostHog

  • Data Shared: Usage data, events, session recordings (if enabled)
  • Purpose: Product analytics and user behavior analysis
  • Privacy Policy: https://posthog.com/privacy

5.3 Advertising Services

Playwire LLC

All advertising on this website is managed by Playwire LLC. Playwire collects and uses certain aggregated and anonymized data for advertising purposes, including:

  • Data Shared: IP address, device identifiers, browser information, cookies, usage data, geolocation data
  • Purpose: Ad delivery, targeting, measurement, and optimization
  • Privacy Policy: https://www.playwire.com/privacy-policy

Playwire may share data with its advertising partners for interest-based advertising. You can manage your advertising preferences through our Consent Management Platform (CMP) banner or by visiting:

5.4 Hosting and Infrastructure

OVH (Hosting Provider)

  • Data Shared: All data stored on our servers
  • Purpose: Website hosting and data storage
  • Location: 2 rue Kellermann, 59100 Roubaix, France.

Namecheap (Domain Registrar)

  • Data Shared: Domain registration information only
  • Purpose: Domain name management

5.5 When We May Share Data

We may disclose your personal data:

  • With Service Providers: As described above, under data processing agreements
  • For Legal Reasons: To comply with legal obligations, court orders, or government requests
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share specific information

We do NOT sell your personal data to third parties.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs): Approved by the European Commission
  • Data Privacy Framework (DPF): For US-based service providers like Clerk
  • Adequacy Decisions: For countries recognized by the EU as providing adequate protection

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy:

  • Account Data: Until you delete your account, plus 30 days for backup deletion
  • Analytics Data: Typically 14-26 months (Google Analytics default retention)
  • Advertising Data: As determined by Playwire's retention policies
  • Legal Requirements: Longer if required by law or for legal defense

You can request deletion of your account and data at any time (see Section 10).

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device that help websites function and provide analytics. We use both first-party and third-party cookies.

8.2 Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled:

  • Authentication cookies (Clerk)
  • Security cookies
  • Session management cookies

Analytics Cookies

With your consent, these help us understand how visitors use our Service:

  • Google Analytics cookies
  • PostHog analytics cookies

Advertising Cookies

With your consent, these enable personalized advertising:

  • Playwire and advertising partner cookies
  • Interest-based advertising cookies
  • Ad performance measurement cookies

8.3 Consent Management Platform (CMP)

We use Playwire's integrated Consent Management Platform to manage your cookie preferences. When you first visit our Site, you'll see a cookie banner allowing you to:

  • Accept All: Consent to all cookies
  • Reject Non-Essential: Only allow strictly necessary cookies
  • Customize: Choose which cookie categories to accept

You can change your cookie preferences at any time by clicking the cookie settings link in our footer or by clearing your browser cookies.

8.4 Managing Cookies

You can also control cookies through your browser settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Preferences > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies
  • Edge: Settings > Privacy > Cookies

Note: Disabling necessary cookies may impact the functionality of our Service.

9. Your Privacy Rights

Under the GDPR and other applicable laws, you have the following rights:

9.1 Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of your data.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when:

  • It's no longer necessary for the purposes collected
  • You withdraw consent and no other legal basis exists
  • You object to processing and no overriding legitimate grounds exist
  • The data was unlawfully processed

9.4 Right to Restriction of Processing

You can request limitation of processing in certain circumstances.

9.5 Right to Data Portability

You can receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

9.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:
France: CNIL (Commission Nationale de l'Informatique et des Libertés) - https://www.cnil.fr/

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at: [email protected]

We will respond to your request within 30 days (as required by GDPR).

10. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal data, please contact us at [email protected], and we will take steps to delete such information from our systems.

If you are under 16 years old, please do not use our Service or provide any personal information.

11. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption: HTTPS/TLS encryption for data in transit
  • Access Controls: Restricted access to personal data
  • Authentication Security: Secure OAuth implementation via Clerk
  • Regular Security Audits: Monitoring for vulnerabilities
  • Data Minimization: Collecting only necessary data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

For data protection inquiries specific to GDPR compliance, you may also contact us at the email address above.

13. Playwire Advertising Disclosure

All or partial advertising on this website is managed by Playwire LLC. If Playwire publisher advertising services are used, Playwire may collect and use certain aggregated and anonymized data for advertising purposes.

To learn more about the types of data collected, how data is used, and your choices as a user, please visit:

Playwire Privacy Policy: https://www.playwire.com/privacy-policy

You can opt-out of interest-based advertising by visiting:

Last Updated: October 12, 2025

Effective Date: October 12, 2025

Version: 1.0