Privacy Policy

1. Information we process

• Account and sign-in information, such as an identifier and entitlement status.
• Settings, vault organization, media metadata, and feature preferences.
• Authentication cookies or tokens you voluntarily provide to access content you are authorized to use.
• Technical data, including IP address, device/browser information, request timestamps, error reports, and temporary operational logs.
• Purchase status and transaction references supplied by Polar.sh; we do not receive or store full payment-card details.

2. How we use information

We process information to provide and secure the service, authenticate authorized requests, organize your vault, deliver purchases, prevent abuse, troubleshoot faults, comply with law, and improve reliability. We do not sell personal information.

3. Cookies and credentials

Arcastash uses local storage and essential cookies for language, sessions, entitlements, and compliance acknowledgement. Authentication cookies submitted for connected services are encrypted at rest and used only to perform user-requested, authorized actions. Do not submit credentials for an account you do not control.

4. Retention and deletion

Operational logs are retained only as reasonably necessary for security and troubleshooting. Connected-service credentials remain until you delete them, they expire, or the service’s configured retention period ends. Account, settings, and vault data are retained while needed to provide the service and meet legal obligations. Deletion requests may be sent to privacy@arcastash.com.

5. Sharing and processors

We disclose information only to service providers needed to operate Arcastash, including hosting and Polar.sh for payment processing; when you direct us to do so; to protect users and rights; or when legally required. Providers process data under their own terms and privacy notices.

6. Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including encryption for sensitive stored credentials. No system is completely secure. Depending on service location and providers, information may be processed outside your country with protections required by applicable law.

7. Your choices and rights

You can change local language settings, clear the compliance record, delete connected credentials, and manage vault content. Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data and to object or complain to a regulator.

8. Children and updates

Arcastash is not directed to children under 13 or the minimum age required in their jurisdiction. We may update this Policy and will post the new date here.