Privacy Policy

Arsinosa is a community platform for gacha-game guides run as an independent passion project. This policy explains what information is collected when you use the site, why, and what you can do about it. Questions? Email privacy@arsinosa.com.

You must be at least 16 years old to create an account.

What we collect

When you create an account we store:

• Your display name and email address.
• A hashed copy of your password — never stored in plain text.
• An opaque identifier from Discord or Google if you sign in via OAuth, plus the display name and avatar URL returned by that provider at sign-up.

When you use the platform we also record:

• Guide drafts and published guides you create, and any images you upload.
• A short-lived, anonymous cookie used to count guide views for trending lists — not linked to your account.
• A session cookie that keeps you logged in.

How we use it

Account data is used to authenticate you and attribute your published work. Anonymous view counts power the trending lists on the homepage. We do not run ads, sell data, or integrate third-party analytics trackers. The legal basis for processing account data is contract (providing the service you signed up for); the basis for view counts is legitimate interest (showing relevant content).

Your rights

If you are in the EU or UK you have the following rights under GDPR:

• Access — request a copy of the data we hold about you.
• Erasure — delete your account in Settings → Account. Private drafts and uploads are permanently removed; published guides become anonymous to preserve community content.
• Rectification — update your display name and profile details at any time in Settings.
• Portability — request a data export by emailing privacy@arsinosa.com.
• Objection / restriction — contact us and we will assess your request.
• Complaint — you have the right to lodge a complaint with your national data-protection authority.

To exercise any of these rights, email privacy@arsinosa.com. We will respond within 30 days.

Third-party services

• Cloudflare — hosts the platform, CDN, and serverless runtime. Your requests pass through their network. Cloudflare processes data under a GDPR-compliant Data Processing Agreement.
• Discord / Google — used only for authentication. We receive an opaque user ID, display name, and avatar URL to create your account. We do not have access to your Discord messages, contacts, or Google account data.

Cookies

• Session cookie — keeps you logged in. HttpOnly and Secure. Expires after 30 days of inactivity.
• View-count cookie — prevents your own views from inflating a guide's count. Not linked to your account. Expires after 1 hour.

No third-party cookies, no tracking pixels, no advertising networks.

Data retention

• Account data (name, email, credentials) is kept until you delete your account.
• Published guides retained after deletion are stored anonymously.
• Anonymous view counts are aggregated and not tied to any individual.

Contact

For privacy questions or data requests, email privacy@arsinosa.com. Arsinosa is an independent project, not a registered company — the data controller is the individual operator. This policy may be updated as the platform evolves; the date above reflects the last revision.