Privacy note
DRAFT - CEO TO APPROVE. Placeholder text for the free alpha. It describes what the software does today; it has not been reviewed by a lawyer.
What we keep
- Your Steam ID (a public number) when you sign in with Steam, and the display name you choose.
- Your e-mail address, only if you sign in or link by e-mail.
- Sessions (stored only as a one-way hash), which servers you own or administer, and the settings you save.
- An audit log of actions (who, what, when), kept for 180 days. The IP address in an audit row is kept 30 days, then removed from the row; for refused requests only the network (the first 24 bits of an IPv4 address, 48 of an IPv6 one) is kept.
- Rate-limit counters that include your IP address, kept for one hour.
- Sessions: a sign-in lasts up to 30 days, or 14 days without use.
What we do not keep
No passwords. No payment data. We do not read your Steam friends or games.
Why
To let you sign in, to show and manage your server, and to protect the service against abuse.
Deleting your data
Write to hello@arcadyo.com and the operator removes your user and server memberships. The audit log then keeps only an anonymised reference.
Who sees it
The operator. Nothing is sold or shared with advertisers. Steam receives the sign-in request you start; the e-mail provider (once one is configured) receives the address a link is sent to.