Privacy Policy

Arcanea is a creative intelligence platform built on the principle that your imagination and the works it produces belong to you. This Privacy Policy describes what information we collect, why we collect it, and how you can control it. We believe transparency is the foundation of trust, and trust is the foundation of creation.

1. Information We Collect

Account Information

When you create an Arcanea profile, we collect the information you provide directly:

• •Display name and avatar image
• •Email address (used for authentication and account recovery)
• •Academy House selection and Gate progress (your chosen creative path)
• •Profile preferences such as magic rank and guardian affinity

Creations and Content

Everything you create on Arcanea — text, images, video, audio, code, and mixed-media works — is stored in your account. We also store metadata associated with each creation, including its element, gate, guardian association, and tags you apply.

Activity and Usage Data

We record activity such as likes, follows, collection curation, and session timestamps to power your personalized experience. We also collect standard technical data:

• •Browser type and version
• •Device type and screen resolution
• •Pages visited and time spent
• •Referral source

2. How We Use Your Data

We use the information we collect to operate, maintain, and improve the Arcanea platform. Specifically:

• •Authenticate your identity and secure your account
• •Store, display, and organize your creations
• •Track your progress through the Ten Gates and magic rank system
• •Personalize AI interactions — your Guardian, element affinities, and creative preferences shape how the platform responds to you
• •Improve the platform through aggregated, anonymized usage analytics
• •Send important account notifications (you can opt out of marketing emails at any time)

We do not sell your personal data to third parties. We do not use your creations to train AI models without your explicit, informed consent.

3. AI-Powered Features

Arcanea integrates AI services to power creative tools, Luminor conversations, and content generation. When you use these features:

• •Your prompts and contextual data (such as your active gate or creative history) are sent to our AI providers to generate responses
• •AI providers process your data according to their own privacy policies (see Third-Party Services below)
• •We do not store complete AI conversation logs beyond what is needed for your session history
• •You can delete your AI interaction history at any time from your account settings

4. Data Storage and Security

Your data is stored on Supabase, a PostgreSQL-based platform with enterprise-grade security:

• •All data is encrypted at rest and in transit (TLS 1.2+)
• •Row-Level Security (RLS) policies ensure you can only access your own data
• •Authentication is handled via Supabase Auth with secure token management
• •Storage buckets for avatars, creations, and thumbnails enforce user-scoped access paths
• •Database backups are performed regularly

While no system is perfectly immune to breach, we follow industry best practices and continuously review our security posture. If a data breach occurs that affects your account, we will notify you within 72 hours.

5. Your Rights

You have full sovereignty over your creative identity. At any time, you may:

• •Access — View all personal data we hold about you from your profile and settings pages
• •Export — Download your creations and profile data in standard formats
• •Correct — Update or correct any personal information in your account settings
• •Delete — Request complete deletion of your account and all associated data. This action is irreversible and will be processed within 30 days
• •Restrict — Opt out of non-essential data processing, including analytics and marketing communications
• •Portability — Receive your data in a machine-readable format for transfer to another service

To exercise any of these rights, contact us at the address listed below or use the controls in your account settings.

6. Cookies and Local Storage

Arcanea uses cookies and browser local storage for the following purposes:

• •Authentication — Session tokens that keep you signed in (essential, cannot be disabled)
• •Preferences — Your theme, layout, and UI preferences
• •Analytics — Anonymous usage data to understand how the platform is used (can be disabled)

We do not use third-party advertising cookies. We do not participate in cross-site tracking networks.

7. Third-Party Services

Arcanea integrates with the following third-party services that may process your data:

8. Children's Privacy

Arcanea is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data and creations within 30 days, except where retention is required by law. Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to you.

10. International Data Transfers

Arcanea's infrastructure is hosted in the United States. If you access the platform from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice on the platform. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy, your data, or your rights, reach out to us:

We will respond to all privacy-related inquiries within 30 days.