1. Introduction

Welcome to V Arena ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller

V Arena is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us through our website or Discord server.

3. Information We Collect

3.1 Personal Information

When you create an account, we collect:

• Email address (required)
• Name (optional)
• Profile image (optional)
• Password (encrypted and hashed)

3.2 Usage Data

We automatically collect information about how you use our service:

• Builds you create and save
• Votes you cast on builds
• Session information and login history
• Account creation and last update timestamps

3.3 Cookies and Tracking

We use cookies and similar technologies. For detailed information, please see our Cookie Policy.

4. How We Use Your Information

We use your personal data for the following purposes:

• Account Management: To create and manage your account, authenticate you, and provide access to our services
• Service Delivery: To allow you to create, save, and share builds
• Communication: To send you verification emails, password reset links, and important service updates
• Analytics: To understand how users interact with our website and improve our services (with your consent)
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: For analytics cookies and optional features
• Contract Performance: To provide you with our services as requested
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (e.g., Vercel for hosting, Resend for emails) that help us operate our service
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

You can exercise these rights by visiting your Profile page or contacting us directly.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of passwords using industry-standard hashing algorithms
• Secure HTTPS connections for all data transmission
• Regular security assessments and updates
• Access controls and authentication mechanisms

10. International Data Transfers

Your data may be processed and stored outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our service is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after changes constitutes acceptance.

13. Contact Us

If you have questions, concerns, or wish to exercise your rights, please contact us:

• • Through our Discord server: discord.gg/varena
• • Via our website contact form (if available)