Privacy Policy

1. Data controller

Arpent is an independent project. For the purposes of this policy, the Arpent operator acts as the data controller. The contact process is described in section 10.

2. Data processed

Arpent limits collection to data needed for the game:

• Arpent profile: random identifier, display name, friend code, language, creation date, and discovery progress;
• games: date, moves, status, score, streak, game version, where the game started (website or Discord Activity), and a shared result when you choose to share one;
• usage measurement: game openings associated with the random profile, an origin category (such as Reddit, Discord, Google or unidentified), a campaign name when included in a link, and the landing-page category. Full referring URLs and private link tokens are not stored in these statistics;
• social features: friend links established with friend codes;
• Discord: user ID, username or global name, server and channel IDs, link to the Arpent profile, reminder settings, and group-streak participation;
• Discord challenges: when you open the challenge picker, Discord temporarily supplies your friends’ IDs and names for display; Arpent associates the selected friend’s ID with the challenge to restrict access to that recipient and mention them;
• reports: when you send feedback from the game, the text you write, the type you pick (bug or idea), the context of the current game (seed, modifier, moves played), and a truncated extract of your browser identifier; Arpent stores none of this and forwards it straight to a private Discord channel belonging to the publisher. Do not write personal data there beyond what you consider necessary;
• security and operations: IP address immediately converted into a cryptographic hash for rate limiting, technical logs, and aggregate usage measurements.

Arpent does not ask for your legal name, postal address, phone number, or payment details. The OAuth token supplied by Discord is used to verify identity and server membership; it is not stored in the Arpent database.

3. Purposes and grounds

• provide the daily game, record moves, and synchronize progress;
• show requested scores, streaks, friends, and shared results;
• link a profile to Discord and provide configured commands, rankings, and reminders;
• display your Discord friends at your request and send a challenge to the person you select;
• receive and act on the bug reports and suggestions you choose to send;
• prevent fraud, abuse, and excessive requests;
• measure aggregate service use and reliability in order to improve Arpent.

Processing is necessary to provide the requested service and for the legitimate interests of securing, maintaining, and improving Arpent. Where applicable law requires it, optional processing is based on your consent.

4. Cookies and local storage

• arpent_visitor keeps the random identifier used to retrieve your profile and games for up to one year; it is secure, unavailable to page JavaScript, and necessary for the service;
• arpent_locale keeps your language choice for up to one year;
• arpent_acquisition_session keeps a random identifier and the visit origin in the tab to avoid duplicates; a new session starts after 30 minutes of inactivity or at the next UTC day;
• the Activity keeps only the session-memory items needed for authentication and operation.
• the Discord friends list used by the challenge picker remains in the Activity’s memory and is not stored in the Arpent database.

Deleting browser cookies removes local access to the pseudonymous profile, but does not automatically erase records already stored on the server.

5. Recipients and service providers

Data is available only to the operator and necessary service providers:

• Discord, for authentication, the Activity, requested commands and messages in servers, and to receive the reports you send from the game — including when you have no Discord account;
• Vercel, for hosting, delivery, technical logs, and usage analytics;
• Neon, for database hosting.

Display names, scores, and boards may also be visible to your Arpent friends, members of the relevant server, or anyone holding a result link you chose to share. Arpent does not sell your data.

6. International transfers

Discord, Vercel, or Neon may process data outside your country or the European Economic Area. Such processing is subject to their contractual commitments and transfer mechanisms required by applicable law.

7. Retention

• identification and language cookies expire after at most one year unless renewed through use;
• an Activity session expires after 12 hours and an account-link token after 10 minutes;
• rate-limit hashes expire with their short security window;
• profiles, games, challenges, friends, and Discord links are kept while useful to the service or until a valid deletion request;
• server reminder settings and history are kept while the integration is used or as needed to prevent duplicates;
• a report is not retained by Arpent: it remains as a message in the publisher’s private Discord channel, with no predefined duration, and can be deleted there on request.

Data may be retained longer when required for legal compliance, security, or dispute resolution.

8. Security

Arpent uses measures including encrypted connections, secure cookies, random tokens stored as hashes, server-side validation, rate limiting, and restricted Discord permissions. No online service can guarantee absolute security.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your data, and object to certain processing. You may withdraw consent without affecting earlier processing and lodge a complaint with the relevant supervisory authority.

To identify a pseudonymous profile, a request may require the friend code shown in Arpent or proof that you control the linked Discord account. Send those details only through a private channel provided by the operator.

10. Contact and complaints

To exercise a right or ask a question, use a private contact method provided by Arpent through Discord. Do not post a Discord ID, friend code, or other personal data in a public channel.

11. Changes

This policy may change with the service or the law. Its revision date appears at the top of the page. Material changes will be communicated reasonably.

See also the Terms of Use.