Privacy Policy
Ryoma Services LLC ("we," "us," or "our") operates Arcana Solitaire at arcanasolitaire.com. This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
1.1 Information You Provide: Account info (name, email, Google profile picture via Google OAuth). Support communications if you email us.
1.2 Automatically Collected: Gameplay data (game outcomes, move counts, session duration, Sanity Vials used, Essence scores, game seed for CS reconstruction). Vial activation events (move number, sanity before/after, remaining vials — retained for CS dispute resolution only). Usage analytics via PostHog (events transmitted through arcanasolitaire.com/ingest proxy). Anonymized session-replay and heatmap data via Microsoft Clarity (on-screen interactions during play, with sensitive input fields masked). Ad-conversion measurement via Microsoft Advertising (Bing), the Meta (Facebook/Instagram) Pixel, and the TikTok Pixel when you arrive from — or to measure the performance of — one of our ads. These pixels send limited event data (for example, that a game was started) to those platforms so we can measure how our ads perform; the platforms may also use this data to optimize delivery of our ads on their services. Standard web server logs (IP address, browser type — used for security only, not advertising).
1.3 Payment Information: We do not collect or store payment card details. Stripe handles all payment processing. We receive only transaction confirmation, SKU, amount, and Stripe payment ID.
2. How We Use Your Information
To operate the Game and your Account; process purchases and credit Sanity Vials; investigate and resolve CS disputes; detect and prevent fraud; send transactional communications; analyze aggregate usage to improve the Game; comply with legal obligations.
We do NOT sell or rent your personal information for money, and we do NOT let third parties use your information for their own independent marketing. To measure and improve our own advertising, we share limited event data (for example, that a visitor started a game) with our ad platforms — Microsoft (Bing), Meta, and TikTok — through their measurement pixels; those platforms may also use this data to optimize delivery of our ads. Under some privacy laws (such as California's CCPA/CPRA) this pixel-based sharing may be considered "sharing" for cross-context behavioral advertising.3. Third-Party Services
| Service | Purpose |
|---|---|
| Google OAuth | Account sign-in |
| Stripe | Payment processing |
| Supabase | Game data storage (US servers) |
| PostHog | Usage analytics |
| Microsoft Clarity | Anonymized session replay and heatmaps to improve gameplay (no personal info; sensitive content masked) |
| Microsoft Advertising (Bing) | Conversion measurement for our ads (counts how many visitors start a game or purchase — used to measure ad performance, not to target you) |
| Meta (Facebook/Instagram) Pixel | Conversion measurement and delivery optimization for our ads on Meta (shares limited event data such as that a game was started; Meta may use it to optimize delivery of our ads) |
| TikTok Pixel | Conversion measurement and delivery optimization for our ads on TikTok (shares limited event data such as that a game was started; TikTok may use it to optimize delivery of our ads) |
| Vercel | Website hosting |
| Anthropic (Claude API) | AI Threads of Fate narratives (card names only sent — no personal info) |
5. Children's Privacy
The Game is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact support@arcanasolitaire.com if you believe a child under 13 has used the Game.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until deletion requested |
| Game session records | 2 years |
| Vial activation events | 2 years |
| Purchase records | 7 years (tax/accounting) |
| Support correspondence | 2 years from resolution |
| Analytics data (PostHog) | ~1 year |
7. Data Security
We implement reasonable security measures including HTTPS, JWT authentication, and database access controls. No method of internet transmission is 100% secure.
8. Your Rights
8.1 All Users: Request a copy of your data; request correction; request deletion. Email support@arcanasolitaire.com. We respond within 30 days.
8.2 California Residents (CCPA): Right to Know, Right to Delete, Right to Opt Out of Sale (we do not sell data), Right to Non-Discrimination. Submit CCPA requests to support@arcanasolitaire.com with subject "CCPA Request."
9. Data Transfers
We are based in the United States. Data from users outside the US is transferred to and processed in the US.
10. Changes to This Policy
We may update this policy periodically. The "Last updated" date above reflects the most recent revision.
11. Contact
Email: support@arcanasolitaire.com | Operator: Ryoma Services LLC | arcanasolitaire.com/privacy