1. Controller and contact
The controller responsible for the processing of personal data through AREN8 is Taivo Visnapuu, Estonia. AREN8 is the platform brand, not a separate legal entity. Contact: info@aren8.com
Service provider address: Mõisasepa, Vesneri, Tartu vald, Tartu, 60537, Estonia
2. What data do we use?
When you create an account, we use your name, email address, telephone number, password hash, confirmed country and time zone, and account verification data. Country is used only as a broad profile and analytics dimension; we do not collect precise location or GPS data or show it on public profiles. During play, we store sessions, replays, results, progress, virtual items and security and error diagnostics.
3. Why do we use data?
We use data to provide accounts and games, verify results on the server, maintain leaderboards and progress, detect fraud and technical errors, provide support and, when you choose it, measure site usage.
4. Game results and public information
Leaderboards may display your public name, position and server-verified result. Your email address, telephone number, replay token and authentication data are never displayed publicly.
5. Retention
We retain account and progress data while your account is active. Security, transaction and verified game records may be kept longer for audits, disputes and fraud prevention. Individual analytics events are deleted after no more than 180 days.
6. Service providers and transfers
Hosting, email, payment and advertising providers may process data where necessary. Where processing takes place outside the European Economic Area, we use applicable safeguards. AREN8 does not sell personal data.
7. Your rights
You may request access, correction, erasure or restriction of your data and object to processing. You may withdraw analytics consent at any time in cookie settings. You may also lodge a complaint with your local data protection authority.
8. Security and changes
We use access controls, password hashing, CSRF protection, secure session cookies, request limiting and server-side result verification. Material changes are announced in the AREN8 interface. Last updated: 2 October 2026.
Anonymous page-response totals
From 10 September 2026, we count public HTML pages served by the server even when analytics cookies are declined or no choice has been made. We retain only the day, page category, approximate country and aggregate counts grouped by the consent choice in effect when the request arrives. This counter does not store IP addresses, raw browser data, URL parameters, or account, visitor or device identifiers. It sets no tracking cookies, creates no browsing history and does not link page views to a player. It is separate from consent-based usage analytics. To monitor service reliability, we also collect aggregate HTTP response statistics: day, request category, method, response status, a test-request flag, request count and aggregate duration measurements. These counters do not retain IP addresses, user or device identifiers, form data or URL parameters. Aggregate records are retained for up to 180 days.