Privacy Policy

PinkertonDigital LLC operates CycleArena and is responsible for the product data practices described here. Privacy questions and requests can be sent to alexanderpinkerton.business@gmail.com.

• Account and identity: Email address, username, authentication identifiers, avatar, public profile ID, previous usernames, and account timestamps.
• Gameplay and progression: Player and lobby identifiers, match participation, scores, eliminations, settings, career events, XP, challenges, statistics, rewards, Credits, cosmetics, and entitlements.
• Commerce: Product, amount, currency, tax, order status, payment and Checkout identifiers, purchase attribution, and fulfillment records. Stripe collects and processes payment-card details; CycleArena does not store full card numbers.
• Content and communications: Lobby chat, feedback, bug reports, profile information, highlight videos and labels, and messages you send us.
• Advertising preferences: Age-range choice, consent status, optional date of birth, optional gender, consent string, and preference timestamps.
• Device, usage, and diagnostics: IP address and network information available to our servers and providers, browser and device type, display mode, anonymous analytics identifier, referring page, campaign parameters, interaction and gameplay events, errors, and web build ID.

We collect information you provide, information generated when you play or use features, and technical information sent automatically by browsers, game clients, cookies, local storage, server logs, and our service providers. If you use Google sign-in, Google and Supabase provide the account information needed to authenticate you.

When enabled, PostHog session replay may record interactions and visible screen activity on the homepage and Play routes so we can diagnose usability and performance. Form inputs are masked and replaced with redacted text. Avoid placing sensitive information in usernames, chat, or other public game surfaces.

• Provide accounts, matchmaking, gameplay, and synchronization.
• Calculate progression, balances, ownership, rewards, and public profile presentation.
• Process, fulfill, reconcile, and support purchases.
• Operate chat, feedback, highlights, advertising, and community features.
• Measure acquisition and product usage, improve the game, test changes, and diagnose errors or performance problems.
• Prevent cheating, fraud, abuse, account compromise, and attacks.
• Comply with law, enforce our terms, and protect players, the public, and our rights.

Where data-protection law requires a legal basis, we rely on the performance of our contract with you to provide accounts, gameplay, and purchases; our legitimate interests in securing, operating, measuring, and improving CycleArena; consent for personalized advertising and other processing where consent is requested; and compliance with legal obligations. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

We share information only as reasonably needed for the purposes described above. Recipients and service providers may include:

• Supabase provides authentication, database, and file storage services.
• Stripe provides Checkout, payment processing, tax, and fraud tools.
• PostHog and Google Analytics/Tag Manager provide configured analytics and measurement.
• Cloudflare Turnstile, when configured, provides bot and abuse detection for anonymous guest sign-in.
• Anzu and its advertising partners provide in-world advertising.
• Hosting, content-delivery, communications, security, and technical service providers support the operation of CycleArena.
• Authorities, professional advisers, transaction participants, or other parties may receive information when required by law or reasonably necessary to protect rights, safety, and the service.

Provider processing is also governed by provider notices, including Stripe, Supabase, PostHog, and Cloudflare.

Usernames, selected profile details, Founding Pilot marks, gameplay identity, lobby chat, and shared highlights may be public to other players and may appear in screenshots or recordings made by them. Career profile visibility settings limit protected career details but do not make all in-game activity private.

We use cookies and browser storage for authentication, security, preferences, attribution, and analytics identifiers. Analytics tools may measure page views, gameplay and commerce funnel events, device characteristics, and referring campaigns.

In-game controls let you choose personalized or limited advertising. Personalized advertising is available only when the age and consent choices permit it. Limited advertising is less personalized, not ad-free. CycleArena does not collect advertising IDs on Web/PC.

We do not sell personal information for money. Personalized advertising and measurement may be treated as “sharing,” “targeted advertising,” or a similar regulated activity in some places. You can select limited ads in the game settings or contact us about an applicable privacy choice. Browser “Do Not Track” signals are not currently interpreted as a separate request.

We retain information for as long as reasonably needed to provide and secure CycleArena, maintain accurate progression and ownership, resolve disputes, enforce agreements, and meet legal, tax, accounting, and fraud-prevention duties. Retention differs by data type.

• Unclaimed guest accounts and temporary guest progression are scheduled for cleanup after a limited inactivity period.
• Generated highlight files are normally subject to a 30-day storage retention process and can also be deleted by their owner. Related metadata and records may be retained longer.
• Commerce, security, and audit records may be kept longer where needed for legal obligations, reconciliation, disputes, and fraud prevention.
• Deletion from active systems may not immediately remove data from backups or records we must retain.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, or to withdraw consent. You can update certain account, profile, gameplay, and advertising settings in the product and delete individual avatar or highlight content where those controls are available.

To make another privacy request, email alexanderpinkerton.business@gmail.com. We may need to verify your identity. Some requests may be limited by applicable exceptions, including records needed for commerce, security, legal compliance, and the rights of others. You may use an authorized agent where applicable law permits it.

Teenagers can play CycleArena. Players must be at least 13 years old, and a parent or legal guardian must review and agree to our Terms of Service for a player who is under the age of legal majority where they live. Players ages 13 through 16 receive limited, non-personalized ad settings.

CycleArena does not currently support players under 13 because we have not implemented the verifiable parental-consent and child-privacy controls needed for an under-13 offering. The age choice shown for advertising controls ad personalization; it does not change the 13-year minimum. If you believe a child under 13 provided personal information, contact us so we can investigate and take appropriate action.

We use administrative, technical, and organizational measures intended to protect information, but no system is completely secure. Data may be processed in the United States and other countries where we or our providers operate. Those locations may have different data protection laws from your own.

We may update this policy as CycleArena and its providers change. The effective date above shows the latest revision, and we will provide additional notice when required by law.

Contact PinkertonDigital LLC at alexanderpinkerton.business@gmail.com.