Privacy Notice

Who we are

AFCT Arcade ("we", "us") operates this website from Arizona, United States, and is the data controller for the personal data described here, meaning we decide why and how it is processed.

Data we collect and why

• Account details (email address, login credentials) — to create and secure your account. Legal basis: contract.
• Donation records (subscription status, customer reference) — to manage your Supporter donation. Legal basis: contract.
• Technical data (IP address, device and browser information, usage logs) — to keep the site running, secure, and to prevent fraud. Legal basis: legitimate interests.
• Messages you send us — to respond to support requests. Legal basis: legitimate interests.

Card and payment details are collected directly by Paddle; we never see or store them.

Who we share data with

• Paddle, our Merchant of Record, for the sale of donations, subscription management, payments, tax compliance, and invoicing.
• Service providers such as hosting and database providers that run the site on our behalf.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Some providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

How long we keep data

We keep account data while your account is active, and donation records as long as required for tax and accounting purposes. When data is no longer needed, we delete or anonymise it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. You may also complain to your local data protection authority. Contact us through the site to make a request; we aim to respond within one month.

If you live in a US state with its own consumer privacy law, you may have extra rights, such as asking what categories of data we collect and how long we keep it. We do not sell personal data and we do not run targeted advertising, so there is nothing to opt out of.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

Cookies

We only use essential cookies and local storage needed to keep you signed in and to run checkout. We do not use advertising or analytics cookies. You can clear these through your browser settings.