Privacy Policy
Last updated: October 2026. The services and personal data processed are explained below. Our final review of provider contracts and international transfers is still pending.
Data controller
ABBES Digital / Robert Finn, Winne Siedlung 32 98597 Breitungen/Werra Deutschland, r.finn2303@gmail.com
Hosting
ARCAVOTE and its MySQL database are hosted by Railway in Amsterdam, the Netherlands. The server region alone does not guarantee that every integrated provider processes data exclusively within the European Union.
Server logs
When you visit this website, our hosting provider processes technically necessary information, including IP address, date and time, and pages requested. The legal basis is Article 6(1)(f) GDPR.
Votes
To prevent duplicate voting, we store a non-reversible hash of your IP address, your optional in-game player name and the voting timestamp. If you supply a player name, we send that name and your IP address to the relevant game operator to deliver a voting reward (Article 6(1)(b) GDPR). Vote records are deleted after 90 days.
Accounts
We retain an operator's email address, username and hashed password while their account exists. For email verification and password resets we temporarily store hashed one-time tokens and their request timestamps. Verification links expire after 24 hours and password reset links after 30 minutes. Transactional messages are sent via Brevo when email delivery is enabled. If you arrived via a partner or community link (?ref=…), its identifier is saved in your session and recorded on registration to measure operator signups. No additional cookie is created for this.
Game directory and quick submission
For editorial listings and quick submissions, we retrieve publicly accessible game websites and read metadata such as title, description and language. We do not copy images. When claiming a listing we check once for a verification code on that game's domain. Operators can request corrections or removal of editorial listings at any time.
Transactional email
Brevo processes the recipient address and message contents to deliver verification and password reset emails.
Payments
Depending on the option selected, premium payments are processed by PayPal or Stripe. We retain booking status, amounts, order references and capture/refund references for billing and troubleshooting. The relevant payment provider's privacy notice also applies.
Cookies and third-party services
We use one technically necessary session cookie. We do not load fonts from Google.
Recipients and international transfers
Potential recipients include Railway (hosting), Brevo (transactional email), PayPal (payments) and a game operator receiving an enabled pingback. Pingbacks contain your provided in-game name and IP address. Relevant GDPR safeguards apply to transfers of personal data outside the EEA.
Retention
Votes are deleted after 90 days. Contracts and payment records may be subject to statutory retention requirements.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also lodge a complaint with a supervisory authority.