Privacy policy

Who is responsible

The data controller is Marco Trevisani, Bologna, Italy. For anything about your data, email privacy@arc-raiders.build.

Server logs

The site is hosted on Netlify. Like any web server, Netlify records each request: your IP address, the page requested, the date and time, your browser's user agent and the page that linked to us. Netlify uses these logs to deliver the site, fix errors and protect it against attacks. They are not used to profile you.

The legal basis is our legitimate interest in running a working, secure website (Art. 6(1)(f) GDPR). Netlify keeps logs under its own retention rules. Its data processing agreement states that logs are kept online for 90 days and offline for one year, then deleted.

Netlify, Inc. is based in the United States and processes this data on our behalf as a processor. The transfer relies on Netlify's certification under the EU-US Data Privacy Framework and on the European Commission's Standard Contractual Clauses in its data processing agreement. See Netlify's privacy statement for details.

Shared builds and Popular builds

Building and sharing a build needs no account. The build is encoded in the link itself. When you share a build, the site records it so the Popular and Meta pages can rank builds: the build code, its generated name and its point split. To count each player once per build, our server stores a keyed hash of your IP address next to the build. The hash cannot be reversed into your IP address without our secret key, and the IP address itself is not stored. For one minute, the server also keeps your IP address in memory to limit abusive requests.

The legal basis is our legitimate interest in showing honest share counts and protecting the service from abuse (Art. 6(1)(f) GDPR). The records stay while the build is listed. Email privacy@arc-raiders.build to have a share removed.

These records are stored with NoCodeBackend, which acts as our processor under its data processing agreement. NoCodeBackend may process data outside the EU. That transfer relies on the European Commission's Standard Contractual Clauses included in the agreement.

Analytics by Seline

We count visits with Seline, a cookieless analytics service based in Warsaw, Poland, that hosts its data with Hetzner in Germany. The script and its requests go through sln.arc-raiders.build, a subdomain that forwards them to Seline. Seline sets no cookies and no identifier. When you arrive from another site, it keeps one flag, seline:referrer, in your tab's session storage so that referrer is counted once. It holds no identifier and is deleted when you close the tab.

For each page view Seline receives the page, the referring site, any UTM parameters, your browser, operating system and device type, and your country. To count unique visitors per day, it hashes your IP address and user agent with a salt that changes every 24 hours and is then deleted. The raw IP address and full user agent are not stored. Seline also records a few actions without identifying you: opening, sharing or resetting a build, picking a skill, and following a link to another site. We only see aggregate statistics.

The legal basis is our legitimate interest in knowing which pages and builds are useful (Art. 6(1)(f) GDPR). No consent is needed: the statistics are first-party and aggregate, and the session flag holds no identifier, which the Garante's 2021 cookie guidelines treat like a technical cookie. Seline processes this data on our behalf under its data processing agreement; see also Seline's privacy policy. Seline's traffic passes through Cloudflare's network, which derives the country. Cloudflare is certified under the EU-US Data Privacy Framework. You can object at any time by emailing privacy@arc-raiders.build or by blocking sln.arc-raiders.build in your browser.

Advertising by Google AdSense

The planner, guides, skill pages and the home page show ads from Google AdSense. This privacy policy, the error page and the stream overlays show none. To serve ads, Google processes your IP address, device and browser details and the page you are viewing, and may read or store cookies and similar identifiers on your device. It uses them to pick ads, cap how often you see the same ad, measure ad performance and detect fraud and abuse. With your consent, ads can also be personalised based on your activity on other sites.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, decides how it uses this data and acts as an independent controller under the Google Ads Controller-Controller Data Protection Terms. Our part is placing Google's tag on this site. Read how Google uses information from sites that use its services and the Google privacy policy.

Google may process this data in the United States. That transfer relies on Google's certification under the EU-US Data Privacy Framework and on the Standard Contractual Clauses in its data protection terms.

Your choice on ads

On your first visit from the EEA, the UK or Switzerland, a consent message from Google lets you accept or refuse. It runs on Google's consent platform, certified under the IAB Transparency and Consent Framework, and no ad cookies are set before you choose.

• If you accept, Google can use cookies to personalise and measure ads.
• If you refuse personalisation but allow cookies, Google shows non-personalised ads, which use cookies only for frequency capping, aggregated reporting and fraud prevention.
• If you refuse everything, Google shows limited ads, which use no cookies or local storage for advertising.

The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code, which implements the ePrivacy Directive, as set out in the Garante's 2021 cookie guidelines). You can withdraw or change it at any time with Privacy settings in the footer. Withdrawing does not affect what happened before. You can also control ad personalisation for your Google account in My Ad Center.

Cookies and browser storage

ARC Raiders Build Planner itself sets no cookies. It keeps these entries in your browser's local storage, which never leave your device:

• arb:visited:v1 lists the builds you opened, up to 100, so guides and Popular builds can mark them as already viewed.
• arc_build_shares remembers which builds you shared today, so the same share is not sent twice. Older days are dropped automatically.

The site also installs a service worker that keeps a copy of its own pages, scripts and images in your browser's cache, so the planner loads fast and works offline. It never caches ads or third-party requests. These entries are strictly necessary for features you use, so they need no consent.

The cookies and local storage from Google are set only as your consent allows:

• Consent: FCCDCF and FCNEC remember your answer to the consent message. They are needed to respect your choice, so they need no consent.
• Advertising: __gads, __gpi and __eoi on this domain, IDE and DSID on doubleclick.net, and Google's local storage entries. They last up to 13 months.

Google's cookie list has the details. You can delete cookies and local storage at any time in your browser settings.

Other third parties

Apart from the services above and Google's ad and consent tags, there are no other analytics, tracking pixels, social widgets or embedded videos. Fonts, talent icons and images are served from arc-raiders.build itself, so loading a page does not contact Google Fonts or any other third party.

Links to other sites

Pages link to MetaForge, Embark Studios, Steam, GitHub and the author's own sites. Following a link takes you off ARC Raiders Build Planner, and that site's privacy policy applies from then on. Outbound links do not pass on the page you came from.

Your rights

Under Articles 15 to 22 GDPR you can ask for access to your data, and for its correction, deletion or restriction. You can also ask for a portable copy and object to processing based on legitimate interest. Log entries and share records are not tied to a name, so to find yours we may need your IP address and the time of your visit. Email privacy@arc-raiders.build and we will reply within one month. For data Google holds as a controller, you can also contact Google directly through its privacy policy.

You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in your own EU country.

Changes

If this policy changes, we update this page and the date at the top.