Privacy Policy

This Privacy Policy applies to all parts of the Arc Companion service, including:

• ·Arc Companion — the mobile app for iOS and Android.
• ·Arc Companion Sync — the optional Windows desktop tool that mirrors your in-game stash into the mobile app.
• ·arccompanion.io — this website and any related landing or download pages.

In this document, “we”, “us” and “the service” mean all three together unless we explicitly call out a specific product.

Account information

• ·Email address — required for account creation and authentication.
• ·Username and display name — optional, chosen by you.
• ·User ID — automatically generated unique identifier.

Gameplay data (mobile app)

• ·Map markers, favorites and notes you create.
• ·Marketplace listings, watchlist items and offer history.
• ·Workshop, quest and loadout progress you choose to save.
• ·Comments and reactions you post on community content.

Stash data (desktop sync tool)

• ·A snapshot of your in-game stash, currencies, blueprints and progression — captured only when you click Sync Now.
• ·A short-lived game session token used to fetch the snapshot from the game's own services. We never see, log or store your platform password (Steam, Epic, Embark).
• ·The desktop wizard stores tokens in your operating system's credential manager and binds them to the device you approved from the mobile app.

Automatically collected

• ·Device information — model, operating system version, locale.
• ·App usage data — features used, session duration, anonymized crash reports.
• ·Aggregated analytics via Firebase Analytics (mobile) and basic visit metrics on the website.

Purchase information

• ·Premium subscription status — whether your account has an active subscription.
• ·Transaction ID — store-issued receipt (Google Play, App Store). Payments themselves are handled by the platform, not by us.

• ·Operate core features — authenticate you, sync your stash and progress, deliver marketplace updates.
• ·Improve the service — diagnose bugs, understand which features are used, prioritize the roadmap.
• ·Enable premium features — cloud sync across devices, ad-free experience.
• ·Communicate — important service updates and replies to support requests.

We do not use your data to train AI models or sell it to data brokers.

Free users (mobile app)

• ·Most gameplay data stays on your device.
• ·Data is not synced between devices.
• ·Uninstalling the app wipes local data.

Registered users

• ·Account data and synced gameplay data are stored in our Supabase database.
• ·All transit is encrypted with HTTPS/TLS.
• ·Data is protected by Row-Level Security so only you can read or write your own rows.

Desktop sync tool

• ·The desktop tool itself stores nothing on our servers beyond your stash snapshot. Tokens stay on your machine.
• ·When you press Sync Now, your snapshot is sent to your Arc Companion account over HTTPS and replaces the previous snapshot.

We rely on the following providers. Their own privacy policies apply to anything they handle for us.

Supabase

User authentication and database hosting. Stores email, username and your synced data.

Firebase (Google)

Mobile analytics, crash reporting and push notifications. Receives anonymized device and usage data.

Google AdMob (free mobile users only)

Displays advertisements. May use a device advertising ID and general (non-precise) location. Premium users do not see ads.

Google Play Billing & Apple App Store

Process premium purchases. We only receive the subscription state and a receipt identifier — never your full payment information.

Embark / game platforms (desktop sync tool)

The sync tool talks directly to the game's own services using your existing in-game session. We do not act as a man-in-the-middle for your login credentials.

We do not

• ✗Sell your personal information to third parties.
• ✗Share account-level data with advertisers beyond what AdMob is contractually granted.
• ✗Use your data for any purpose other than running and improving the service.

We may

• ·Share data with the third-party providers listed above when needed to operate the service.
• ·Disclose data when required by a valid legal process.
• ·Disclose data to investigate or prevent abuse, fraud, or security incidents.

The mobile app shows banner advertisements to free users, served by Google AdMob. Ads may use a device advertising identifier, IP address and coarse location (not precise GPS).

Premium users have an ad-free experience and no advertising data is collected.

Access your data

• ·Review your profile inside the mobile app at any time.
• ·Request a copy of your data by emailing us — see section 14.

Delete your data

• ·Visit the Account Deletion page to remove your account and all server-side data.
• ·Disconnect the desktop sync tool from inside the mobile app. The server-side stash mirror is wiped immediately and the desktop tool's token becomes useless.
• ·Uninstall the desktop EXE — it leaves no installer, service or registry entries behind.

Control collection

• ·Opt out of analytics in your device settings.
• ·Upgrade to premium to remove all advertising.

• ·Account data — retained until you delete your account.
• ·Gameplay data — retained until account deletion or app uninstall.
• ·Stash snapshots — overwritten on every new sync; permanently deleted on disconnect.
• ·Analytics data — aggregated and anonymized after 90 days.
• ·Crash logs — retained for up to 90 days.

Arc Companion is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us and we will delete it promptly.

• ·Encryption in transit — all traffic uses HTTPS / TLS.
• ·Strong authentication via Supabase Auth.
• ·Row-Level Security restricts data access to the owning account.
• ·OS-level credential storage for desktop session tokens.
• ·Security patches applied promptly and dependencies kept current.

No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

Our infrastructure may be hosted in regions outside your country of residence. By using the service you consent to the transfer of your information to those regions, which may have different data protection rules than your own.

We may update this policy from time to time. Material changes will be announced in the app and on this page. Continued use of the service after a change constitutes acceptance of the updated policy.

Questions, requests or concerns? Email us at support@arccompanion.io. We aim to respond within 48 hours.