Beyond the ArcBeyond the Arc

Privacy

Last updated 17 September 2026

The short version

No advertising network. No third-party analytics. No tracking pixels or cookies. We hold your email address and whether you are a subscriber, because we cannot run an account without those, and nothing else about you is of any use to us.

What we collect

If you have an account, we store:

  • your email address;
  • your subscription state — plan, status, renewal date, and the Stripe customer reference that ties them together;
  • the date the account was created.

Your password is handled by our authentication provider and is stored hashed. We never see it. If you sign in with a one-time link, there is no password at all.

If you do not have an account, we do not collect anything about you beyond the ordinary server logs our host keeps to serve pages and stop abuse.

What we count

The desktop app. Once a week, unless you turn it off, the app sends which of its features were used that week (Peek, Compare or Find Similar, say), each as a yes or no, with how many days it was opened and its version. It sends no team, player, filter, search or account with them. They are stored under a scrambled form of a random id the app made when it was installed, never alongside your account. Turn it off with Share feature counts in the app's account menu.

Payments

Checkout and billing run entirely on Stripe. Card numbers, expiry dates and security codes are entered on Stripe's own pages and never touch this site or its servers. We receive back only what we need to know whether your subscription is active.

Email we send

Account email only: sign-in links, receipts, and notice of a change that materially affects paying subscribers. There is no marketing list, so there is nothing to unsubscribe from.

Your data, and getting rid of it

You can ask for a copy of what we hold, ask for it corrected, or ask for the account and everything attached to it to be deleted. Write to cpb09e@gmail.com and it will be done within 30 days, usually the same week.

Deleting an account removes the email address and profile. Stripe keeps payment records for as long as tax and accounting law requires, which is not something either of us can waive.

If you are in the UK or EEA, our basis for holding this is contract — we cannot give you an account without it — and you have the rights the UK GDPR and GDPR give you, including the right to complain to your supervisory authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.

Children

The site is not intended for children under 13 and we do not knowingly collect their information. If a child has created an account, write and it will be removed.

Changes

The date at the top of this page reflects the current version. If the site ever starts collecting something it does not collect today, this page changes before that happens, not after. See also terms of service and sources.