Private staging notice · 15 July 2026

Privacy should be part of the architecture.

This notice describes the current points-only ARCTA private staging build operated by ARCTA / The Change Architect, a sole-founder project based in Belgium. It is not yet a notice for a public token, wallet, payment service or airdrop because none of those capabilities is active.

What the game stores

• A random anonymous session identifier in a secure HttpOnly cookie.
• Mission and practice progress, timestamps, points-ledger events and earned learning achievements.
• Evidence proof hashes and character counts. Your reflection text is checked and immediately discarded.
• Privacy-safe rate-limit, risk and audit events needed to protect the private service.
• An optional recovery-key hash if you choose to create a recovery key. The raw key is shown to you once and is not stored by ARCTA.

Network processing

The server temporarily uses the connecting network address in memory to limit abusive request rates. It is not written into the ARCTA game database or included in the private export. Standard hosting infrastructure may create operational security logs outside the game database; those hosting practices must be reviewed before public release.

Why it is used

The record exists to save progress, prevent duplicate awards, support recovery and deletion, and protect the integrity and availability of the private testing service. The game uses no advertising SDK, device mining or cross-app tracking. On the public ARCTA information pages, optional Google Analytics measurement remains off unless you accept the analytics choice. Advertising storage, Google Signals and advertising personalization remain disabled. Declining analytics does not block the public information pages.

Retention and control

The anonymous record expires after seven days without activity or after a maximum of 30 days. Inside Settings you can download the record, create a one-time recovery key, or permanently delete the record immediately by confirming DELETE.

Sharing and international processing

ARCTA does not sell the private game record or share it for advertising. The staging service is hosted by an external hosting provider. A documented processing agreement, hosting-location confirmation and public controller contact route remain release gates before wider availability.

Your choices and rights

You can access and export the current anonymous record from Settings, delete it, or stop using the service. Because no name or contact detail is attached, ARCTA cannot identify or recover an anonymous record after both its cookie and recovery key are lost. Belgian and EU data-protection rights may apply when personal data is processed; the public release notice will provide a verified controller contact route.