1. Introduction & Overview

At Aetheria Labs LLC, we are committed to protecting your privacy and security. This Privacy Policy outlines our guidelines and procedures regarding the collection, storage, use, and transfer of the information you share when using our services at randomarena.io, the Random Arena platform, and other products operated by Aetheria Labs LLC. We will not sell, rent, or distribute your private information to third parties.

2. Information We Collect

Depending on how you interact with our services, we may collect several types of data:

• Account Information: To access premium features of Random Arena, we collect your email address, username, display preferences, and authentication tokens (e.g., via Google Auth or Twitch Integration).
• Payment Data: All financial and subscription billing is handled exclusively and securely by Stripe. We do not store, view, or process credit card numbers or raw billing tokens on our company servers.
• Technical Metrics: We collect technical logs, such as browser information, IP addresses, canvas diagnostic data, and performance statistics, to guarantee optimal WebGL performance on multiple device types.

We do not knowingly collect or solicit personal data from children under the age of 13. If we discover we have inadvertently collected such data, we will wipe it immediately.

3. How We Use Collected Data

The information we gather is used to maintain, optimize, and secure our SaaS applications:

• To authenticate your session and render customized arena metrics.
• To process recurring billing transactions and prevent fraudulent account actions through Stripe.
• To provide prompt support for billing discrepancies, technical crashes, or compliance requests.
• To optimize the rendering physics loop and visual speeds based on user hardware configurations.

4. Data Retention & Secure Infrastructure

We protect your data using industry-standard physical and logical security protocols. Our servers are hosted on enterprise-grade infrastructure (including Google Firebase and Google Cloud Platform) with rigorous encryption for all database transits.

Account parameters are kept for as long as your subscription is active. Upon cancellation or account deletion requests, your associated database records will be programmatically erased from our production databases within thirty (30) business days.

5. Third-Party Integrations

Our platforms utilize third-party API configurations to ensure full feature operations:

• Stripe: Acts as our merchant of record for payment processing. Stripe retains billing details in line with standard PCI-DSS specifications.
• Firebase/Google Auth: Used to manage single sign-on flows and keep password hashes fully secured.
• Twitch API: Allows creators to sync chat names into physics raffles in real-time. Chat names are parsed in-memory and never cached permanently on our servers.

6. Your Data Rights & Access

We honor your data integrity rights. At any point, you have the absolute authority to:

• Request a complete exported copy of the account parameters we have compiled.
• Correct or edit outdated profile fields inside the active settings panel.
• Request the complete, permanent erasure of your account and associated platform history.

7. Washington State Compliance

As a registered Washington State corporate entity, we operate in strict compliance with the Consumer Protection Act and local data security laws. We periodically review these terms to ensure alignment with national and state-specific regulatory evolutions.