Play NowPrivacy Policy
Data Protection and Privacy Policy
ARCHKEEPERS
1. Overview
This Data Protection and Privacy Policy ("Policy") describes how PG SCIENTIFIC INC LTD collects, uses, stores, discloses, and protects personal data in connection with the game ARCHKEEPERS, the website archkeepers.com, the game service reached from it, and all related accounts, gameplay features, the Store, the Treasury, the Collector's Market, purchase flows, and support channels (the "Platform").
We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018, Regulation (EU) 2016/679 where it applies (together, "GDPR"), and other applicable privacy requirements.
We do not sell your personal data, and we do not use it for third-party advertising.
2. Data Controller
The controller responsible for your personal data is:
Company: PG SCIENTIFIC INC LTD Company registration number: 14310944 Registered address: 25 Wilton Rd, London SW1V 1LW, United Kingdom Website: https://archkeepers.com Email: support@archkeepers.com
3. Categories of Personal Data We Collect
Depending on how you use the Platform, we may process:
(a) Account data — email address, nickname, user ID, login and authentication data, account settings, account status, registration date, and the record of your acceptance of the Terms of Service and this Policy (the date and time, the versions accepted, and the method of acceptance).
(b) Gameplay data — game progress, battle results, the Pages, Instruments, World Folios, Canon Relics, and Restoration pieces on your account, your Manuscripts (including the Manuscript recorded for the Canon Arena), your Arena rating, and your Gilded Ink and Archive Seals balances.
(c) Transaction data — records of Gilded Ink and Archive Seals purchases, purchases in the Store and the Collector's Market, refunds, chargebacks, payment status, receipts, billing identifiers, and transaction history, and the record of your consent at each purchase (agreement to the Terms of Service and Refund and Cancellation Policy, and the express request for immediate delivery).
(d) Payment data — the cardholder's first and last name entered at checkout, payment references, payment confirmations, failed payment records, partial card details (no more than the last four digits and card brand), and fraud-prevention signals received from our payment providers. Card numbers, expiry dates and security codes are entered into the payment provider's own fields and never reach us.
(e) Support data — messages you send us, complaints, refund enquiries, and our responses.
(f) Device and technical data — IP address, browser type and version, operating system, language, time zone, request logs, and local storage identifiers.
(g) Security and anti-fraud data — login attempts, suspicious-activity signals, account risk indicators, chargeback risk data, and fraud-prevention logs.
(h) Preference data — settings such as sound and music preferences, and communication preferences and opt-in/opt-out status where marketing is offered.
(i) Legal and compliance records — data we must keep for accounting, tax, consumer protection, dispute, and other regulatory purposes.
4. How We Collect Personal Data
Directly from you — when you register, play, make a purchase, or contact support.
Automatically — technical, gameplay, and transaction data generated while you use the Platform, including through local storage and similar technologies.
From third parties — such as payment processors, fraud-prevention providers, hosting providers, banks and card networks, and public authorities, where relevant to the purposes below.
5. Purposes and Legal Bases
We process personal data only with a lawful basis under Article 6 GDPR:
(a) Account and game provision — registering and authenticating you, saving your progress, operating gameplay features, the Canon Arena, ratings, and balances. Basis: contract performance.
(b) Purchases — processing Gilded Ink and Archive Seals purchases, purchases in the Store and the Collector's Market, receipts, and transaction records. Basis: contract performance; legal obligation; legitimate interests.
(c) Fraud prevention — screening transactions and preventing misuse, chargeback abuse, and unlawful activity. Basis: legal obligation; legitimate interests.
(d) Support and dispute handling — responding to enquiries, resolving complaints, processing refunds. Basis: contract performance; legitimate interests; legal obligation.
(e) Security and platform integrity — protecting accounts, detecting automation and cheating, monitoring faults, securing the Platform. Basis: legitimate interests; contract performance.
(f) Service improvement — analysing technical logs and aggregated gameplay data to fix issues, balance the game, and develop features. We do not use third-party advertising or cross-site tracking. Basis: legitimate interests.
(g) Communications — sending service messages (email confirmation, receipts, security notices, policy updates); optional marketing only with your consent or as otherwise permitted by law. Basis: contract performance; consent; legitimate interests.
(h) Legal compliance and claims — accounting, tax, regulatory, and legal-claim obligations. Basis: legal obligation; legitimate interests.
6. Required and Optional Data
Some data is necessary to provide the Platform: without account data we cannot operate your account; without payment data we cannot process purchases; without records required by law we cannot complete certain transactions. Optional data (such as marketing preferences, where offered) can be changed or withdrawn at any time.
7. Cookies and Similar Technologies
We use browser local storage and similar technologies as described in our Cookie Policy. Strictly necessary technologies are always used — supporting login, session security, payment flows, and basic operation. Any optional technologies would be used only where permitted by law and, where required, after your consent.
8. Disclosure of Personal Data
We may share personal data, where necessary, with the following categories of recipients:
(a) hosting, database, authentication, infrastructure, and cloud service providers;
(b) payment processors, payment service providers, banks, and card networks;
(c) fraud-prevention providers;
(d) email delivery and communication providers;
(e) professional advisers — legal, tax, accounting, audit, and compliance;
(f) courts, regulators, tax authorities, law enforcement, and other public authorities where required or permitted by law;
(g) business successors in connection with a merger, acquisition, restructuring, or transfer of business.
Our main service providers at the date of this Policy are Supabase (database and sign-in), Vercel (game hosting and server functions), Cloudflare (website assets), Resend (transactional e-mail) and, once card payments are enabled, Stripe (payment processing).
Other users can see the information the game shows about you in the Canon Arena: your nickname, the portrait you chose, your progress, your Manuscript's power, your Arena rating, and your recorded Manuscript. Your recorded Manuscript and nickname may also appear to other users as an opponent in the Canon Arena when you are not online.
All service providers process personal data on our documented instructions under data processing agreements with appropriate confidentiality and security obligations.
9. International Transfers
Where a provider processes data outside the United Kingdom or the European Economic Area, the transfer is covered by an adequacy decision or by approved contractual safeguards — the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, with supplementary measures where needed.
10. Data Retention
We keep personal data only as long as necessary for the purposes above:
(a) account and gameplay data — while your account is active, and for a limited period after closure for security, dispute, and legal purposes;
(b) purchase, accounting, and tax records — 6 years, as required by UK accounting and tax law;
(c) support correspondence — as long as needed to resolve the matter and keep a record of it;
(d) security and server logs — for a limited period, unless needed for an investigation or legal claim.
When data is no longer required, we delete or anonymise it, or securely archive it where the law requires continued retention.
11. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), access controls, role-based permissions, server-side processing of balance changes, logging and monitoring, secure development practices, and due diligence of service providers. No online service is completely secure — keep your credentials confidential and tell us immediately at support@archkeepers.com if you suspect your account is compromised.
12. Your GDPR Rights
Subject to legal conditions and exemptions, you have the right to: access your data; rectify inaccurate data; erase your data; restrict processing; object to processing based on legitimate interests (including any direct marketing); data portability; and withdraw consent where processing is based on consent.
To exercise your rights, contact support@archkeepers.com. We may need to verify your identity, and we respond within the timeframes set by the GDPR (normally one month).
13. Automated Processing
We may use automated tools to detect fraud, automation, payment risk, and suspicious account behaviour, and to diagnose technical issues. We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you, unless permitted by law and accompanied by appropriate safeguards, including the right to human review.
14. Children
The Platform is intended only for users aged 18 and over. We do not knowingly process personal data of minors. If we learn that a person under 18 has created an account, we will restrict the account and delete the data, subject to legal retention requirements.
15. Communications and Marketing
We send service communications necessary to operate the Platform: email confirmation, purchase receipts, security notices, and policy updates. Marketing messages, if offered, are sent only where permitted by law, and you can opt out at any time via the unsubscribe link or by emailing support@archkeepers.com.
16. Supervisory Authority
If you are not satisfied with how we handle your personal data, you can complain to a data-protection authority — in the United Kingdom, the Information Commissioner's Office (ico.org.uk); if you live in the European Union, the supervisory authority of your own country.
17. Changes to This Policy
We may update this Policy to reflect changes in our practices, features, providers, or legal requirements. The current version is always available on the Platform; material changes will be announced on the Platform or by email where appropriate.
18. Contact
Company: PG SCIENTIFIC INC LTD Company registration number: 14310944 Registered address: 25 Wilton Rd, London SW1V 1LW, United Kingdom Website: https://archkeepers.com Email: support@archkeepers.com