Controller: Archade Reporting & Analytics LLC, PO Box 82308, Portland, OR 97282, USA ("Archadia", "we"). Contact: support@archadereporting.com.
1. Who we are and what this covers
Archadia is an interactive coaching world that reads how you play and matches you with a coach identity. This policy explains what personal data we collect across archadia.app (the countdown, the quiz, the waitlist, and the app once you have an account) and what we do with it. Short version: we collect what the product needs, we do not sell it, and you can make us erase it.
2. What we collect
Before you have an account: Waitlist: your email address, plus proof of your consent (the time, the exact consent text version you agreed to, and where on the site you signed up). The quiz: your four answers and the coach reading they produce. If you arrived from a waitlist email or signed up on this device, that reading is linked to your email so the world can remember you when you join. Contact form: your name, email, topic, and message. If you report a player, we also collect the player name you give us and your account of what happened, which we keep while we review and enforce our community standards (a legitimate interest under GDPR Art. 6). Device memory: we store a small identifier in your browser's local storage so this device remembers your signup and quiz. It stays on your device; clearing your browser storage removes it.
Once you have an account: Account: email, password (hashed), and authentication identifiers. Age: date of birth, once, to enforce our 16+ requirement. Gameplay you log: match results and statistics (for example kills, accuracy, placement, revives, survival time), entered manually or extracted from screenshots you upload. Profile: onboarding persona answers, your chosen game, coach alignment, and your progression state. Derived data: computed identity-fit and coaching scores against our coach models (see section 5). Billing: subscription tier and status. Card payments are processed by Stripe; we never store full card numbers.
What the coaching layer adds: Coach dossier: short written observations a coach keeps about how you play and how you like to be coached, built from your logged matches, your conversations, and the style dials you set. You can read what a coach holds on you inside the app. Conversations: the messages you send a coach at the Table, in a post match read, or during a reading table session, and the replies you receive. Voice: coach narration is generated speech; we do not record your microphone anywhere in the product. Live sessions: if you open a reading table, we store the session, the goals you set, the calls the coach made, and audience votes and chat from people who joined your session key. Safety: messages are screened for abuse and crisis language, and a flagged message is stored with the account for human review. Social: your gamer tag, ladder standing, referrals, and anything you choose to make public, such as a shared card at a public lookup link.
Match screenshots: an uploaded scoreboard image is sent to an AI service that reads the numbers. Archadia does not save the original image. We keep the numbers read from it and a short fingerprint of the picture, so the same scoreboard is not logged twice. Numbers you have not confirmed yet wait in your list. Confirming or skipping one marks it done; it is not deleted automatically.
Everyone: Security data: IP addresses are processed briefly to rate-limit abuse of our forms. These records are short-lived and used only for security.
3. Why we use it (legal bases, GDPR Art. 6)
Every category of personal data we hold is processed for a stated purpose on one named legal basis. Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms, and you can object at any time (section 10). Where we rely on consent, you can withdraw it at any time without affecting processing that already happened. We do not seek or knowingly process special category data (GDPR Art. 9).
| Category of personal data | What we use it for | Legal basis |
|---|---|---|
| Account identifiers: email, hashed password, authentication identifiers | Creating and securing your account, signing you in, essential service email | Contract, Art. 6(1)(b) |
| Date of birth | Enforcing our 16+ age requirement once, at sign-up | Legal obligation, Art. 6(1)(c), and legitimate interests, Art. 6(1)(f): keeping children out of an adult competitive product |
| Gameplay you log: match results, statistics, session and loadout tags, confirmed screenshot readings | Delivering the product you signed up for: your record, your standing, your reads | Contract, Art. 6(1)(b) |
| Derived data: identity fit, alignment, attunement, coaching scores | Producing your coach reading and your progression (see section 5) | Contract, Art. 6(1)(b) |
| Coaching layer: coach dossier observations, coaching style dials, conversations with a coach, live session records | Personalising coaching, remembering you between sessions, running live sessions | Contract, Art. 6(1)(b) |
| Profile and social: gamer tag, ladder standing, cards, referrals, public posts | Showing you to other players in the ways you have chosen to be shown | Contract, Art. 6(1)(b), for the feature; consent, Art. 6(1)(a), for anything you publish |
| Billing: subscription tier, status, payment references held by Stripe | Taking payment, granting your tier, tax and accounting records | Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c), for the records we must keep |
| Waitlist email and consent proof | Sending you launch and product email you asked for | Consent, Art. 6(1)(a) |
| Pre-account quiz reading: your answers, the resulting alignment, and the sneak peek email address if you gave one | Showing your reading, emailing it to you, attaching it to your account later | Consent, Art. 6(1)(a) |
| Contact form and support messages | Answering you and keeping a record of the request | Legitimate interests, Art. 6(1)(f): responding to a person who contacted us; contract where you are already an account holder |
| Reports and moderation: the player name you report, your account of what happened, messages flagged by our screening | Reviewing reports and enforcing our community standards | Legitimate interests, Art. 6(1)(f): keeping the community safe and our terms enforceable |
| Security data: IP address, rate-limit and abuse records | Blocking abuse of our forms, fraud prevention, service integrity | Legitimate interests, Art. 6(1)(f): protecting the service and its users |
| Device memory: the local-storage identifier and your authentication session | Keeping you signed in and letting this device remember your reading | Strictly necessary for a service you requested; no consent is required for these and we set no others (section 11) |
| Product analytics, only if you accept optional cookies | Understanding which parts of the product are used, in aggregate | Consent, Art. 6(1)(a), withdrawable from the same banner |
| Erasure log: a one-way hash of an erased email address | Proving we erased you and keeping you suppressed from our mailing | Legal obligation, Art. 6(1)(c), to demonstrate compliance, and legitimate interests, Art. 6(1)(f), in honouring your objection permanently |
Match screenshot images have no row of their own because Archadia does not save them: an AI service reads the image for its numbers. The numbers read from it, and a short fingerprint of the picture, are kept under gameplay above.
If you are in the UK the same bases apply under the UK GDPR. If you are in California or another US state with a privacy law, we do not sell or share your personal information and we do not process it for cross-context behavioural advertising, so there is nothing for you to opt out of; your access and deletion rights are handled through section 10.
4. Age requirement (16+)
Archadia is not for anyone under 16. We ask your date of birth at sign-up and block accounts below 16. If we learn we hold data on someone under 16, we delete it.
5. How your coach is determined (profiling transparency)
Archadia works by profiling in the everyday sense: we score the match statistics you log against our nine coach models. Each coach weights certain stats; we normalize yours, combine them by those weights, and produce a fit score. The coach you read as is the best fit. The logic is rules-based and explainable: you can ask us how a result was produced and request a human review. It is never used for advertising and produces no legal or similarly significant effects on you.
6. AI processing
Coach readings, chat replies, screenshot reading, and narration are produced by third party models we call on your behalf: large language models from Google and OpenAI routed through the Lovable AI Gateway, and speech synthesis from ElevenLabs. We send only what the feature needs: your logged statistics, the relevant coach dossier, your coaching style dials, and your message. We do not send your email, your password, or your payment details. Our providers act as processors under contract and do not use your content to train their models. Model output is generated text and can be wrong; it is coaching flavour, not fact.
7. What is public and what is not
Private by default: your matches, your reads, your dossier, your conversations. Public only by your action: your gamer tag and ladder standing once you take part, posts you make in shared spaces, a card you share at a public lookup link, and anything said in a live session you opened or joined. You can stop sharing at any time from your account page.
8. Who we share with
Only processors that run Archadia, under data-processing terms: Supabase (database, authentication, hosting), Lovable (application platform and AI gateway), Google and OpenAI (coach language models), ElevenLabs (coach voices), Resend (email delivery), and Stripe (payments). We do not sell personal data and we do not run third-party advertising or tracking. Some processors are US-based; transfers rely on their EU-approved safeguards (Data Privacy Framework or Standard Contractual Clauses).
9. How long we keep it
Waitlist and quiz readings: until you unsubscribe and ask for deletion, or the pre-launch purpose ends. Account and gameplay data: while your account exists. Contact messages: as long as needed to handle your request. Security and rate-limit records: days, not months. After a full erasure: we keep only a one-way cryptographic hash of your email in an erasure log, so we can prove we deleted you and keep you deleted (your address stays permanently suppressed from our mailing). The hash cannot be reversed into your email.
10. Your rights (GDPR Art. 15-22)
You can ask for access, a copy, correction, deletion, or restriction of your data, and you can object to processing based on legitimate interest. Two of these are built in: Unsubscribe (link in every non-essential email) stops all marketing and product email globally, immediately; essential service email still works; you can re-consent later by signing up again. Full erasure: email support@archadereporting.com from the address you signed up with and ask; we delete your waitlist entry, quiz readings, and associated data, and permanently suppress your address (section 9). You also have the right to complain to a supervisory authority: in Spain, the AEPD (aepd.es); elsewhere in the EU, your local data protection authority.
11. Cookies and local storage
We use only what the product needs to function: an authentication session for signed-in users and the local-storage device memory described in section 2. No advertising cookies, no third-party analytics trackers. If that ever changes, we will ask first with a real choice.
Anonymous alignment reading: before you create an account, your alignment reading is provisional and stored only in this browser. We store the resulting alignment, the time it was completed, and the versions of the quiz and alignment rules that produced it. We do not store your individual quiz answers.
The anonymous reading expires after 90 days and does not follow you to another device. You may delete it from this device before creating an account. If you later claim the reading to an account, the account record becomes authoritative.
Sneak peek capture: if you give us your email address at the end of the reading, we store that address, your date of birth, the resulting alignment, the time it was completed, and the versions of the quiz and alignment rules, together with your acceptance of these terms. We use this to send you your sneak peek and to attach the reading to your account when you sign up with the same address, so you are asked for your date of birth only once. You can unsubscribe from these emails at any time, and you can ask us to delete the record by contacting us.
12. Security and breaches
Data lives in access-controlled infrastructure with row-level security, least-privilege service roles, and encrypted transport. If a breach ever creates risk to you, we will notify the supervisory authority within 72 hours and affected users without undue delay.
13. Changes
We will post changes here with a new date, and for material changes we will tell you by email or in the app before they take effect.
14. Contact
Archade Reporting & Analytics LLC, PO Box 82308, Portland, OR 97282, USA. support@archadereporting.com, or the contact form at archadia.app/contact.