Privacy Policy

Who we are

Arcana Vault (“we”, “us”, “our”) is a digital game code retailer. We are the data controller for personal data we collect through this website. Contact: support@arcana-vault.com.

What data we collect

• Account data: email address, first and last name — provided when you create an account.
• Transaction data: order history, purchased product names, and game codes associated with your account.
• Payment data: we do not store card numbers or payment details. Payment is processed by Stripe — see Stripe’s Privacy Policy.
• Technical data: IP address and browser information for security and rate-limiting purposes (not retained long-term).
• Cookies: we use one essential cookie to maintain your session and cart. We do not use analytics, tracking, or advertising cookies.

How we use your data

• To create and manage your account.
• To process and fulfil your orders (deliver game codes).
• To provide customer support.
• To meet our legal obligations (e.g., VAT records under UK HMRC rules).

We do not sell your data to third parties. We do not use your data for marketing without your explicit consent.

Legal basis (GDPR / UK GDPR)

• Contract: processing your order and delivering your game codes.
• Legal obligation: tax record-keeping.
• Legitimate interests: fraud prevention and site security.

Data retention

We retain order and account data for a minimum of 7 years to comply with UK HMRC requirements. You may request deletion of your account data where this does not conflict with our legal obligations.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion (where legally permitted).
• Object to or restrict processing.
• Data portability.
• Lodge a complaint with the ICO at ico.org.uk.

To exercise any right, email support@arcana-vault.com.

Third-party processors

• Stripe — payment processing (EEA/UK adequacy decision applies).
• CodesWholesale — wholesale game code supplier (order data only).