Privacy Policy

Last updated: 2 October 2026

This policy explains what personal data Arena Live processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Ali Ghahery
IRAN,Tehran
Email: ArenaLiveinfo@gmail.com

2. What we collect

Account data: username, a salted password hash (never the password itself), optional display name, your invite code and who invited you.
Google sign-in (optional): your Google account ID and email address.
Activity: chat messages you post, matches you follow, and a short-lived “currently watching” timestamp used for the live viewer count.
Security logs: your IP address is used as a rate-limit key against brute-force and spam, and is deleted within 24 hours.
Analytics: we use Cloudflare Web Analytics, which does not use cookies, does not fingerprint you and does not store personal data.

3. Why (legal basis)

Providing your account, chat and follows: performance of a contract (Art. 6(1)(b) GDPR).
Security, abuse prevention and moderation: legitimate interest (Art. 6(1)(f) GDPR).
Aggregated, anonymous analytics: legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies

We only set strictly necessary cookies: a signed session cookie (live_session, 30 days) that keeps you logged in, and a short-lived cookie during Google sign-in. These are exempt from consent under the ePrivacy Directive. We do not use advertising or tracking cookies.

5. Processors

Cloudflare, Inc.: hosting, CDN and cookieless analytics.
Supabase, Inc.: database hosting.
Google LLC: only if you choose “Sign in with Google”.

Some of these providers may process data outside the EU/EEA. Transfers are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

6. How long we keep it

Account data is kept until you delete your account. Chat messages, follows and presence are deleted together with your account. Rate-limit records are deleted within 24 hours.

7. Your rights

You have the right to access, rectify, delete, restrict or port your data and to object to processing. You can delete your account and all associated data yourself at any time on your Profile page. For anything else, email ArenaLiveinfo@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

8. Children

Arena Live is not intended for children under 16. We do not knowingly collect data from them.

2. What we collect

Account data: username, a salted password hash (never the password itself), optional display name, your invite code and who invited you.

Google sign-in (optional): your Google account ID and email address.

Activity: chat messages you post, matches you follow, and a short-lived “currently watching” timestamp used for the live viewer count.

Security logs: your IP address is used as a rate-limit key against brute-force and spam, and is deleted within 24 hours.

Analytics: we use Cloudflare Web Analytics, which does not use cookies, does not fingerprint you and does not store personal data.

5. Processors

Cloudflare, Inc.: hosting, CDN and cookieless analytics.

Supabase, Inc.: database hosting.

Google LLC: only if you choose “Sign in with Google”.

Some of these providers may process data outside the EU/EEA. Transfers are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

7. Your rights