Privacy Notice

This Privacy Notice explains how Arcology Project / Concordia handles information for accounts and interactive play on arco.host / s0ld.com and related public pages on arcologyproject.com.

What we collect

• Account identifiers — email address (primary login), public @handle, optional display name, password hash (we do not store plaintext passwords).
• Social sign-in — when you choose Google, Discord, or similar: provider user id, email, and basic profile fields the provider shares for authentication and account linking.
• Security factors — authenticator (TOTP) secrets when you enable 2FA; passkey / WebAuthn credential public keys when you register a passkey; optional phone number if you later enable SMS verification (not active until a telephony provider is configured).
• Gameplay — progression, inventory, apartment and design data for features you use.
• Presence & communications — online presence, room messages, in-game mail.
• AI interactions — submitted text, relevant context, selected character, reply state.
• Technical — hashed visitor IP for abuse prevention, browser/device info, request times, session cookies, error logs.
• Site analytics — on arcologyproject.com we use Google Analytics 4 (measurement via Google’s gtag) to understand aggregate traffic and page use. Google may set cookies or similar identifiers as described in Google’s privacy documentation.
• Support & safety — reports, correspondence, moderation decisions.

Why we use it

• Create and secure your account; reset passwords; verify email when mail delivery is available.
• Operate multiplayer presence, inventory, and world features you choose to use.
• Send transactional mail (verification, password reset). Optional event-reminder email only if you opt in on Account.
• Protect the community (rate limits, bans, abuse signals) and respond to support requests.

Retention

Account data is kept while the account is active. Soft-deactivated accounts are retained for a purge window (see account-deletion pages) then removed from active systems. Session cookies expire on a rolling window. Password-reset and email-verify tokens expire within hours and are deleted when used or expired. Security logs are kept only as long as needed for safety and operations.

Sharing

We use infrastructure and mail providers (for example Resend for transactional email, and social identity providers you choose) as processors. Brand-site analytics use Google Analytics 4 as a processor for aggregate usage measurement. We do not sell personal information. Lawful requests from authorities may require disclosure where required.

Your choices

Update profile fields on Account; opt in/out of event reminder email; enable or disable 2FA when offered; request account soft-deactivation. Contact info@arcologyproject.com for access or deletion questions that the self-serve tools do not cover.

Age

Interactive features and accounts are intended for people at least 18.

Contact: info@arcologyproject.com. Remaining operator placeholders: [[OPERATOR_LEGAL_NAME]], [[BUSINESS_POSTAL_ADDRESS]]. Last editorial refresh: 2026-09-09 (auth1).

Review draft — not final legal advice; qualified review still required.