What FLORKE ID and Arena process
- Your email address, verification records, session identifiers, and essential authentication records when you request or use an email sign-in code or private link.
- Your permanent public FLK number and handle, approved avatar choice, optional bio, connected game records, and badges derived from recorded activity.
- Arena rating, results, room events, match history, and provisional competition points tied to the same FLORKE ID.
- Limited technical and security signals needed to protect sessions, throttle abuse, diagnose failures, and investigate fair-play concerns.
- A versioned Season Zero eligibility attestation recording that the signed-in account confirmed 18+ age, lawful participation where resident, and one-person/one-account use, with its acceptance time.
- Private incident and appeal cases: a pseudonymous account owner key, case type, category, status, review owner, subject, details, optional room code, X-Request-Id, event time, evidence note, and case timestamps.
Do not put sensitive information in your username or bio. Public profiles and standings may expose those fields, earned badges, connected games, match history, rating, record, and provisional points. Email addresses, opaque authentication account IDs, session data, and raw security signals, eligibility attestations, and private case records are not public profile fields.
Why it is used
The data supports sign-in and account recovery, one persistent identity across connected games, server-validated games, reconnection, profiles and standings, versioned eligibility, private support, service security, troubleshooting, and human review of potentially unfair play. The private authentication account is linked by an opaque provider ID, never by matching public names or email addresses. It is not used to require a token purchase or wallet connection, and the service does not sell personal information or use it for third-party advertising.
Cloudflare/OpenAI Sites provides the application and database runtime. Resend delivers requested sign-in email. Those providers may process the limited data needed to perform those services under their own terms.
Storage, retention, and controls
The service uses an essential session cookie and browser storage for saved room, queue, and reconnect state. No advertising cookie is intentionally installed. FLORKE ID public pages are marked not to be indexed during this beta, but anyone with a valid public profile link can open that page. Account, profile, badge, match, and security records are retained while needed to operate and protect the beta and preserve competition integrity. Eligibility and case ownership use a one-way, domain-separated account key; the intake table does not store an email, provider account ID, session token, or Arena credential.
Season Zero eligibility attestations and private cases are retained through 17 December 2026, ninety days after the payout deadline, then deleted or irreversibly de-identified unless a still-open appeal, security incident, or legal obligation requires a limited record for longer. Any exception is reviewed every ninety days. Authentication accounts and public FLORKE ID, badge and competition records remain while the account and public beta are active; expired sign-in verifications, sessions and throttling records follow their configured expiry and cleanup periods.
For private access, correction, export, deletion, or objection requests, sign in and use the private intake, choose Incident report and the Privacy requestcategory. A request may be limited where retaining a minimum record is necessary for competition integrity, security, an unresolved dispute, or law; the case outcome will state that reason. Do not submit information beyond what the request requires.