Privacy

This page explains what Arcanum collects, why, who else it reaches, and how to get rid of it. It covers the game as played in Telegram and in a browser, the bot, and the public site.

Questions about anything here go to arcanum@lua.cx or to the support chat linked from the bot.

Who you are to us

Arcanum has no registration form, no password and no email field. Your identity comes from Telegram.

When you first open the game, Telegram passes us the account data it shares with any mini app: your numeric Telegram id, your display name, your username if you have one, your language setting, and your avatar. We store those to create your account and to show you to other players. The numeric id is what actually identifies you; everything else is presentation and can be hidden in the privacy settings.

We never see your phone number, your Telegram contacts, your chats with anybody else, or your password.

The browser access token

Playing outside Telegram needs a credential that Telegram is not there to supply, so your account carries a personal access token that you generate yourself under Settings, then Account Access.

That token grants full access to the account with no further check. Treat it exactly like a password: do not paste it anywhere you would not paste a password, and regenerate it from the same screen if you think it has leaked. Regenerating invalidates the old one immediately.

What we store about your play

Everything the game needs to be a game, and nothing collected for its own sake: your cards and their history, balances and the transaction ledger behind them, decks, battle results and rating, marketplace listings, buy orders, trades and price history, guild membership and contributions, missions, achievements, event progress, and your settings.

Your conversations with characters are kept so that a character can pick up where you left off. Clearing a conversation removes it.

Security telemetry

Because accounts can be farmed, sold and stolen, sign-ins are logged for fraud detection.

What is kept is deliberately reduced first: the IP address is truncated to a network prefix and then hashed, the user agent is hashed, and the TLS fingerprint of the connection is recorded. The raw IP address and the raw user agent are not written to that record. Those hashes are compared across accounts over a rolling window of about thirty days to spot clusters of accounts run by one person.

The result is a risk score, not a verdict. Nothing is linked, restricted or banned automatically; a human reviews every action, and every action is reversible and audited.

Payments

Purchases run through two providers, and neither hands us your payment details.

Telegram Stars. The purchase happens inside Telegram. We receive a confirmation that a charge succeeded, its identifier and the amount. We never see a card.

Robokassa (for payments in roubles). You are taken to Robokassa's own hosted payment page and pay there. We receive a signed callback with an invoice identifier and an amount, and Robokassa issues the fiscal receipt required by Russian law. The receipt carries the name of what was bought and its price. We never see a card here either.

We keep a record of every purchase — what was bought, when, for how much, through which provider — because that is a financial record and because it is how a duplicate charge is detected and refused. We also remember which method you last paid with, so the payment sheet opens on it.

AI, chats and generated images

Character replies and character art are produced by third-party AI services. They receive only what the reply needs — the conversation with that character and the character's own description — never your Telegram id, your name or your balances. The character knows the display name you chose to show and nothing more about your account.

We keep usage records for each request for cost accounting and to investigate abuse. Support may read a conversation when you ask for help with it.

If you would rather a conversation did not exist, clear it.

What other players can see

Your profile, collection, showcase, achievements and leaderboard position are public by default, because the game is partly about showing them. The privacy settings turn each of those off individually — you can hide your username, your profile, your collection, or keep yourself off the leaderboards.

A few things stay visible in reduced form regardless: a marketplace sale writes a price history entry, and pack-opening history appears in public feeds. Where a player has chosen to be hidden, those entries are anonymised rather than dropped.

Guild leaders and officers see the real name behind a hidden username inside their own guild's roster, along with when a member was last active. That exception exists so a guild can be run, and it does not extend to opening that member's profile.

Deleting your account

Ask in the support chat linked from the bot, from the account you want removed. The account and its data are deleted, with no waiting period and no reactivation window.

Some traces survive by necessity and are not linked to you afterwards: entries in other players' transaction histories, sale prices in a card's public price history, and the cards themselves, which stay with whoever holds them now.