GDPR Compliance

ARCANUM is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act. The data controller is TRAFFIXORA OÜ (registry code 17543319), Maakri tn 19/1, 10145 Tallinn, Estonia.

• Right to Access (Art. 15)

  Request a complete copy of all personal data we hold about you. We will provide it in a structured, machine-readable format within 30 days.

• Right to Rectification (Art. 16)

  If any of your data is inaccurate or incomplete, you can update it through your Account Settings or request correction via email.

• Right to Erasure (Art. 17)

  Request deletion of your account and all associated data. We will erase everything except what we are legally required to retain (e.g., transaction records for legal record-keeping).

• Right to Data Portability (Art. 20)

  Export your data in JSON format — including your profile, order history, watchlist, and favorites — instantly from Dashboard > Account > Export my data.

• Right to Object (Art. 21)

  Object to processing of your data for non-essential purposes. We will cease processing unless we have compelling legitimate grounds.

• Right to Restrict Processing (Art. 18)

  Request that we temporarily stop processing your data while we verify its accuracy or assess a legitimate interest claim.

• ▸Contract — processing necessary to deliver purchased items/services
• ▸Consent — optional marketing communications (you can unsubscribe any time)
• ▸Legal obligation — fraud-prevention and legal record-keeping
• ▸Legitimate interest — fraud prevention, platform security

Some of our service providers (for example hosting) may process data outside the European Economic Area. Where they do, the transfer is covered by an EU adequacy decision (such as the EU-US Data Privacy Framework) or by Standard Contractual Clauses.

We do not transfer data to countries without adequate protection unless covered by Standard Contractual Clauses.

Use the self-service tools in Dashboard > Account to export or delete your data instantly, or email privacy@arcanum.boutique with your request, from the email on your account or together with your Steam ID, for anything else. We verify that the request comes from the account holder before processing. Response within 30 days guaranteed.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in the EU country where you live.

See also: Privacy Policy · Cookie Policy.