The Ledger
Privacy Policy
Arcanum · Legal · Last updated 2026-06-01
❖
1.
data controller
New Company 1 Ltd ("ARCANUM") is the data controller. Contact: privacy@arcanum.boutique.
2.
what we collect
| data | source | purpose |
|---|---|---|
| Steam ID, display name | Steam OpenID | Account creation & auth |
| Email address | Onboarding form | Receipts, alerts, support |
| Trade URL | Onboarding form | Skin delivery via Steam |
| Discord handle | Optional input | Support escalation |
| IP address, user agent | Automatic | Security & fraud prevention |
| Payment card (tokenized) | Payment provider | Wallet top-ups |
| Order history | Platform activity | Service delivery & disputes |
3.
how we use your data
- ▸Process purchases and deliver items
- ▸Send transactional emails (receipts, trade updates)
- ▸Prevent fraud and meet our legal record-keeping obligations
- ▸Improve the platform (anonymous analytics only)
4.
data sharing
- ▸Skin supply partner — to execute skin trades (Steam ID + trade URL)
- ▸Payment provider — to process card payments (tokenized card data)
- ▸Law enforcement — when required by law
We never sell, rent, or share your data for advertising purposes.
5.
data retention
- ▸Account & profile data — retained while your account is active; deleted within 30 days of a confirmed deletion request.
- ▸Order & transaction records — retained for 6 years after the transaction date, to meet legal record-keeping and fraud/AML obligations.
- ▸KYC / identity-verification documents — retained for 5 years after your last withdrawal, then securely deleted.
- ▸Support communications — retained for 2 years, then deleted.
- ▸Security logs (IP, user agent) — retained for 12 months, then deleted.
You can request deletion at any time — we will erase all non-legally-required data within 30 days. Your data is stored on servers hosted in the EU (Frankfurt region); see our GDPR page for details on international transfers.
6.
your rights
- ▸Access — request a copy of your data
- ▸Rectification — correct inaccurate information
- ▸Erasure — delete your account and data
- ▸Portability — export your data in machine-readable format
- ▸Objection — opt out of non-essential processing
Email privacy@arcanum.boutique to exercise any right, or use the self-service data export and account deletion tools in Dashboard > Account. We respond within 30 days.
7.
cookies
See our Cookie Policy for details on what cookies we use and how to manage them.
8.
changes
We will notify you of material changes via email 14 days before they take effect.