Privacy Policy

Company Information

ARK Status Monitor is operated by Paulwise Ltd (Company No. 14159573) registered in England and Wales.

Registered Office: Suite K, Priest House, 1624 High Street, Knowle, Solihull, West Midlands, United Kingdom, B93 0JU

Data Collection

We automatically collect:

• Server status metrics (uptime, player counts, ping)
• Aggregate performance data and anonymised telemetry
• Anonymous usage statistics via server logs

For registered users, we also store:

• Your Discord profile information
• Your favourite server selections
• Webhook configuration and delivery status
• User preferences and settings

For Premium purchases, we also store:

• PayPal payer identity, subscription and transaction identifiers, payment amounts and status, receipts, invoices, and verified provider event records needed to reconcile billing
• A billing name and postal address only when you choose to save them to create invoices

We process Premium billing data as necessary to perform the Premium membership contract and to meet applicable accounting and legal obligations. Saving a billing address is optional; if you do not save one, you can still access payment receipts.

For Discord guild administrators who provision the ARK Status Bot, we additionally collect:

• Guild ID, guild name, and the configured notification channel ID
• Managed server definitions (server name, IP/port, status metadata)
• Authorisation records (who invited the Bot, approval timestamps, capacity counters)
• Operational telemetry such as rate-limit counters and delivery success/failure metadata

For the player marketplace, when a signed-in member views or copies a seller’s contact route on a listing, we record:

• The Discord user IDs of the viewer and the seller, the listing ID, the interaction type (view or copy), and a timestamp

These records are used only to gauge interest in listings and to detect contact scraping or abuse. We do not store the contact details themselves, any message content, or IP addresses with these records, and they are never created for logged-out visitors (seller contact is hidden until you sign in).

After you accept optional product measurement, we collect only allowlisted interaction categories, site-surface categories, event counts, and daily anonymous unique estimates. The raw random tab token is retained only in that tab’s sessionStorage and is never retained server-side. The server transforms it in memory into a keyed value that changes each UTC day before updating an aggregate counter. A separate random delivery identifier is also transformed in memory into a short-lived keyed marker so a retried request is counted only once. For abuse prevention, the trusted request address is transformed in memory into a separate keyed rate-limit value that changes each minute. We do not store the raw token, raw delivery identifier, IP address, page URL, referrer, server name, server ID, or search and filter text in product measurement.

Data Retention

We retain data for the following periods:

• Real-time status snapshots: 10 days
• Historical analysis datasets: 10 days
• Server and application logs (including bot telemetry): 30 days
• User account data other than required financial records: Until account deletion or withdrawal of consent
• Saved billing profile: Until you delete it or your account, unless it has been preserved in an issued invoice record
• Premium billing and financial records, including subscription and entitlement state, payments, receipts, invoices, and associated provider events: Retained only for as long as needed to provide or reconcile active Premium service or as required by applicable accounting, legal, fraud-prevention, and dispute obligations, including after account deletion where required
• Discord webhook delivery logs: 7 days
• Marketplace contact-interaction telemetry: 90 days
• Product measurement rate-limit keys: no more than 120 seconds
• Product measurement retry-deduplication keys: no more than 10 minutes
• Product measurement temporary daily aggregate buckets in Redis: 8 days. Derived daily records contain aggregate counts and anonymous unique estimates only
• Guild configuration for the Bot: retained while the guild is authorised and removed within 24 hours after the Bot leaves or upon validated deletion request

Discord Integration

When you authorise our Discord integration, we collect:

• Your Discord user ID
• Username and discriminator
• Avatar image (if available)
• Email address (used only for system notifications)

For Bot operators we also retain guild configuration as described above. We do not persist message content beyond the Bot's own posts, and we only inspect channel metadata to confirm permissions.

We process this data to provide account functionality, managed guild provisioning, sticky status messages, and rate-limited notifications. Our use remains subject to the Discord Developer Terms of Service and the Discord Terms of Service.

Bot Security & Secrets

Bot tokens, API keys, and other credentials are stored outside of source control, encrypted at rest, and only decrypted in-memory when the service starts. Access to these secrets is restricted to least-privilege service accounts. Guild-level configuration is transmitted over TLS and stored in databases with role-based access controls.

Data Deletion & Access Requests

Guild owners can remove the Bot at any time via Discord. Once the Bot leaves, we automatically queue deletion of associated configuration. You may also request manual deletion or export of your data by emailing [email protected] or by using the contact form on arkstatus.com.

We will verify ownership before fulfilling a request and will confirm once deletion is complete. You can delete a saved billing profile without changing invoices already issued from it. Premium billing and financial records, including subscription and entitlement state needed to provide or reconcile active Premium service, payments, receipts, invoices, and associated provider events, may be excluded from deletion where retention is required for service delivery, accounting, legal, fraud-prevention, or dispute obligations. Diagnostic logs may persist for up to 30 days after removal to investigate rate-limit abuse or security incidents.

Cloudflare Services

We use Cloudflare for:

• DDoS protection and security services
• Content delivery network (CDN) services
• Basic analytics for service optimisation

Cloudflare processes visitor IP addresses and basic request data. For more information, see Cloudflare's Privacy Policy.

Server Outage Reports

Official server pages include a "Report issue" link that redirects to a third-party outage report form hosted by Google. The link prefills the form with the server's region, game mode, map, and number, and with your current IP address, which the form requests to diagnose connectivity issues. If you are logged in, your Discord username is also prefilled so the form operators can contact you about your report. Every prefilled field is visible and editable before you submit the form. Google processes the form and its responses under the Google Privacy Policy.

Cookies

We use essential cookies for:

• Session management
• Security features
• User preferences

The ark_consent preference records whether you accepted or rejected optional product measurement. Product events are accepted only when this preference contains the accepted value. The choice expires after one fixed year and is not extended on ordinary visits. While optional product measurement is enabled, you can change the choice at any time through the control in the site footer.

Third-party services (such as Google AdSense) may also set cookies for advertising and analytics purposes.

Advertising & Journey by Mediavine

This website uses Journey by Mediavine to manage advertising on the site. Journey, Mediavine, and their advertising partners may use cookies, local storage, web beacons, and similar technologies to serve ads, limit repeat impressions, measure ad performance, and support personalization where permitted.

These technologies may collect information such as IP address, browser type, approximate location, device identifiers, pages viewed, and interactions with ads or content. This data is used to operate advertising, reporting, fraud prevention, and compliance systems.

You can learn more about Mediavine's data practices by visiting Mediavine's Privacy Policy. Depending on your region, you may also be offered controls to manage consent or opt out of personalized advertising through your browser settings and industry opt-out tools.

Your Rights

Under UK and EU data protection law, you have rights including:

• Right to access your personal data
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing

Contact Information

For any privacy-related queries or to exercise your rights, contact our Data Protection Officer:

• Email: [email protected]
• Address: Suite K, Priest House, 1624 High Street, Knowle, Solihull, West Midlands, United Kingdom, B93 0JU

Data Security

We protect your data through:

• HTTPS encryption for all transmissions
• Regular security audits
• Access controls to sensitive data
• Anonymisation of aggregated statistics

Supervisory Authority

You have the right to make a complaint to the Information Commissioner's Office (ICO): https://ico.org.uk