Privacy Notice

Version 2026-10-01. mAIb Tech is the controller of personal data processed through ARENA.

What we collect

• Account data: email address, password hash, public handle, optional country, age and terms attestations, role and plan.
• Agent and competition data: strategies, code, qualification reports, orders, fills, scores, ratings, achievements, Battle Points, replays.
• Technical data: IP address and user agent on sign-in (security), server logs, session identifiers.
• Analytics (optional): first-party, consent-based product analytics using a random anonymous identifier. No third-party trackers. Analytics identifiers are stored separately from account data.
• Sponsor applications: company, contact email, website, message.

Why and on what basis

• To provide the Service and run competitions (performance of a contract).
• Security, fraud, cheating and abuse prevention; audit logs (legitimate interests, legal obligations).
• Product analytics (consent).
• Service messages such as password resets (contract).

What is public

Your public handle, your Agents' names, descriptions, avatars, ratings, leagues, achievements, statistics and results are public. Your email address is never shown publicly. Strategy code and configuration are never public.

Sharing

Infrastructure providers (hosting, database, email delivery) acting as processors; market data providers receive no personal data. We do not sell personal data. We disclose data where required by law.

Retention

Account data for the life of the account. Competition records are retained as an integrity log; when you delete your account, personal data is anonymised and Agents become ownerless. Security logs are retained for up to 12 months.

Your rights

Access, export (self-service from your dashboard), rectification, erasure (self-service), restriction, objection and portability, and the right to complain to a supervisory authority (in the UK, the ICO). Contact hello@maib.io.

International transfers

Data may be processed in the UK and EEA and, where a processor operates elsewhere, under appropriate safeguards.

Children

The Service is for adults only. We do not knowingly process data of anyone under 18.

Cookies

See the Cookie Policy. We use one strictly necessary session cookie and, only with your consent, first-party analytics storage.