At DNArcade, we take your privacy seriously, especially when it comes to genetic data. This Privacy Policy explains how we collect, use, and protect your personal information when you use our DNA-to-RPG character generation service.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Profile picture (optional)
- Authentication credentials (managed securely by Clerk)
1.2 DNA Data Processing
When you upload your DNA data file:
- What we receive: Raw data files from 23andMe, AncestryDNA, MyHeritage, or FamilyTreeDNA
- What we process: Specific SNP markers related to traits we analyze (approximately 600,000+ genetic markers)
- What we store: Only the derived character statistics (7 stat values, character class, and trait badges)
- What we delete: Your raw DNA file is permanently deleted immediately after processing
1.3 Usage Data
We automatically collect:
- Device information (browser type, operating system)
- IP address (anonymized)
- Pages visited and features used
- Time and date of visits
1.4 Payment Information
If you subscribe to a paid plan, payment processing is handled entirely by PayPal. We never see or store your full credit card number, bank account details, or PayPal password.
2. How We Use Your Information
We use the information we collect to:
- Generate your unique RPG character profile from DNA analysis
- Provide and maintain our services
- Process your transactions and subscriptions
- Send service-related communications
- Improve our analysis algorithms and user experience
- Respond to your requests and support inquiries
- Comply with legal obligations
- Sell your genetic information to any third party
- Share your DNA data with insurance companies or employers
- Use your genetic data for medical diagnosis or research without explicit consent
- Store your raw DNA file beyond the immediate processing window
3. DNA Data Handling
3.1 Processing Flow
Here's exactly what happens when you upload your DNA:
- Upload: Your file is transmitted over 256-bit TLS encryption
- Validation: We verify the file format and check for completeness
- Analysis: Our algorithm extracts relevant SNP markers and calculates your stats
- Generation: Your character profile is created with stats, class, and traits
- Deletion: Your raw DNA file is permanently purged from memory
- Storage: Only your derived character data is saved to your account
3.2 Scientific Basis
Our analysis is based on peer-reviewed genetic research. We examine well-studied SNPs associated with physical traits, cognitive abilities, and other characteristics. However, DNArcade is for entertainment purposes only and should not be considered medical or diagnostic information.
3.3 Data Retention
- Raw DNA files: Deleted immediately after processing (never stored)
- Character profiles: Retained until you delete them or your account
- Account data: Retained until account deletion
- Payment records: Retained as required by law (typically 7 years)
4. Data Sharing & Third Parties
4.1 Service Providers
We work with trusted service providers who assist in operating our platform:
- Clerk: Authentication and user management
- PayPal: Payment processing
- Vercel: Website hosting and deployment
- Neon: Database infrastructure (stores only derived stats, never raw DNA)
4.2 Legal Requirements
We may disclose information if required by law, such as:
- In response to valid legal process (subpoenas, court orders)
- To protect our rights, privacy, safety, or property
- To enforce our Terms of Service
5. Your Rights
5.1 All Users
You have the right to:
- Access your personal data and character profiles
- Download your character data
- Delete your account and all associated data
- Opt out of marketing communications
- Update your account information
5.2 EU/EEA Residents (GDPR)
Under GDPR, you additionally have the right to:
- Data portability (receive your data in a structured format)
- Rectification (correct inaccurate data)
- Restriction of processing
- Object to processing
- Lodge a complaint with a supervisory authority
See our GDPR page for more details.
5.3 California Residents (CCPA)
Under CCPA, California residents have the right to:
- Know what personal information is collected
- Know if personal information is sold or disclosed
- Say no to the sale of personal information (we don't sell data)
- Access your personal information
- Equal service and price (non-discrimination)
6. Security Measures
We implement industry-standard security measures:
- Encryption in transit: All data transmitted using TLS 1.3
- Encryption at rest: All stored data is encrypted with AES-256
- Access controls: Strict employee access policies
- Infrastructure: SOC 2 compliant hosting providers
- Monitoring: 24/7 security monitoring and logging
- Testing: Regular security audits and penetration testing
7. Children's Privacy
DNArcade is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately at privacy@dnarcade.com.
8. International Data Transfers
Your data may be processed in the United States where our servers are located. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our website. Your continued use of DNArcade after changes constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related questions or to exercise your rights, contact us:
- Email: privacy@dnarcade.com
- Mail: DNArcade Privacy Team, [Address]
For EU residents, you may also contact our Data Protection Officer at dpo@dnarcade.com.