Privacy Policy

Arena ("we", "us", or "our") operates the website arenafi.org and related services. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

Information you provide:

• Email address when you create an account
• Wallet addresses when you connect via Web3 login (Privy)
• Profile information you choose to add (display name, avatar)
• Content you post (comments, group posts)
• Exchange API keys you connect for portfolio sync or trader claiming (read-only; encrypted with AES-256-GCM at rest and never written to logs)

Information collected automatically:

• Usage analytics (page views, feature interactions) via Vercel Analytics
• Device and browser information (user agent, screen resolution)
• IP address (used for security and anti-abuse, not stored long-term)

• To provide and improve the trader ranking service
• To display leaderboard rankings and performance analytics
• To authenticate your identity and manage your account
• To process Pro subscription payments
• To send important service updates (opt-in for marketing)
• To detect and prevent abuse, fraud, and security threats

We use the following third-party services to operate Arena:

• Supabase — Database and authentication
• Vercel — Hosting and analytics
• Stripe — Payment processing for Pro subscriptions
• Privy — Web3 wallet authentication
• Upstash — Redis caching layer
• Sentry — Error monitoring and diagnostics (may receive request context; IP/PII scrubbed before send)

Each of these providers has their own privacy policy and data handling practices. We only share the minimum data necessary for each service to function.

Arena aggregates publicly available performance data for tens of thousands of traders from exchange leaderboards and public on-chain activity, including display names, avatars and trading metrics. These traders are not necessarily Arena users. We process this public data under a legitimate-interest basis to operate the ranking service.

If you are a listed trader, you can claim your profile to control how it is displayed, or contact us at [email protected] to request removal (delisting).

Arena uses essential cookies only for authentication and session management. We use Vercel Analytics for usage tracking, which does not use third-party cookies. We do not serve targeted advertising or use tracking cookies.

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update or correct inaccurate information
• Deletion — Request deletion of your account and data
• Export — Download your data in a portable format
• Opt-out — Unsubscribe from non-essential communications

Arena is committed to complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). If you are a resident of the European Economic Area or California, you have additional rights as outlined in those regulations. We will respond to any data subject request within 30 days.

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, Row Level Security (RLS) policies, and regular access audits. We retain personal data only as long as necessary to provide our services or as required by law. You may request deletion at any time.

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a prominent notice on our website. Continued use of Arena after changes constitutes acceptance of the updated policy.

For questions or concerns about this Privacy Policy, please send a message to [email protected]