ArbiterGG

ArbiterGG ("we," "us," or "our") operates arbitergg.com. This Privacy Policy describes what information we collect, how we use it, and your rights with respect to it. By using ArbiterGG, you agree to the practices described here.

1. Information We Collect

We collect information you provide directly when you create an account or use the service:

• Email address (required for account creation and communication)
• Password (stored as a hashed value — never in plaintext)
• Billing information processed through Stripe (we do not store full card numbers; Stripe handles all payment data)
• Watchlist cards, lot builder data, and search history you create within the app

We also collect certain usage and technical data automatically:

• Browser type, operating system, and device type
• IP address and general geographic region
• Pages visited and features used within the app
• Error logs and crash reports for debugging purposes

2. How We Use Your Information

We use the information we collect to:

• Operate and maintain the ArbiterGG service
• Process payments and manage your subscription tier
• Send transactional emails (email verification, password reset, billing receipts)
• Respond to support requests or bug reports you submit
• Improve search accuracy, price data coverage, and product features
• Detect and prevent abuse, fraud, or unauthorized access

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Data Sharing

We share limited data only with the following service providers, and only to the extent necessary to operate ArbiterGG:

• Stripe — payment processing. Subject to Stripe's own Privacy Policy.
• Resend — transactional email delivery. Email content is limited to operational messages.
• Hosting provider — server infrastructure for running the application. Data is stored on servers located in the United States.

We may disclose information if required by law, court order, or to protect the safety or rights of ArbiterGG or its users.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for fraud prevention purposes. Anonymized, aggregated data (e.g., search trends) may be retained indefinitely.

5. Cookies and Sessions

ArbiterGG uses session cookies to maintain your login state. These cookies are:

• HttpOnly — not accessible to JavaScript
• SameSite=Lax — protects against cross-site request forgery
• Secure — transmitted over HTTPS only in production

We do not use tracking cookies, third-party analytics cookies, or advertising cookies.

6. Security

We implement reasonable technical and organizational measures to protect your data, including password hashing, HTTPS-only transmission in production, rate limiting on authentication endpoints, and admin access controls. No system is perfectly secure; in the event of a data breach affecting your personal information, we will notify you by email within a reasonable timeframe.

7. Your Rights

You may request at any time:

• A copy of the personal data we hold about you
• Correction of inaccurate data
• Deletion of your account and associated personal data
• Export of your watchlist or lot builder data

To exercise these rights, contact us at the address below. We will respond within 30 days.

8. Children's Privacy

ArbiterGG is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email. Continued use of the service after changes are posted constitutes acceptance of the revised policy.