Privacy
Effective October 19, 2026
Arbitheon (arbitheon.com, .net and .org) is run by Systemology, Inc., doing business as Incavata (“we”, “us”). This page explains what we collect, why, who handles it for us, and what you can do about it.
What We Collect
- Email list. Your email address, the lists you join, when you confirmed or left each one, and the wording of the form you signed up through.
- Your account. Your email address, whether your sign-in provider has verified it, the name that provider shares with us, the provider’s identifier for you, when you last signed in, and when you last used the site while signed in. We never see or store your password.
- Your picture. The link to the profile picture your sign-in provider shares with us, and any picture you upload on your account page. While you’re signed in, your browser loads the provider’s picture straight from that provider.
- Beta reading and advance copies. Your yes to being 18 or older and when you gave it, by ticking the beta reading box on your account or, if you were invited, when you first opened a window; whether that box is ticked (it also asks us to email you when a window opens or a slot comes free); the windows you join or leave, the chapters released to you, how long each paragraph was on your screen, your comments, your questionnaire answers, any review links you send us, and any rewards you earn.
- A record of what happens. When your account is made, signs in, joins, leaves or finishes a beta reading window, and anything the site’s administrators do to it, with who did it. We keep this record for 90 days. Administrators may also keep private notes about an account.
- Invitations. If we invite you to a beta reading window by email, the address we invited and when.
- Carvographer feedback. Your answers to Carvographer’s feedback form, kept without your name unless you’re signed in, and a random code your browser keeps so a second answer replaces the first.
- Time on the site. While you’re signed in, which page you have open and for how long, counted only while the page is on your screen, in focus, and you’ve moved, typed, scrolled or touched in the last two minutes; and the days you used the site signed in. For a beta reading window or chapter, we note which one; nothing else from the page’s address is kept. We keep these for 90 days.
- Totals. Daily counts made from the above, with no one named in them: how many members, how many were active, time spent on each page, words read, maps made, and the size of each list. We keep these indefinitely.
- One cookie.
arb_sessionkeeps you signed in for up to 30 days. We use no advertising or analytics cookies. - Technical data. Our host, Cloudflare, processes your IP address and browser details to deliver pages and to block abuse.
- Visits. Cloudflare Web Analytics counts visits to the site, signed in or not: which pages are viewed, the page that sent you, your country and the kind of device. It sets no cookies and doesn’t follow you from site to site.
How We Use It
To send the email you asked for, run your account, run beta reading windows and pass your feedback to the author, and keep the site secure. We do not sell or rent your personal information. Your information stays strictly with us and the technology services that we rely upon to do the work.
For readers in the EU and UK: the email list rests on your consent; accounts and beta reading windows rest on our agreement with you; security rests on our legitimate interest in keeping the site safe.
Who Handles It for Us
- Cloudflare hosts the site and stores our database and files, sends our email, and counts visits.
- Auth0 (by Okta) handles sign-in, including passwords.
- Google or Discord, if you sign in with one of them, shares your name, email address and profile picture with us. If you sign in with an email address and a password, your picture comes from Gravatar (by Automattic) if you have one there, and from Auth0 as your initials if you don’t. What they collect is governed by their own policies.
- Microsoft hosts our mailboxes: what you write to us, and a daily summary of the site that names new members.
When we add a store or map making, this page will name the payment and computing services involved.
How Long We Keep It
Until you unsubscribe or delete your account, except where this says otherwise.
- Unsubscribing stops the mail. We keep a record that you left, so we honor it.
- Deleting your account removes your account, your picture, your list memberships and consent records, your comments and copies, your time on the site, and your sign-in record at Auth0. The totals, which name no one, stay.
- Carvographer feedback stays when you delete your account, with nothing left that ties it to you.
- Do-not-mail. If an address bounces or reports our mail as spam, we keep it on a do-not-mail list.
- Bans. If we ban an account for abuse, we keep a scrambled form of its sign-in identifiers and email addresses, one that can’t be turned back into them, so the same person can’t sign up again. We keep it even after the account is deleted.
- Restore points. Our database host keeps restore points for up to 30 days, after which deleted data is gone from those too.
Your Choices
- Every list email carries an unsubscribe link.
- You can delete your account at any time from your account page.
- You can ask us for a copy of your information, or to correct or delete it, by writing to the address below. We answer within 30 days.
Depending on where you live (the EU, the UK, California and elsewhere), the law may give you further rights over your information. We extend these choices to everyone.
Children and Teens
Arbitheon is for a general audience. You don’t need to give your age to make maps; beta reading is for readers 18 or older.
- Under 13. Arbitheon isn’t meant for children under 13, and they shouldn’t make an account. If we learn an account belongs to a child under 13, we close it and delete everything in it, maps included.
- 13 to 17. You can make an account and maps, and buy a paid level with a parent or guardian’s okay. We collect nothing more from you than from anyone else, and as with everyone, nothing is sold. Where you live may require a parent’s permission before you join an email list, in parts of Europe until you’re 16. If so, ask first.
- Beta reading under 18. If we learn a beta reader is under 18, we take them off the roster and delete what they read, said and answered.
- Parents. If you think your child has an account, write to support@arbitheon.com with its email address. We’ll show you what we hold, correct it or delete it, and we won’t ask you for anything more than that.
Where It Is Kept
In the United States, with Cloudflare, Auth0 and Microsoft, and on Cloudflare’s worldwide network, which delivers the site’s pages.
Changes
When this page changes, the date at the top changes with it. If a change matters to how we use your information, we will email account holders before it takes effect.