909ARENA ("we", "us", "the platform") takes your privacy seriously. This policy explains what data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).
Email address, username, hashed password, and — during the closed beta phase — the beta access key used to activate your account. The key is linked to your user account to verify entitlement and prevent reuse. Legal basis: Art. 6(1)(b) GDPR — contract performance.
Optional bio, avatar URL, and display preferences you choose to provide. Legal basis: Art. 6(1)(a) GDPR — consent.
Audio tracks you upload during battles, votes you cast, lobby participation, and match results. Legal basis: Art. 6(1)(b) GDPR — contract performance.
During battles using 909Studio, we additionally store a project fingerprint file (a JSON of your sequencer patterns and effects settings) linked to your user ID and round ID, stored in Supabase (Frankfurt, EU), accessible only to platform administrators, and used exclusively for anti-cheat verification. Legal basis: Art. 6(1)(b) GDPR — contract performance.
Online status (last_seen timestamp) so friends can see when you're online. Error logs (stack traces, error messages, current page) for debugging. No page-view tracking, no behavioural analytics, no third-party tracking cookies. Legal basis: Art. 6(1)(b) GDPR — contract performance (online status) and Art. 6(1)(f) GDPR — legitimate interest (error logging for platform stability).
Purchases are processed by Lemon Squeezy. We do not store credit card numbers or banking details. We receive only your transaction ID and purchase status. Legal basis: Art. 6(1)(b) GDPR — contract performance.
When you submit a content report, bug report, or feedback, we collect your user ID, email address, the reason and details you provide, the URL of the reported content, and — for bug reports only — basic browser information (user agent). If your report concerns another user, we record that user's ID for moderation purposes; reported users are never informed of your identity. We process this data on the basis of our legitimate interest in maintaining a safe and functional platform (Art. 6(1)(f) GDPR). Report data is used exclusively for moderation and support handling and is never used for marketing. All report records are automatically deleted after 12 months.
We use only essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies. No cookie consent banner is required for essential-only cookies under GDPR.
909Studio stores project state locally in your browser (IndexedDB / localStorage) for autosave and crash recovery. Free Mode projects are stored exclusively on your device — we have no access to them, and this data never leaves your device unless you submit a track in a battle. No consent is required, as this storage is strictly necessary for the service you request (§ 25(2) TTDSG).
Under the GDPR, you have the right to:
To exercise any of these rights, contact us at kontakt@909arena.com. We will respond within 30 days.
Account data is retained as long as your account is active. Battle tracks and votes are retained indefinitely for leaderboard integrity. If you delete your account, personal data is removed within 30 days. Beta access keys are retained for platform integrity; upon account deletion, your user ID is removed from the beta key record and the key remains in anonymised form. Content reports, bug reports, and feedback submissions are automatically deleted 12 months after they are filed. 909Studio project fingerprints (anti-cheat data) are deleted 90 days after the round ends, or — in case of an open dispute — 30 days after the dispute is resolved. Upon account deletion, project fingerprints are deleted within 30 days.
909ARENA is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.
We may update this privacy policy from time to time. Material changes will be communicated via the platform. Continued use of 909ARENA after changes constitutes acceptance.