Privacy Policy

Last updated: March 26, 2026

1. Introduction

This Privacy Policy explains how Arcanum collects, uses, stores, and protects your personal data when you use our service.

We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

2. What We Collect

We collect the following categories of data:

  • Account information — email address, display name, gender, and date of birth, provided when you create an account.
  • Quiz data — your answers to quiz questions and the results generated from them.
  • Payment information — processed securely via Stripe. We do not store your full card details. Stripe handles all payment data in accordance with PCI DSS standards.
  • Technical data — IP address, browser type, device type, and operating system, collected automatically when you visit our site.
  • Usage data — information about how you interact with the service, such as pages visited and features used.

3. How We Use Your Data

We use your data for the following purposes:

  • To generate personalized quiz results and analyses based on your answers.
  • To process payments for paid features and subscriptions.
  • To send transactional emails, such as purchase confirmations and account notifications.
  • To improve and maintain the quality of our service.

We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

We use the following third-party services to operate Arcanum:

  • Supabase — database and authentication. Data is stored within the EU/EEA.
  • Stripe — payment processing. Stripe is PCI DSS compliant and handles all sensitive payment data.
  • Anthropic / Claude — AI model used to generate quiz results and analyses. Your data is not stored by Anthropic for model training purposes.
  • Resend — transactional email delivery.
  • Vercel — application hosting and deployment.

5. Data Retention

  • Account data — retained for as long as your account is active. You may request deletion at any time.
  • Quiz results — retained for as long as your account is active.
  • Payment records — retained for 5 years in accordance with Norwegian tax law (bokforingsloven).

6. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data.
  • Right to data portability — request your data in a structured, machine-readable format.
  • Right to object — object to certain processing of your personal data.
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@arcanum.no.

7. Cookies

Arcanum uses essential cookies only. These are necessary for the service to function properly, such as maintaining your login session. We do not use advertising cookies or third-party tracking cookies.

8. Children

Arcanum is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email or through a notice on our website. Continued use of Arcanum after changes are posted constitutes your acceptance of the updated policy.

10. Contact

The data controller for Arcanum is Arcanum. If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@arcanum.no.

You also have the right to file a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your data protection rights have been violated.