Privacy Policy
What personal data Code Magician LLC collects when you use Arcane, and what we do with it.
Effective · Last updated
This policy covers Arcane: the arcane-cli command-line tool, the website at arcaneai.net, the Spelloscope mobile app, Dark Matter Complex, and the hosted Arcane services behind them. “We” and “us” means Code Magician LLC, a Nevada limited liability company, which is responsible for your data. Contact: privacy@codemagician.net.
The short version
- You can use
arcane-cliwithout an account. An account is optional and unlocks paid capabilities. - We never see or store your password. Sign-in is handled by Microsoft.
- We collect the minimum needed to run your account: your email, your name, and what your account is allowed to do.
- We do not sell personal data and we do not run advertising.
- You can ask us to delete your account and your data at any time.
What we collect, and why
| What | Why | Who holds it |
|---|---|---|
| Sign-in credentials: password, one-time codes, and passkeys when offered | Authenticating you | Microsoft Entra External ID. We never receive them. |
| Sign-in activity: time, IP address, approximate location, device and browser | Keeping accounts secure | Microsoft Entra External ID |
| Account record: email address, display name, a unique account identifier, the organization you belong to and your role | Recognizing you, deciding what you can see and do, and delivering invitations | Code Magician, on Microsoft Azure in the United States |
| Entitlements: which Arcane products and paid features your account may use, and a digitally signed token that proves it | Letting paid features work, including offline for a limited grace period | Code Magician, on Azure in the United States. The Arcane apps keep your sign-in token in your device’s secure storage. |
| Project view: a summary of a project prepared for you (status, progress, and the items the project owner chose to show you) | Showing you your project in Spelloscope | Code Magician, on Azure in the United States |
| Messages and approvals between you and the project owner, and the record of each decision | Two-way communication and approving changes | Code Magician, on Azure in the United States |
| Billing details: payment method, billing name and address, invoices, tax data | Selling, taxes, invoicing, refunds | Our payment provider, the company that sells to you and handles payment and tax (a “merchant of record”). We will name it here before paid plans launch. Card numbers never reach Arcane systems. |
| App diagnostics from the Arcane apps: crash reports and performance data (device model, operating system and app version, and what the app was doing when a problem occurred), and which screens and features are used. Never used for advertising and never combined with your activity in other companies’ apps. | Fixing problems and improving the apps | Our crash-reporting and analytics providers, which we will name here before the apps are released |
| Website usage data from arcaneai.net: pages viewed, the page you came from, approximate location from your IP address, and device and browser details. No cookies and no identifier stored on your device. | Understanding which pages are useful | Microsoft Azure Application Insights, set up in our Azure account |
| Waitlist sign-ups on arcaneai.net: your email, the plan you are interested in, and any note you add | Telling you when Dark Matter Complex is available | Formspree, our form processor |
We do not collect your passwords, card numbers, or the contents of a project owner’s source code. The project view contains only what the project owner chose to show.
How accounts work
Arcane uses one account across all its products. Today, accounts are created by invitation, from us or from a project owner; we will open sign-up when paid plans launch. You sign in with an email and password plus a one-time emailed code, or with Sign in with Apple or Google where offered. We create your account record the first time you sign in, from the details those sign-in services send us (your email, name, and an identifier). If you sign in with Apple or Google, we receive only what they share, and we never receive your Apple or Google password.
Who we share data with
We share personal data only with providers that help us run Arcane, and only what they need. Each provider is bound by terms that protect your data at least as well as this policy does.
- Microsoft: Entra External ID for sign-in; Azure for hosting and website analytics.
- Our payment provider, once paid plans start. It is the seller for purchases and handles payment, tax and invoicing under its own privacy policy.
- Formspree, which delivers website form submissions to us.
- Crash-reporting and analytics providers for the Arcane apps, limited to the diagnostics described above.
- Apple and Google, only if you choose to sign in with them, and for distributing the Spelloscope app through their stores.
- Project owners. If you were invited to a project, the project owner can see your name, email, role, and your messages and approvals on that project.
- Where the law requires it, or to protect our rights and the safety of others.
We do not sell personal data or share it for advertising.
Cookies and website analytics
arcaneai.net sets no cookies. The only thing it stores on your device is your light or dark theme choice, kept in your browser and never sent to us. We count page views with Azure Application Insights, set up so that it neither sets cookies nor uses your browser’s storage: we can see how often a page is viewed, but not who you are or whether you have visited before. If we ever change this, we will ask for your consent first and update this policy.
The site’s fonts are served from arcaneai.net itself; loading a page does not contact any font provider.
How long we keep data
| Data | Kept for |
|---|---|
| Account record and entitlements | While your account is open, then deleted within 30 days of closure |
| Project view | While you have access to the project, then removed with your account |
| Messages and approvals | Messages are deleted with your account, which also removes the messages you sent from the project owner’s view. Approval records are kept for 24 months after your account closes, with your name and other personal details removed, because they are the record of what a project owner agreed to. |
| Sign-in activity | Microsoft keeps it for 7 days on our current plan. We have not extended this. |
| App diagnostics | We will state each provider’s retention here before the apps are released |
| Website usage data | 90 days |
| Billing records | By our payment provider, for the period tax law requires |
| Waitlist sign-ups | We keep your sign-up until Dark Matter Complex is available or for 12 months, whichever comes first, and you can leave the list at any time. Formspree also keeps a copy under its own retention policy. |
Your choices and rights
You can ask us to access, correct, export or delete the personal data we hold about you, and to stop processing it. You can also withdraw your consent at any time, by deleting your account or by writing to us. If you signed in with Apple or Google, you can additionally remove Arcane’s access in that account’s settings.
To delete your account, write to us at privacy@codemagician.net; the Spelloscope app will also offer Delete account. We will respond within 30 days. We may keep what the law requires us to keep, such as billing records, and the approval records described above with your personal details removed.
Depending on where you live (for example the European Economic Area, the United Kingdom, or California), you may have additional rights, including the right to object to processing and to complain to your local data protection authority. We honor these requests for everyone, wherever they live.
Security
Passwords and one-time codes stay with Microsoft. Our own data is stored in Microsoft Azure and encrypted in transit and at rest. No system is perfectly secure. If a breach affecting your data occurs, we will tell you without undue delay and as the law requires.
Where your data is processed
Our hosting is in the United States (Azure West US 2). Your sign-in data is held in Microsoft’s North America region. If you use Arcane from another country, your data is transferred to and processed in the United States.
Children
Arcane is not for anyone under 18, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
Changes
We will post changes here and update the date above. If a change is significant, we will also tell account holders by email before it takes effect.