1. Purpose
This Privacy Policy explains how Arab Wuwa handles information when you browse the website, create an account, use public profile/community features, use the Calculator and its optional cloud saving, save My Echoes roster data, subscribe, or make a one-time donation through PayPal.
Arab Wuwa is an unofficial fan site. It is not affiliated with Kuro Game Co., Ltd.
2. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, Firebase UID, sign-in provider, verified-email status, account timestamps | Authentication, account security, account display, and access to signed-in features |
| Profile data | Display name, avatar, profile card, Arab Wuwa ID, BIO, game UIDs, game UID visibility choice | Show your account page, public profile, community rows, and profile customization |
| Discord link data | Discord user ID, username, display name, avatar hash, link time, and role sync status when you choose to link Discord | Connect your Arab Wuwa account to Discord and let IX Bot add or remove the Arab Wuwa server role |
| Community and social data | Following/follower relationships, liked characters, favorite teams, My Roster selections, linked weapons, sequences, refinements | Power public profiles, community owner pages, community counts, and social features |
| Roster build and My Echoes data | Character builds, reusable roster echoes, echo stats, sonata sets, proof status, linked character slot, verification state, and usage counts | Show public build pages, let users manage saved echoes, support moderation review, and enforce storage limits |
| Calculator data | Saved rotations, saved calculations, inventory folders, echo data, Saved Timing sets, usage counts, calculator state you choose to save | Provide optional Calculator cloud saving, enforce account-specific saving limits, and allow the website owner to access saved calculations through an owner-only administrative view |
| Subscription and account-deletion data | PayPal subscription ID, plan, status, current paid period, cancellation state, webhook event IDs, plan change state, account-deletion operation status, cancellation-verification state, and minimal billing-safety records | Manage optional support subscriptions, plan-specific Calculator cloud-saving benefits, cancellation and plan changes, verify recurring billing has ended before account deletion, safely resume interrupted deletion operations, and prevent duplicate webhook processing |
| One-time donation and Supporters Wall data | Local donation reference, amount and currency, payment status and timestamps, PayPal order/capture identifiers, payer hash, optional Firebase UID account link, checkout and webhook identifiers, public-display choice, and the display name or message you choose to submit | Process and reconcile voluntary one-time donations, prevent duplicate processing and abuse, handle refunds or disputes, connect eligible signed-in support, and moderate an optional public Supporters Wall request |
| Private Feedback submissions | The title and description you provide, optional screenshots, a private submission reference, and the account information needed to associate the submission with your verified Arab Wuwa account. | Review, investigate, and respond to site bugs, content issues, and improvement suggestions. Feedback text and screenshots are not public and may be accessed only by authorized administrators. Any reply is delivered through Messages. |
| Technical data | Server logs, IP address or request metadata, browser information, timestamps, error information | Security, abuse prevention, debugging, and website operation |
| Google Analytics usage data | Pages viewed, scrolls, outbound-link clicks, form-interaction events, approximate location, device and browser details, timestamps, and first-party analytics identifiers | Aggregated audience measurement and improvements to content, tools, performance, and reliability |
PayPal processes payments. Arab Wuwa does not store your card number, bank details, PayPal password, or full PayPal payment method details.
3. What Other Users May See
Some account data is intentionally public when you use public features. Your public profile may show your display name, avatar, Arab Wuwa ID, BIO, membership styling, social relationship state, liked characters, favorite teams, and roster preview.
Community character and weapon pages may show your display name, avatar, account slot, sequence, refinement, linked weapon, and selected roster data. Game UIDs remain hidden unless you choose to show them to other users.
If you deliberately request Supporters Wall display and a moderator approves it, the wall may show your approved display name, optional message, supporter badges, support count, and most recent support date. It never shows your donation amount, email address, PayPal payer ID, PayPal order/capture identifiers, Firebase UID, or other payment details.
4. Storage, Cookies, and Local Data
- Firebase Authentication handles sign-in, passwords, email verification, Google sign-in, and authentication sessions.
- Hostinger MySQL stores account-linked website data, Discord link status, public profile data, roster data, My Echoes data, proof review metadata, social data, Calculator cloud saves for eligible signed-in accounts, subscription status, one-time donation and Supporters Wall records, and limited account-deletion and billing-cancellation verification records.
- Discord handles Discord OAuth approval and IX Bot role assignment when you choose to link your Discord account.
- PayPal processes subscriptions and one-time donations and sends status updates to Arab Wuwa through API/webhook events.
- Browser storage may keep the current Calculator setup and other non-cloud work locally so a refresh does not erase it. This data stays only in that browser on that device, does not synchronize, and may be lost if browser data is cleared, private browsing blocks storage, or another device is used. Saved Calculations, Saved Rotations, Saved Timing sets, and Inventory do not use browser local storage as a fallback.
- Google Analytics uses first-party analytics cookies, including
_gaand_ga_<container-id>, to distinguish users and sessions. Their default expiration is up to two years, although browsers or your own settings may shorten or remove them. Arab Wuwa does not configure Analytics User-ID or intentionally send names or email addresses as Analytics identifiers. - Arab Wuwa does not use advertising cookies or sell personal data to advertisers.
5. How We Use Information
- To operate account login, public profiles, My Roster, My Echoes, community pages, social features, and the Calculator.
- To provide up to 1,000 saved Echoes for every account, independently of subscription status.
- To enforce Calculator cloud-saving limits according to subscription tier and any additional benefits granted by the owner.
- To support roster proof review and remove proof images after moderation decisions where applicable.
- To process PayPal subscription status, cancellation, renewal, failed renewal, and plan changes.
- To process and reconcile one-time donations, prevent duplicate payment processing, handle refunds or disputes, and connect eligible signed-in support.
- To review and publish an optional Supporters Wall name and message only when you request public display and a moderator approves it.
- To cancel linked recurring PayPal subscriptions, verify recurring billing has ended before account deletion, and safely resume an interrupted deletion operation.
- To understand aggregated website usage and improve content, tools, performance, and reliability through Google Analytics.
- To prevent abuse, protect accounts, debug errors, and keep the website online.
- To respond to account, payment, subscription, privacy, and legal requests.
7. Data Retention
| Data | Retention |
|---|---|
| Account, profile, social, and public roster data | Kept while your account exists or until you delete/change the relevant data. |
| Calculator saves and My Echoes data | Kept until you delete them or delete your account. They are not automatically deleted because of inactivity, cancellation, downgrade, or exceeding a limit. |
| Proof images | Kept while pending review when needed. After a decision, approved proof images remain available to authorized moderators for six calendar months and rejected proof images for 30 days. At the deadline, the image becomes unavailable and scheduled private-file cleanup removes it afterward, while the proof status and review record are retained. |
| Subscription and account-deletion records | Limited records are kept as needed for payment status, cancellation verification, safe recovery of interrupted deletion operations, prevention of recurring charges, dispute handling, accounting, security, abuse prevention, and legal requirements. |
| Completed, refunded, or reversed one-time donation records | Transaction and reconciliation records, including the minimum account link needed to reconcile the payment, are kept for seven years after the transaction reaches its final status. They may be kept longer only while a payment dispute, security investigation, or legal hold remains unresolved, or where applicable law requires it. |
| Incomplete or abandoned one-time donation checkout records | Kept for 180 days after the last activity, then deleted or irreversibly anonymized unless they relate to an unresolved payment dispute, security investigation, or legal duty. |
| Supporters Wall names, messages, and moderation records | Approved text is kept while it remains public. Submitted and approved text and the moderation decision are kept for 12 months after the display is withdrawn, hidden, rejected, or replaced, then deleted or irreversibly anonymized unless longer retention is needed for abuse prevention, security, a legal claim, or applicable law. |
| Private Feedback submissions and screenshots | Retained until you delete your account or an authorized administrator permanently deletes the Feedback. After an administrator permanently deletes the Feedback, Arab Wuwa may retain privacy-safe deletion and cleanup records that do not contain the Feedback text, screenshots, a direct account identifier, or a private storage path, solely to prove deletion and complete private-file cleanup. |
| Google Analytics data | Event-level Analytics data is retained for 2 months. User-level Analytics data is retained for 14 months, with the retention period reset following new activity. These settings do not affect most aggregated standard reports. Arab Wuwa does not send signed-in account IDs to Analytics as User-ID. |
| Browser local storage | Stays only in that browser on that device until you clear browser data or use page reset controls. It does not synchronize and may be unavailable or lost when private browsing blocks storage. |
| Server logs and technical records | Kept only as long as reasonably needed for security, debugging, and operation. |
If a subscription ends or changes, existing My Echoes data and existing Calculator cloud data are not automatically deleted. Affected users may continue viewing and deleting that data, but new Calculator saves are blocked when the current plan does not include saving or the applicable limit has been reached. If the account still has the relevant saving benefit, existing items may be updated even at the limit. If an Owner-granted Calculator Benefit expires or is revoked, its additional limits stop immediately, but the cloud data remains preserved. Resubscribing or receiving an active Calculator Benefit restores saving under the account's current effective limits without requiring preserved cloud records to be reimported.
8. Security
- HTTPS is used across the website.
- Private calculator logic and server configuration are kept behind server-side PHP/API access rather than public browser files where practical.
- Firebase ID tokens are used to protect account APIs.
- PayPal webhook/API data is processed server-side before subscription or one-time donation status is changed.
No internet service is perfectly secure. We cannot guarantee absolute security or permanent availability.
9. Your Choices and Rights
- You can update your display name, avatar, profile card, BIO, game UIDs, and game UID visibility from your account page.
- You can delete or change your saved roster, My Echoes, and calculator content through the relevant tools where available and when you have access.
- You can cancel subscriptions from the subscription page where available, or from PayPal.
- You can choose whether to request public Supporters Wall display and can submit a revised name or message, request that the display be hidden, or ask us to remove it.
- You can delete your Arab Wuwa account from the account page. Before removing account-linked website data, Arab Wuwa cancels all linked recurring PayPal subscriptions and verifies through PayPal that recurring billing has ended. If this cannot be confirmed, account deletion stops.
- Account deletion does not erase one-time donation transaction or minimum account-link records before the seven-year retention period ends; minimal account-linked identifiers and limited subscription, billing, or deletion-operation records may also be retained as needed for safe recovery, prevention of recurring charges, dispute handling, accounting, security, abuse prevention, and legal requirements.
- You can remove or block Google Analytics cookies through your browser settings or use the Google Analytics Opt-out Browser Add-on. Blocking Analytics cookies does not prevent you from using Arab Wuwa.
- You can contact us to request access, correction, export, or deletion where required by applicable law.
10. Children
Arab Wuwa is not directed to children under 13, or the minimum digital-consent age in your country, whichever is higher. If you believe a child has created an account, contact us so we can review and remove it.
11. Changes
We may update this Privacy Policy as features change. Continued use of the website after an update means you accept the revised policy.
12. Contact
For privacy, account, payment, or legal requests, contact Arab Wuwa through the public Discord server: https://discord.gg/aVgcAxb9kV.
Last updated: