What the Arena keeps, and for how long.
You can vote in the daily Arena without an account, or deliberately create a minimal local session through Discord. This page lists the data each feature processes and for how long.
Controller and contact
Controller: DreamSite Lab, VAT number (P.IVA) 05168650231.
Contact: Studio@dreamsitelab.it
What is processed
- A technical vote receipt cookie, named
sa_guest_receipt. It is a random value, not derived from your device, network address or browser, set when the Arena shows an open contest. It is HttpOnly, Secure and SameSite=Lax, and expires after 48 hours. It only answers whether this receipt has already voted in a contest. If your browser blocks it, the Arena cannot record your vote and says so. - A keyed hash of that receipt, per contest, stored with your vote. The cookie value itself is never stored. Raw votes and these hashes are deleted when the result is published; only the totals remain. Per-receipt attempt counters are removed after 72 hours.
- A short-lived network pseudonym against flooding. Each vote submission is counted under a keyed hash of the network address Cloudflare reports for the request and the current minute. The address itself is not stored. The hash only limits bursts (30 submissions per minute) and is deleted after five minutes.
- Daily aggregate counters of accepted, refused and rate-limited votes, labelled with the software version, without any receipt, address, device or contest. They are kept for 90 days.
- One result event per contest, containing only the published totals, kept for a future community announcement and deleted after 90 days if it was never delivered.
Deletion runs automatically every few minutes; a period listed here is when data becomes eligible, so removal can be slightly later if the service is paused.
What an account keeps
When you choose Discord sign-in, the site requests only the Discordidentify scope. It stores your Discord ID, current username and avatar hash in a private local account record. It does not request or store email, guild membership, roles, messages or a Discord access or refresh token.
The sign-in transaction uses a first-party pre-auth cookie, state and a PKCE verifier for up to ten minutes. A successful sign-in creates a separate first-party session cookie for seven days. Both browser bearer values are random and HttpOnly; the database stores their SHA-256 digests, not their reusable values. A separate Secure, SameSite=Lax CSRF form value is kept only for the same seven-day session period.
Your local account remains until you delete it in Account settings. Deletion removes the local identity and every local session. It does not delete your Discord account, Discord messages, guild membership or roles. Backup and recovery retention in Cloudflare D1 are operated separately and are not represented as an instant erasure promise here.
What the Arena does not do
No email, profiling, advertising or analytics cookies, third-party scripts, or tracking outside this site. A Discord sign-in does not grant points, XP, a role, a public profile or an account link to a guest vote. Results show only totals per option: who voted, and for what, is never published. A guest vote earns no points or XP and weighs the same as any other.
Where it runs
The site runs on Cloudflare Workers, with the Arena database in Cloudflare D1 located in the European Union jurisdiction.