Privacy Policy

1. C3D files and exported data

C3D files are processed locally in your browser. ArkC3D does not upload the file contents, file names, local file paths, extracted marker data, analog data, subject information, generated CSV contents, or repaired C3D bytes to the ArkC3D server for viewing or export. Repaired C3D output is copied from the repaired browser session into a ZIP on your device. GipnoArkSystems does not claim ownership of your source C3D data or exported data.

2. Anonymous application metrics

ArkC3D sends limited technical events to a Cloudflare D1 database to understand whether file opening succeeds and where failures occur. These events can include the ArkC3D version, an event timestamp assigned by the server, a random identifier for one file-open attempt, the entry point and input method, processing milestones, fixed failure categories, repair codes, and elapsed time. When a file-open failure occurs, the random attempt identifier may also be shown to you as a Diagnostic ID so that you can include it in a support request.

When you use the Export purchase interface, ArkC3D also records limited events with fixed event and error-code values, such as opening the dialog, selecting a purchase button, responding to a repaired-C3D warning, and receiving a checkout success or close notification. Those events can include the ArkC3D version, a server-assigned timestamp, the page where the dialog was opened, the product code, and a random identifier created for that one dialog. The identifier is stored with those event rows and is not saved in your browser or reused across dialogs. A checkout success notification is a browser event, not a confirmed order record.

These metrics do not include file names, file sizes, file contents, extracted C3D data, order IDs, License Keys, customer details, or persistent user identifiers. ArkC3D does not store IP addresses or User-Agent values in these metrics. Purchase interface events and confirmed orders are stored in separate databases and are not joined in reports. ArkC3D does not use Google Analytics or another third-party web analytics tag. The application does not automatically delete these metrics after a fixed retention period.

3. Export license verification and usage audit

When you verify or use a paid export feature, the License Key is sent to the ArkC3D license API. The API validates that key with Lemon Squeezy and checks that it belongs to an accepted ArkC3D entitlement and license state. The raw License Key is not stored in the `license_usage_daily` export audit table.

For each successful export authorization, ArkC3D records the Lemon Squeezy License Key record ID, export kind (`csv_export` or `repaired_c3d_export`), UTC day, ArkC3D version, a SHA-256 hash of the request User-Agent environment string, an authorization count, and the first and last authorization timestamps for that daily aggregate. ArkC3D does not store the raw User-Agent value in this audit table. It does not add the request IP address, email address, buyer name, C3D file information, or export contents to the audit record.

This limited pseudonymous audit is used for license-compliance review, abuse prevention, security, and support. Environment hashes are signals only and are not treated by themselves as proof that a License Key was shared. Audit rows older than the 90-day audit window are deleted during later successful license checks.

Verified CSV and repaired C3D License Keys are stored separately in your browser local storage and checked again for their respective export features. A key for the combined product is stored for both features. You can remove saved keys by clearing the site data for ArkC3D.

4. Purchase-session data handled by ArkC3D

To securely deliver a License Key immediately after checkout, ArkC3D creates a short-lived purchase session. It stores hashed purchase-intent and browser-verifier values, the accepted Terms version and acceptance timestamp, technical order and webhook state, and, when necessary, an AES-GCM encrypted License Key until it is claimed. Purchase sessions expire after 15 minutes. Encrypted License Key material is deleted when a successful one-time claim completes. If an order is created, the accepted Terms version, acceptance timestamp, and technical order identifiers are retained as a record of the purchase terms after the short-lived session is removed. Order-linked Terms acceptance records are retained for the life of the license and as reasonably necessary afterward to establish the applicable purchase terms and meet legal obligations.

The ArkC3D purchase-session database does not store purchase email addresses, C3D data, export data, IP addresses, device fingerprints, or machine IDs.

5. Lemon Squeezy purchase data

Lemon Squeezy acts as the Merchant of Record for ArkC3D export-license transactions. Customers purchase through Lemon Squeezy in that role. Lemon Squeezy processes buyer information, billing information, payment details, taxes, order records, receipts, and License Key information required to complete and administer the purchase. That processing is governed by Lemon Squeezy's own terms and privacy notices. ArkC3D does not represent that information processed by Lemon Squeezy as data stored by the ArkC3D license API.

6. Cookies and browser storage

ArkC3D uses a short-lived HttpOnly purchase-session cookie during the secure checkout-to-license delivery flow. A verified License Key may be stored in browser local storage. ArkC3D does not set analytics cookies for Google Analytics because Google Analytics is not used.

7. Cloudflare

ArkC3D is hosted using Cloudflare services, including Cloudflare Pages, Pages Functions, and D1. Cloudflare may process network and infrastructure information as part of providing those services under Cloudflare's own terms and privacy policy. ArkC3D does not intentionally add the request IP address or raw User-Agent to its D1 anonymous file-open metrics. The separate export audit uses only the hashed User-Agent value described above.

8. Contact by email

If you contact GipnoArkSystems by email, the contents of your message, your email address, and related correspondence are processed as necessary to answer the inquiry, provide support, handle a refund request, or satisfy a legal disclosure request. If GipnoArkSystems specifically requests a C3D file or other research data to reproduce a support issue, you must be authorized to provide it. Such support material is kept only as needed for the investigation and is deleted within 30 days after the investigation is completed.

9. Your choices

You can open, inspect, repair supported files, and view repaired data for free. Paid export requires the corresponding License Key. You can remove a saved License Key by clearing ArkC3D site data in your browser. For a privacy question or request, contact contact@gipnoarksystems.com.

10. Related policies

See the Terms of Use, Refund Policy, and Commercial Transactions Disclosure.