Arcavanta policies

Cookies and browser storage

See the first-party storage used by the account and order-planning screens, what it does and how you can remove it.

Essential cookies keep sign-in secure. Product-selection preferences use browser storage. Neither is a gift-card code store, and clearing a browser selection does not cancel a server-side order.

Last updated

Scope

This notice applies to arcavanta.com, operated by GRACE INTERACTIVE ENTERTAINMENT LIMITED. It covers cookies and browser storage used for account access and product planning.

Cookies are small records sent with requests to the site. Local storage stays in the browser until the site or the user removes it. Neither should be used to share passwords or gift-card codes.

Cookies and saved selections

Authentication cookies are essential to the sign-in you request. Saved product choices remember the selection made in your browser.

First-party storage inventory
StoragePurposeLifetime / control
arcavanta_session · cookieAuthenticated sessionEight hours; clear cookies or sign out
arcavanta-bulk-plan · localStorageSelected market, denomination and quantity in the bulk plannerNo automatic expiry; overwrite or clear browser storage
arcavanta-order-selection · localStorageSelected product and quantity for account planningNo automatic expiry; overwrite or clear browser storage
arcavanta_login_challenge · cookieLinks the password check to the next authentication stepFive minutes; removed after successful completion or an invalid challenge

Essential session storage

The arcavanta_session cookie maintains account authentication. Its configured maximum lifetime is eight hours. It is HttpOnly, uses SameSite=Lax and is marked Secure in the production configuration. Clearing it ends the browser’s access to that session. The temporary arcavanta_login_challenge cookie links the password check to the next authentication step and expires after five minutes. It is HttpOnly and restricted to the login endpoint.

Optional analytics

We do not use advertising cookies. Google Analytics 4 is the analytics service selected for Arcavanta; it is not part of the essential sign-in storage listed here.

If optional analytics is offered, its storage, lifetime and purpose must be disclosed and any required consent obtained before it loads. You must be able to use account and order functions without accepting optional analytics. Browser privacy settings may provide additional controls.

Keep sensitive information out of tracking

Passwords, authentication codes, full gift-card codes and wallet secrets do not belong in analytics. Do not put them into product-search fields, URLs or screenshots.

The storage listed here supports a session or a product choice. It is not evidence of a completed purchase, payment or registration.

Retention and control

The session cookie is configured for eight hours; the temporary login challenge expires after five minutes. The two order-planning localStorage entries have no automatic expiry and remain until overwritten or cleared in the browser. They contain selection data, not gift-card codes.

Browser controls

You can clear or block cookies and site storage through your browser settings. Blocking essential storage may prevent sign-in, account continuity or order actions from working correctly.

Other websites and payment services

Microsoft’s redemption pages and a separately opened payment service have their own storage and privacy notices. Read those notices before using the service; Arcavanta’s cookie list does not describe another domain.

Leaving this website does not transfer your Arcavanta password or authorise a third party to receive your gift-card codes.

Updates and contact

The date above identifies this notice revision. We update the inventory when the storage used by the service changes. Email privacy@arcavanta.com for questions about cookies or a data-rights request. You do not need to sign in. The Privacy Notice also explains your rights and gives our postal address.

Questions worth checking

01

Will clearing browser storage delete a saved account draft?

The local preferences and server-side account drafts are different records. Clearing browser storage removes local selections and sessions, not the server’s draft history.

02

Why might I have to sign in again?

The session cookie has an eight-hour configured lifetime and can also be removed by signing out or clearing cookies.

03

Are product selections advertising cookies?

No. They remember a market, denomination or quantity for the action you requested. They do not contain delivered codes or create an advertising profile.