Privacy Policy

Last updated: October 23, 2026 · Version 1.0

AIArk ("we", "us") operates the website aiark.store (the "Site"), an open archive of real-world AI Agent use cases. This policy explains what personal data we collect, why we process it, how long we keep it, and what rights you have. It is written to satisfy the EU/UK GDPR, ePrivacy rules, and California CCPA/CPRA.

1. Data we collect

• Account data — your email address when you register, plus email verification codes (stored only as hashes, expiring after 10 minutes).
• Activity data — votes, saved cases, shared cases, test reports and case submissions you create while signed in, linked to your account.
• Privacy-friendly analytics — page views, case detail views and prompt-copy events. We do not use cookies or third-party analytics; events are stored as counts without persistent identifiers.
• Server logs — our hosting provider, Cloudflare, processes standard request data (IP address, user agent) to deliver and secure the Site.

2. Why we process it (legal bases)

• Contract — to provide your account, points, submissions and other features you use.
• Legitimate interests — keeping the Site secure and preventing abuse (short-term, in-memory IP-based rate limiting; we do not store IPs in our analytics), and understanding which cases are useful.
• Consent — only for optional communications such as a newsletter, which you can withdraw at any time.

3. What we do not do

We do not sell or share personal data for cross-context behavioral advertising. We do not run advertising, analytics or social-media cookies, so no cookie banner is required on this Site. We do not send marketing email without consent.

4. How long we keep data

• Account and activity data — until you ask us to delete your account (see §5).
• Email verification codes — deleted automatically after expiry (10 minutes).
• Analytics events — deleted automatically after 180 days.

5. Your rights (GDPR / UK GDPR)

If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, port your data, object to processing, and withdraw consent. Email hello@aiark.store and we will respond within 72 hours. You may also lodge a complaint with your local supervisory authority.

EU/UK representative: we are in the process of appointing a representative under Article 27 GDPR and will publish their contact details here. Until then, please contact us directly at the address above and we will act as your single point of contact.

6. California residents (CCPA/CPRA)

We do not sell or "share" personal information as defined by the CCPA. California residents may request access to, or deletion of, their data via hello@aiark.store. We will not discriminate against you for exercising these rights.

7. International transfers

Our processors — Cloudflare (hosting) and Resend (transactional email) — process data in the United States under Standard Contractual Clauses and/or recognized adequacy frameworks, with data processing agreements in place.

8. Children

The Site is intended for users aged 13 and over (16+ in some EU countries). We do not knowingly collect personal data from children; if you believe a child has provided data, contact us and we will delete it.

9. Security

HTTPS everywhere, hashed passwords and verification codes, and deliberate data minimization. If a breach affecting your data ever occurs, we will notify affected users and the relevant authorities without undue delay.

10. Changes to this policy

Material changes will be announced on the Site. The "last updated" date above always reflects the current version. Continued use after a change constitutes acceptance of the updated policy.