Privacy Policy

The operator is AP SYSTEM32.BIN LLC, registered in the State of New York, United States, address 447 Broadway, 2nd Floor #1565, New York, NY 10013, United States.

For your account, your organization and your visits to the site we are the controller under the GDPR. For data about players on game servers that you connect through Sentinel, you are the controller and we are your processor: we keep and show that data only so the panel features you turned on can work, and only on your instructions.

Contact for any privacy matter: privacy@dz.arbat16.com.

When you simply visit the site

The AR16 Launcher downloads the server list and its own updates from this site. It sends no account data; its requests land in the web server log like any page visit.

When you sign in through Steam

Steam does not give us your password: it confirms your identity and hands over what your profile makes public.

Every time you sign in we write a line to the sign-in log: IP address, the country, city, postal code and approximate coordinates of that city derived from the IP address, browser identification string, session token and time. You can see these entries in your profile settings. They exist so you can spot a sign-in that was not yours.

When you use the panel and Sentinel

When you use the assistant

Your messages, the assistant’s answers and the data it reads from your servers to answer you (settings, logs, player lists) are stored with the chat, along with token counts and cost. To produce an answer they are sent to Requesty, a routing service for AI models, and through it to the company that hosts the model. Before sending we mask passwords and webhook addresses.

When you pay

Payments go through Stripe. You enter card details on Stripe’s own page and they never reach us. We keep the plan, billing period, amounts, promo code, Stripe customer and subscription identifiers, top-ups of the assistant balance, and the email you gave at checkout, which Stripe passes back to us as your billing contact.

Players on servers that use Sentinel

When a server owner turns on player features, Sentinel sends us data about people who play on that server. For this data the server owner is the controller and we act on their behalf.

The plan here is the server owner’s plan. If the owner moves to a plan that keeps less, for example from a paid plan to Free, history the new plan does not keep is held for 30 days and then deleted. An alert about a player on your watch list carries the player’s nickname, SteamID and your staff’s note to the recipients you set up: notifications in the panel, Discord, webhooks. The terms of this processing are in the section “Processing of player data” of the Terms of Service.

What we never collect

Steam passwords, card numbers, documents, precise location from your device, your contacts, your camera or microphone. We do not build advertising profiles and we do not sell data.

If you disagree with processing based on legitimate interest, you can object under Art. 21 and we will either stop or explain in writing why our grounds override. We make no decisions about you by automated means that have legal or similarly significant effects.

We do not sell data to anybody. Each of these services receives a specific slice for a specific job.

Some of these transfers leave the European Economic Area. Where the provider takes part in the EU-US Data Privacy Framework we rely on the European Commission’s adequacy decision for it, otherwise on the Standard Contractual Clauses.

Cookies the site needs to work are always on. Google Analytics turns on only after you click Accept in the cookie banner. If you later choose Necessary only in “Cookie settings” at the bottom of any page, analytics stops and we delete its cookies from your browser.

The full list, with names and lifetimes, is in the Cookie Policy.

We say this plainly rather than hiding it in a clause. The operator is registered outside Russia and the database is in Germany. Russian law (Federal Law 152-FZ, art. 18(5), as amended from 1 July 2025) requires personal data of Russian citizens to be processed in databases located in Russia, and we do not meet that requirement.

What this means for you: if that matters to you, do not create an account and do not accept analytics cookies. Browsing the site, the server list and the wiki requires no account. If you also choose Necessary only in the cookie banner, the only record of your visit is what any website keeps: your IP address in the web server log and at Cloudflare.

• Account, organization and panel data: as long as the account exists. Ask us to delete the account and we delete it with everything attached within 30 days, except payment records.
• Sign-in log: as long as the account exists. It is the only record that would show a break-in.
• Activity log: 1 day on the Free plan, 180 days on Plus, 365 days on Max.
• Game server log files and the machine’s own activity record in Sentinel: they stay on your computer, and the panel reads them from there. What the panel reads is kept in the command log (next item). Server log lines (the console and the RPT, script and admin logs) sent to us for the live view are kept about 30 minutes while the computer keeps sending them; the last lines of a computer that stops sending stay until it sends again.
• Command log: the commands the panel and the assistant send to your computers and the answers that come back, including the text of files you open or save through the panel. Kept as long as the account exists.
• Alert samples: processor and memory load, server FPS, player count and availability, one sample a minute for each computer, kept 7 days so that alert rules can look back.
• Player data: as listed in the players table above.
• Assistant chats: deleted 90 days after the last message on the Plus plan and 180 days on Max. The assistant is not sold on Free: after a move to Free, chats are kept 30 days and then deleted.
• Backups: the archives stay on your computer, and your backup schedule decides how many are kept. We keep only their list. Cloud copies, if you keep them, follow the same schedule while the cloud storage is paid for (next item).
• Cloud storage (cloud copies of backups and uploaded mods): while it is paid for. When the plan stops covering the files, for example after a move to a smaller plan, a cancelled storage add-on or the end of a paid plan, they are kept 14 days on the Free and Plus plans and 30 days on Max, counted by the plan that covered them, then what does not fit is deleted, oldest backup copies first. We tell you when this starts, a week before and a day before.
• After a move to a plan that keeps less, for example from a paid plan to Free: history the new plan does not keep is held for 30 days and then deleted.
• Payment records: as long as tax and accounting rules require.
• Contact form messages: until you ask us to delete them.
• Copyright notices: as long as the removed content or a dispute about it may still need them.
• Web server log: about two weeks, then the oldest file is deleted every day.
• Google Analytics: Google keeps the data for the retention period set in our Analytics account, at most 14 months.
• Server list data is not personal data: it describes game servers, not people. DayZ does not publish player names in the server list.

Write to privacy@dz.arbat16.com, use the contact form on the home page or message us on our Discord server. Many accounts here have no email address on file, so to make sure a request about an account comes from its owner, we may ask you to confirm it from inside your signed-in account (for example, we show a code in your panel and you send it back to us) or through the Steam account you sign in with (for example, by putting a code we give you into your Steam profile name for a few minutes). We answer within 30 days.

• A copy of everything we hold on you, in a machine-readable form (Art. 15, Art. 20)
• Correction of anything wrong (Art. 16). Profile fields come from Steam: fix them there and sign in again
• Deletion of your account and everything attached to it (Art. 17)
• Restriction of processing while a dispute is open (Art. 18)
• Objection to processing based on legitimate interest, including the location lookup at sign-in (Art. 21)
• Withdrawal of consent to analytics at any time, with “Cookie settings” at the bottom of every page (Art. 7(3))

We do not charge for this and we do not require a reason. If we refuse, we say why. You can also complain to a supervisory authority; for EU residents it is the one in your country of residence.

If you play on someone else’s server, its owner decides about your data there. Write to the owner first. If that does not work, write to us and we will pass the request on and help them carry it out.

Traffic runs over HTTPS with HSTS. Server and RCON passwords are encrypted with a key our server does not have, so we cannot read them. Access to the database is limited to people who need it to run the service.

We will not pretend this is unbreakable. If a breach happens and it is likely to put your rights at risk, we will notify the relevant supervisory authority within 72 hours and tell you directly, saying what happened and what you should do, rather than issuing a statement about how seriously we take security.

The service is for adults. You must be at least 18 years old to use the service, and only adults may pay for it. We do not knowingly create accounts for, or collect account data from, anyone under 18. If you believe someone under 18 has an account here, write to us and we will remove it.

Data about players on game servers is processed for the server owner, who decides who may play there.

If we change what we collect or who we send it to, we update this page and the date at the top. For changes that materially affect you we will also tell you in the interface. We will not quietly widen the scope and rely on you re-reading the page.