Privacy Policy
Last Updated: May 28, 2026
ArkCentral is operated by Arkra LLC ("ArkCentral," "we," or "us"). Our products are designed to give users control over their data. We do not design systems to observe, harvest, or monetize user content.
This Privacy Policy explains what information we collect, how it is used, and, just as importantly, what we do not collect.
1. Zero-knowledge design
ArkCentral hardware is designed to operate independently of Arkra LLC. We do not have access to data stored on your Ark device.
We do not collect, store, or have access to:
- Personal data stored on the device
- Files, documents, photos, or other content stored on the device
- Encryption keys (all keys are generated and stored locally on the hardware on your devices)
- Passwords or biometric data (authentication occurs entirely on-device)
The ArkCentral architecture is intentionally vendor-blind. Data stored on your Ark device remains under your control.
2. Information we collect
While we do NOT collect any information from your Ark device, our website collects limited information when you interact or purchase our products.
2.1 Customer and order information
When you place an order, request updates, or contact us, we collect only what is necessary to operate our business:
- Email address – used for order confirmations, shipping updates, customer support, and important product or security communications.
- Shipping information – name, shipping address, and a phone number or email address if required for delivery.
- Communications – information you voluntarily provide when contacting us, including messages sent through our contact form or live chat widget.
Retention: We retain customer contact and shipping information to provide warranty support, customer service, and to comply with legal and accounting obligations. Upon request, we will delete personal information not required to be retained by law.
2.2 Payment information
ArkCentral does not store full payment card details. Payments are processed by Stripe, which handles financial information in accordance with PCI-DSS standards. We receive only limited transaction information, such as payment status, billing address, and the last four digits of the card for verification purposes.
EU and UK VAT, U.S. sales tax, and similar consumption taxes are calculated and remitted through Stripe Tax based on the billing address you provide at checkout.
2.3 Website information
Our website collects limited technical information necessary to operate and maintain the site, such as:
- Browser and device type
- Operating system
- General location (country or region)
- Basic page interaction data (which pages were visited, time on page, scroll depth)
- Referring source when you arrived via an ad or external link
This information is aggregated and used to maintain site reliability, measure marketing performance, and improve the user experience. Where it is processed for analytics or advertising attribution, the collection is gated on your cookie-consent choice (see Section 3).
2.4 Email engagement
When we send transactional email (order confirmations, shipping updates) or marketing email (only if you have explicitly opted in), the email may contain a tracking pixel that records whether the email was opened and which links were clicked. You can disable image loading in your email client to prevent the pixel from firing, and every marketing email contains an unsubscribe link.
3. Cookies
ArkCentral's website uses a minimal number of cookies required for basic website functionality, plus consent-gated cookies for analytics and marketing measurement. These cookies do not store sensitive personal information and are not used to profile individual users beyond aggregate behavior.
You can manage cookies through your browser settings or by opening Cookie settings in the website footer.
For the full inventory, see our Cookie policy.
4. User accounts and device data
ArkCentral does not maintain a centralized database of device user accounts. User profiles, identifiers, and settings exist locally on the ArkCentral device. We do not maintain a list of device users and cannot access user data stored on the device.
5. Data sharing
We do not sell personal information and do not share personal data for third-party marketing purposes.
We share limited information only with service providers necessary to operate our business:
- Vercel – website and admin portal hosting (serverless functions and CDN).
- Neon – Postgres database that stores customer contacts, orders, and operational data.
- Stripe – payment processing and Stripe Tax for sales tax calculation and remittance.
- Resend – delivery of transactional and (opt-in) marketing email from
mail.arkcentral.net. - Mux – video hosting and playback analytics for embedded product videos.
- Chatway – the live chat widget used on certain pages of our website. Anything you type into the widget is processed by Chatway on our behalf.
- PostHog – product analytics (consent-gated). PostHog receives event names, page paths, device class, and a randomly generated identifier. IP addresses are hashed before processing.
- Google (GA4) – web analytics and marketing attribution (consent-gated). GA4 receives standard page and event data via Measurement Protocol.
- Meta (Conversions API) – marketing attribution (consent-gated). We send hashed identifiers (such as email address) along with conversion events. We do not load the Meta Pixel client-side.
- Shipping carriers – your name and shipping address for order fulfilment and delivery.
These providers are contractually required to use the information solely to perform services on our behalf and to protect it appropriately. A current list of sub-processors is available on request.
6. Legal requests
If required by a valid subpoena, court order, or other lawful request, we comply with applicable law.
Because of ArkCentral's zero-knowledge architecture, the data we can provide is strictly limited.
We can provide:
- Shipping records
- Purchase history
- Customer support communications
We cannot provide:
- Files, communications, or content stored on your Ark device
- Encryption keys
- Passwords or biometric data
- Access to or decryption of device data
We cannot disclose data we do not have access to.
7. Your rights (GDPR / CCPA)
Regardless of where you live, we extend the following rights to all users:
- Right to access – request a copy of the personal data we hold about you.
- Right to deletion – request deletion of personal data, subject to legal retention requirements.
- Right to correction – request that inaccurate personal data be corrected.
- Right to opt out – unsubscribe from non-essential communications at any time.
- Right to opt out of analytics – revoke cookie consent at any time via the Cookie settings link in the footer.
Requests can be made by contacting us using the information below.
8. Children's privacy
ArkCentral services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that personal data has been collected from a child, we will take steps to delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be flagged on the website prior to taking effect.
10. Contact
If you have questions about this Privacy Policy or your data, you can contact us at:
Arkra LLC 1309 Coffeen Avenue, STE 1200 Sheridan, Wyoming 82801 Email: sales@arkrasecurity.com