Rowdy Arena
Download free

Privacy

Last updated: 2026-11-03

Who this covers

Rowdy Arena is sold by Viral Worx LLC. This page covers the Rowdy Arena store (this site and its license service) and what the Rowdy Arena app sends to it. Viral Worx LLC (168 Reservoir Road, Parsippany, NJ 07054, USA) decides how this data is used: it is the data controller. Questions: support@rowdyarena.com.

What the store keeps

  • Your email address, which you give at checkout.
  • Your license keys and their status: active, refunded, disputed or turned off.
  • How each license was made: bought through checkout, or given free by support.
  • An optional internal note on a license, which support can add when it gives a license for free.
  • Your order records: the Stripe session and payment IDs, the amount, the currency, a receipt link, the order status and dates.
  • For each PC that uses a key: a hashed machine ID, the computer name as Windows reports it, the Rowdy Arena version, and when the PC was first and last seen. A PC you remove stays as a record with a removal time, which is how PC moves are counted.
  • Records of the sign-in links we email you: a hash of the link's one-time code, your email address, and the link's times (when it expires and when it was used). Expired links are deleted once they are more than a day past expiry; the clean-up runs the next time anyone asks for a sign-in link.
  • A log of Stripe event IDs, with the event type and time, so that one payment is not processed twice.
  • For the AI co-host: for each license, how many lines it used each month, and how many lines its packs hold and have used. Never any text.

Why we keep it

  • To sell you a license and let you use it. Your email address, keys, orders, PC records and sign-in links are what the store needs to deliver your key, check it, move it between PCs, refund it and send you a sign-in link. This is needed to carry out the purchase you asked for.
  • To protect the store and its licenses. The PC limits, the Stripe event log and the limits on how fast requests can be made stop keys from being shared and a payment from being processed twice. This is our legitimate interest in keeping the store safe and fair.
  • To meet the law. Where tax, accounting or other law requires a record, we keep it for as long as that law says.

How long we keep it

  • Your email address, licenses, order records and PC records: for as long as the license exists, so that you can recover your key, move it and see your orders, or until you ask us to delete them (see below).
  • Sign-in link records: deleted once they are more than a day past expiry, as described above.
  • The Stripe event log holds no email address or name. It is kept so that a payment is never processed twice.
  • The sign-in cookie: 24 hours, or until you sign out.

The hashed machine ID

The app makes it from the Windows machine ID (MachineGuid): it takes the SHA-256 hash of "giftclash:" followed by that ID. The Windows ID itself never leaves your PC. Only the hash is sent. If Windows does not give the app that ID, the app uses a random ID it made itself and keeps in its license file on your PC, and makes the hash the same way.

What the store never receives

  • Card details. Payment is handled by Stripe Checkout, so your card details go to Stripe. Rowdy Arena never sees your card number.
  • TikTok data. TikTok usernames, credentials or LIVE data never reach the store. Rowdy Arena reads public LIVE events on your PC and never asks for a TikTok login. The one exception is the AI co-host, which is off until you turn it on (see "The AI co-host" below).

What the app sends

  • When you use a key, the app sends the key, the machine hash, the computer name and the Rowdy Arena version. It does this when you enter the key, when Rowdy Arena starts and then once a day. "Remove this PC" sends the key and the machine hash.
  • Rowdy Arena asks rowdyarena.com for updates and for its settings file (a notice for the control panel and the oldest version that may keep running) at start and every 6 hours. The control panel also asks for the current prices. These requests carry no account data. Versions up to 0.12.0, released as Gift Clash, send all of these requests, the key ones included, to martoccimayhem.com, which belongs to the same store.

The AI co-host

The AI co-host is off until you turn it on. While it is on, the app sends the store, for each line it asks for:

  • the state of the game: the mode, the team names and scores, and the time or players left;
  • up to 3 public display names of viewers who take part in your LIVE;
  • the chat messages picked for a reply, and the lines you type in Ask your co-host;
  • the co-host's last 3 lines, so that it does not repeat itself.

Lines about the game, greetings and chat replies are asked for only while Rowdy Arena is connected to a LIVE (or you use the test console); the lines you type in Ask your co-host go whenever it is on. While it is on, the app also checks how many co-host lines are left when it starts, when you connect and every 10 minutes; that check sends only the license token.

Only chat messages that address the co-host or ask about the game are picked. The store never receives TikTok user IDs, profile pictures, profile links, the events log, the transcript or the chat that was not picked. The request carries the license token the app already holds for the license check.

The store passes each request to Anthropic's API, which writes the line. By default, Anthropic does not use data sent through its API to train its models. Anthropic's privacy policy applies to what it receives.

The store keeps no text: not the names, the messages, the asks or the lines. It records only counts, as listed under "What the store keeps".

Viewers of your LIVE

While you stream, Rowdy Arena shows the public TikTok names and profile pictures of the viewers who take part, on your PC. That data stays on your PC: the app keeps the profile pictures in a cache and a log of each day's events for 14 days. None of it reaches the store or Viral Worx. The only exception is the AI co-host (see "The AI co-host" above).

Who handles what

  • Stripe takes payments and makes refunds. Through Link, its checkout service, it is the merchant of record: it uses your billing address to work out, collect and pay sales tax or VAT, and sends your receipt. Link keeps those details under Stripe's own privacy policy; the store never receives your address.
  • Cloudflare hosts the site and the store (Workers, a D1 database and R2 file storage) and sends our emails.
  • Anthropic writes the AI co-host's lines from the requests the store sends it, and only while the AI co-host is on.
  • IP addresses are used to limit how fast requests can be made. Rowdy Arena does not store IP addresses in its records. Like any web host, Cloudflare receives the IP address of each request.

Where your data is

Viral Worx is in the United States, and Stripe and Cloudflare process the store's data in the United States and other countries. When data leaves the EU or the UK, they protect it with the safeguards those laws accept, such as the European Commission's standard contractual clauses. Anthropic is the processor for the AI co-host's lines, as described under "The AI co-host".

Cookies and what the pages load

  • The sign-in cookie. Signing in to My license sets a cookie that keeps you signed in for 24 hours. Signing out removes it.
  • Cloudflare's security cookies. Cloudflare, which hosts the site, can set its own cookies (__cf_bm and cf_clearance) to tell people from bots. They hold no account data and are needed to keep the site safe. Cloudflare describes them here.
  • Nothing else. The site has no analytics, advertising or tracking cookies and no tracking scripts, and it loads its fonts from this site, not from Google. Because every cookie here is needed for the site to work or to stay safe, there is no cookie banner.
  • Checkout. Payment happens on Stripe's own pages, where Stripe's privacy policy and cookies apply.

Emails

We send two kinds of email: your key right after a purchase, and a sign-in link when you ask for one on My license. There is no marketing email.

Your rights

Depending on where you live (for example in the EU, the UK, Mexico or a US state such as California), you can ask us to:

  • Show you the data we keep about you and give you a copy.
  • Correct it.
  • Delete it (see below).
  • Stop or limit a use of it that you object to.

Write to support@rowdyarena.com. We answer within 30 days, and asking does not change how we treat you. If you are in the EU or the UK, you can also complain to the data protection authority where you live.

We do not sell your personal data, share it for advertising or use it to build a profile of you.

Deleting your data

To ask for your data to be deleted, email support@rowdyarena.com and tell us the email address you bought with. To make sure the request is yours, we answer only to that address, within 30 days. We then delete your licenses, their PC records, your orders and your sign-in link records from the store, except records the law requires us to keep, such as the tax records of a payment. A deleted license can no longer be recovered or moved. Stripe and Cloudflare keep their own records under their own policies, and a request to us does not delete those.

Children

The store is for adults. Rowdy Arena is made for TikTok LIVE hosts, and TikTok lets only people 18 or older go LIVE. We do not knowingly keep data about anyone under 18; if you think we do, write to us and we delete it.

Changes to this page

When what the store keeps or how we use it changes, we update this page and the date at the top.