DOGFOOD

Privacy and assistant access

Dogfood is Arkadium’s internal playtesting portal. This notice explains the data used by this service. The Arkadium Privacy Policy describes the company’s broader privacy practices and contact information.

Data used by Dogfood

Microsoft sign-in provides your account identifier, display name and email address. Dogfood uses them to identify you and protect actions on your games. The portal also stores game builds and thumbnails you upload, publisher profiles, feedback and ratings, and play-session measurements such as duration.

Connecting an assistant

An assistant receives access only after you approve its connection. The approval shows the requested permissions. Read access covers games and feedback; write access allows publication, updates and feedback management within your account’s permissions.

Dogfood stores connection metadata and hashes of assistant access and refresh tokens. The assistant keeps its own credentials. OAuth access tokens last one hour and are renewed automatically. Connections expire after 90 days without renewal and can be disconnected in My account. Website sign-in is stored in a protected cookie for up to 90 days of inactivity and one year overall. Bot tokens remain active until their chosen expiry or until you replace or revoke them. Connection status also records successful tool use so you can distinguish an approved connection from one that has actually worked.

Sharing and service providers

Portal pages, games, feedback, and publisher information are available to signed-in users. Direct game-file URLs on the game CDN remain accessible without website sign-in at this stage. Choose the content you publish accordingly.

Arkadium operates the portal using Microsoft Azure infrastructure and Microsoft sign-in. When you connect an assistant, its provider processes the information returned by the tools you use under that provider’s policies. Arkadium’s authorized service administrators can access service records for operation and support.

Retention and control

Published games, feedback and account records remain in the service until removed through applicable service administration or data-request processes. Disconnecting an assistant invalidates its grant; it does not delete games or feedback you already published. OAuth connection records are eligible for routine cleanup one day after their expiry.

Disconnect assistants and manage bot access in My account. The original connection page remains available for personal and advanced publishing credentials. For personal-data access, correction or deletion requests, use the contact instructions in the Arkadium Privacy Policy.

Support and terms

Report portal bugs and workflow ideas through Dogfood Feedback. Submissions require sign-in and appear in the shared feed. The Arkadium Player Agreement describes the company’s general platform terms; it states its own scope and applicable conditions.

Updated October 8, 2026.