Privacy notice.

Version 2026-10-01 · Data controller: Antonio Argomaniz Lopez, an individual operating in Mexico.

We also store your preferred language to display the site and messages in that language.

1. Data controller and contact

Antonio Argomaniz Lopez, an individual operating ARENA (BotLab), with an address at Rincón del Sur 15, edificio 25, interior 2, Bosques Residencial del Sur, C.P. 16010, Xochimilco, Ciudad de México, México, is responsible for processing personal data on connect.botlab.com.mx. For privacy matters and data subject rights, contact antonioargo24@gmail.com.

2. Data we process

To identify and manage your account, we request your full name, user ID, verified email address, nationality, country and city, and date of birth. Nationality and city identify your declared territory for support and licenses; your date of birth enables age and representation rules. These details are not used for advertising or to automatically determine a person’s eligibility.

Passwords are stored as salted hashes, not readable text. Access uses a user ID or email and password, with email verification. We do not request access to mailboxes, contacts or files. Map references correspond to cities: we do not request GPS, street or home address data.

We also process session identifiers, sign-in and email delivery attempts, and consent records with their dates and versions. To limit abuse, we use HMAC-derived identifiers from IP addresses and emails. Infrastructure may process technical connection logs for operations and security. We do not request health, biometric, religious or ethnic-origin data.

3. Necessary purposes

• Verify email, create profiles, authenticate sign-ins and recover passwords.
• Manage account information and respond to license-related enquiries and requests.
• Apply age controls and obtain, record and check guardian permissions.
• Prevent unauthorized access, fraud and abuse; handle requests, incidents and legal obligations.

We do not use this data for behavioral advertising or database sales. These checkboxes do not authorize marketing purposes. Any new purpose will require the applicable notice and, where appropriate, consent.

4. Children under 18

Children under 18 require permission from a parent authorized to represent them or a legal guardian. Before saving the full profile, we request permission by email: we process the child’s name and declared age, account identifier and the adult’s email. The adult must declare that they are of legal age and authorized to represent the child, provide their name and accept this notice. We retain the decision, date and accepted version.

The link confirms control of the adult’s email; it does not by itself establish parentage or authority to represent the child. We may request proportionate evidence through a private channel if a dispute or reasonable doubt arises. Do not send sensitive documents without being asked. Without valid permission, the child cannot complete their profile or access the licenses area. Permission does not imply a purchase or charges. The guardian may request withdrawal, access, rectification or cancellation through the privacy email.

5. Providers and disclosure of data

We use Clouding hosting infrastructure to operate the server and Gmail SMTP for transactional verification and permission messages. These services process data strictly related to their function and may operate outside Mexico. Arena serves the map and city searches locally; we do not send those searches to external map providers.

We do not sell data or disclose it for advertising. Any third-party transfer requiring consent must be disclosed and consent obtained before it occurs. We may disclose information when required by a legal obligation, competent authority or legitimate defense, within the applicable framework.

6. Retention and security

We retain necessary information while the account is active and for the periods needed to address legal or contractual obligations, requests or disputes. When cancellation is appropriate, data will be deleted or blocked as applicable; backups will be handled with restricted access and according to applicable retention periods. Data is not retained for advertising.

Email codes expire after 10 minutes and guardian links after 48 hours. Normal sessions last a maximum of 12 hours; remembered sessions, 30 days. We use HTTPS, password hashes, attempt limits, protection against forged requests and server access permissions. No system eliminates all risks. A breach significantly affecting your economic or non-economic rights will be communicated in accordance with applicable law.

7. ARCO rights, withdrawal and restriction of use

You may request access, rectification, cancellation or objection, withdraw consent or restrict use or disclosure by writing to antonioargo24@gmail.com with the subject “Privacidad Arena”. Include your name, account email, the right or request you wish to exercise, and the relevant data. For rectification, specify the correction. Where needed, we will indicate an appropriate way to establish your identity or authority; do not include passwords.

The decision will be communicated within the statutory period of 20 business days; if granted, it will be implemented within the following 15 business days, subject to justified extensions permitted by law. Information is disclosed only after identity is established. Withdrawal is not retroactive and may prevent continued services that require the data. If we cannot fulfill a request, we will explain the reason and applicable basis.

8. Updates and cookies

Updates will be published at this address with their date and version. Material changes in purpose or consent will be communicated in your profile or by email, and renewed acceptance will be requested where appropriate. Read our cookie information.

Principal legal framework: Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Other applicable mandatory rules also apply.