Security

ARC Tracker holds your account, your progress, your raids and the accounts you link to it. Keeping that safe matters to us as much as keeping the site fast and accurate.

If you find a weakness in the website, the desktop app, the browser extension, the AI connector or the API, we want to hear about it, and we will treat your report with care.

Matt Marcin, the founder of ARC Tracker, leads security for the website, the desktop app and the API, and reads every report personally.

Email matt@arctracker.io directly. Please include:

• What you found and where: the page, address or app version.
• The steps to reproduce it.
• What you think someone could do with it.
• Any screenshots, requests or proof of concept that help us see it.

Please keep the details private until we have fixed it, and send them only to this address, not to Discord, social media or a public issue.

• We read every report and reply as soon as we can, usually within a few days.
• We keep you updated while we look into it and fix it.
• Once it is fixed, we are happy to thank you by name if you would like.

While you look into a problem, please:

• Test only with your own account and your own data.
• Never view, change or delete anyone else's data; if you reach data that is not yours, stop and tell us.
• Do not slow down or interrupt the service for other players, for example with floods of requests or spam.
• Do not try to trick, phish or pressure our players, helpers or partners.

If you follow these guidelines and report what you find to us first, we will treat your research as done in good faith and work with you, not against you.

ARC Raiders itself, its servers and Embark Studios accounts belong to Embark Studios: report those to Embark.

For account help, bugs that are not about security or questions about the site, ask us on Discord instead.