1. Who decides about your data (controller)
[OWNER: razão social, CNPJ/identificação fiscal, endereço]. Privacy contact: [OWNER: e-mail]. Data protection officer (LGPD "encarregado") / DPO (GDPR): [OWNER: nome e e-mail, ou declaração de que não é obrigatório]. EU representative, if required: [OWNER].
2. In plain language
We collect the minimum so you can play, buy and get support. We do not sell your data. We use no ads and no third-party trackers at launch. You can download or delete your data under Account > Privacy.
3. Which data, for what, and on what legal basis
| Data | Purpose | Legal basis (LGPD / GDPR) |
|---|---|---|
| E-mail, country, language, password (hash), 2FA, passkeys | Create and protect the account | Performance of a contract (LGPD art. 7 V / GDPR 6(1)(b)) |
| IP and user agent (sessions, login events, devices) | Security, anti-fraud, preventing abusive accounts | Legitimate interest (art. 7 IX / 6(1)(f)) |
| Payment metadata (amount, currency, country, gateway id, last 4 digits at most, IP) | Charge, deliver, refund, dispute, tax obligations | Contract and legal obligation (art. 7 II, V / 6(1)(b),(c)) |
| OAuth tokens (Discord, Twitch), encrypted | Link accounts by your choice | Consent/contract; deleted when you unlink |
| Payout data and tax documents (partners) | Pay creators | Contract and legal obligation |
| Support tickets and messages | Help you | Contract / legitimate interest |
| Site chat transcripts | Support and moderation | Legitimate interest |
| Public chat excerpts flagged by moderation; moderation events | Keep the community safe | Legitimate interest |
| AI case entries (text you sent to support) | Help you and improve support | Legitimate interest; contract |
| Reports and evidence | Investigate violations | Legitimate interest |
| Messages you write in the official Discord channels (read by the automatic moderator); excerpt (up to 160 characters) and author id of flagged messages | Automatic moderation and community safety (see section 9) | Legitimate interest (art. 7 IX / 6(1)(f)) [D13, D14] |
| Twitch id and name, Twitch tokens (encrypted), minutes watched, answers to presence checks, viewing sessions | Viewer programme (Watch & Win) and partner streamer programme (see section 10) | Contract (taking part in the programme) / legitimate interest (anti-fraud) [D16-D18, D20] |
| Anti-bot score, hunting sessions, character deaths | Game fairness, statistics | Legitimate interest / contract |
| IP of your last login on the game server (kept by the game engine in the character record) | Security and anti-fraud in the game | Legitimate interest (art. 7 IX / 6(1)(f)) |
| Requests the game makes to the website (redemptions, purchases, reports, tickets) | Carry out the request and fix problems | Contract / legitimate interest |
| Audit log (staff actions, exports, deletions, consent changes) | Accountability and security | Legal obligation / legitimate interest |
| Consent records (text version, categories, date) | Prove your choices | Legal obligation |
Private messages inside the game are not stored. We keep only the reported excerpt, and only if one of the parties files the report.
4. How long we keep it
| Data | Period | What happens afterward |
|---|---|---|
| Account (e-mail, country, language) | As long as the account exists | After a deletion request and a 14-day grace period: e-mail anonymized, password/2FA/passkeys/links deleted, characters renamed and locked; financial records keep only the account id |
| Sessions | 90 days after expiring | IP deleted |
| Login events and devices | 1 year | IP deleted |
| IP on payment | 1 year | IP deleted |
| IP in the audit log | 2 years | IP deleted |
| Payment metadata, refunds, disputes, invoices | 5 years [OWNER/jurídico confirmar BR/UE] | Deleted; raw payload of gateway events deleted after 13 months (dispute window), leaving only ids |
| Payouts (partner payment details) and tax documents | Up to 5 years after the last payout [D19] | Deleted |
| Tickets | 2 years after closing | Deleted |
| Site chat | 180 days | Deleted |
| Moderation events | 90 days (no action taken: 30 days) | Deleted |
| Excerpt of a flagged Discord message (up to 160 characters) and author id | 90 days [D13] | Excerpt deleted (the event without text may remain) |
| Minutes watched (viewer programme) | 35 days [D16] | Deleted; daily totals remain linked to the account |
| Presence checks (AFK) and viewing sessions | 90 days [D18] | Deleted |
| Audience samples and streamer raids | 120 days [D17] | Deleted (aggregate channel data, not viewer data) |
| Twitch tokens | Until you unlink the account, delete it, or the token becomes invalid [D20] | Deleted |
| AI case entries | 1 year | Text replaced by a summary with no personal data |
| Reports and evidence | 2 years | Deleted |
| Anti-bot score | 180 days | Deleted |
| Hunting sessions | 90 days | Deleted |
| Character deaths | 1 year | Deleted |
| IP of last login on the game server | 90 days after the last login | IP deleted (zeroed) |
| Game requests to the website | 30 days after completion | Deleted; the text of reports and tickets remains only in their own record (2 years) |
| Web server logs (IP) | 30 days | Rotated |
| Application logs | 30 days (system) / 14 days (project files) | Rotated |
| Backups | up to about 6 months | See below |
Backups: deleted data may remain in encrypted backup copies for up to about 6 months. We do not restore them for use; if a restore is needed, we reapply all deletions before going back online.
5. Your rights and how to exercise them
LGPD art. 18 and GDPR arts. 15-22: confirmation and access, correction, anonymization/blocking/deletion, portability, information about sharing, withdrawal of consent, objection, and human review of automated decisions.
- Download your data: Account > Privacy > Export. We send a link by e-mail (valid for 7 days) with a JSON file. Requires 2FA. Limit of 1 request per day.
- Delete your account: Account > Privacy > Delete. Requires 2FA. You have 14 days to cancel; after that, deletion or anonymization is irreversible. Pending matters (open disputes, escrow) may delay the request.
- Correct: Account > Settings.
- Other requests: [OWNER: e-mail do encarregado]. We reply within 15 days (LGPD) and 1 month (GDPR).
- Complaints: the ANPD (Brazil) or the data protection authority of your country in the EU.
6. Who we share it with (operators/processors)
| Company | Purpose | Data | Note |
|---|---|---|---|
| Cloudflare | Network, security (WAF), Turnstile (anti-robot), tunnel | IP, requests | [OWNER: DPA] |
| Resend | Transactional e-mails, including receipts (order, amount, date; never card data) | E-mail, message content | [OWNER: DPA; retention period of the sending history] |
| Stripe | Card payments | Payment data (we do not see the card), e-mail, country | Also an independent controller in part |
| Mercado Pago | PIX, boleto, BRL cards | Payment data, e-mail, CPF if required by the method | Also an independent controller in part |
| Discord | Login/linking and community bot | User id and name, messages on the official server (the bot reads them; section 9) | Discord's own policy |
| Twitch | Linking, Drops, streamer and viewer programme | User id and name, tokens, stream queries (section 10) | Twitch's own policy |
| Anthropic | Support and moderation AI | Text sent to the Assistant (AI) and the automatic moderator (includes the text of analyzed Discord messages, without author id) | No training on your data by API default [OWNER: confirmar contrato/retenção] |
| Telegram | Internal staff alerts | Event types and internal ids, no message excerpts | [OWNER: confirmar uso e DPA/termos] |
| Higgsfield | Marketing image generation | No player data (marketing material only) | [OWNER: confirmar] |
| Backblaze (B2) | Backups encrypted before upload | Encrypted copies | The provider has no readable access |
| Hosting provider | Server | All data | [OWNER: razão social e local dos dados] |
We do not sell or "share" data for behavioral advertising.
7. International transfers
Some providers are outside Brazil/the EU (for example the US). We use standard contractual clauses (SCCs / the ANPD's standard clauses), an adequacy decision or another valid mechanism: [OWNER: mecanismo por provedor].
8. Chat moderation
Public chat (game, site, Discord) goes through automatic moderation, with AI support, which can mute for up to 10 minutes or delete messages with high confidence. Larger penalties always depend on a person. Private messages are not read, except the excerpt that you or the other side report. You can see the AI's actions on your account and ask for human review. See Assistant (AI).
9. Discord and Telegram
- What the bot reads. The bot on the official Discord server reads the content of messages in the channels it can access, for automatic moderation. It does not read direct messages. The text of ordinary messages is not stored.
- What is kept. Only when a message is flagged (suspicious link, ad selling coins/items for real money, staff impersonation, serious abuse etc.) we keep an excerpt of up to 160 characters, the Discord author id, the channel and the date. Period: 90 days, then the excerpt is deleted [D13]. The excerpt is not sent to Telegram.
- Automated decision and AI. The analysis uses rules and, for messages of at least 12 characters that the rules did not settle, an AI model from Anthropic (USA), which receives only the message text, with no id or username [D14]. With high confidence the system can delete the message or mute for up to 10 minutes; any larger penalty depends on a person. You can ask for human review (see Assistant (AI) and section 5).
- Telegram. We use private staff channels on Telegram for operational alerts (sales, fraud, moderation, security). They carry event types and internal ids, not the content of your messages [D15]. Access is restricted to the team.
- Linking with Discord. If you link your account, we keep your Discord id and username and use the link for roles and security notices by direct message.
10. Streamer and viewer programme
- Viewers (Watch & Win). When you link Twitch, we keep your id and username and the access tokens (encrypted). While you watch a partner channel on our page or in the client, we record one entry per minute watched (35 days) [D16], and we send presence checks (a code to type) to prevent automated accounts; the answers and viewing sessions are kept for 90 days [D18]. Only the minutes up to the last passed check count towards rewards. Daily totals stay on the account.
- Partner streamers. We keep Twitch login and display name, per-minute audience samples and raids (120 days, channel data) [D17], invoicing, and payout details (encrypted) and tax document, for up to 5 years after the last payout, as a tax obligation [D19].
- Token validation. Every hour we validate the stored tokens with Twitch; an invalid token is renewed once and, if it stays invalid, deleted [D20].
- Fraud. Unusual audience patterns trigger review by a person before any payment block.
11. Artificial intelligence
Support and part of moderation use AI. Text you write to the Assistant is sent to Anthropic to generate the reply and is kept for 1 year as a case (then summarized without personal data). The AI never decides alone about money, coins, items, account ownership or bans longer than 24 hours.
12. Cookies
We use only essential cookies at launch. Details in Cookies. We respect the browser's Global Privacy Control (GPC) signal.
13. Children and teenagers
Rated 12+. Purchases require 18+ or guardian authorization. See Age. If we find minors' data without a valid basis, we delete it.
14. Security and incidents
Encryption in transit (TLS), strongly hashed passwords, 2FA, minimal access, encrypted backups. In case of a relevant security incident, we notify the ANPD and the people affected and, in the EU, the authority within 72 hours.
15. Changes
This policy is versioned. Relevant changes are announced; we keep the version you accepted.