Privacy Policy

Account: your e-mail address, the name and picture that Google, Discord, GitHub, Twitch or LINE share when you sign in with them, the username you choose, the date you confirmed the minimum age, and your sign-in sessions (IP address and browser). Content: your profile (avatar, about text and the game characters you list), the guides you publish and what you post in the community: topics, replies, comments, private messages, likes, reports, favorites lists, guild applications, announcements and events, and the pictures and videos you upload to the gallery (uploaded pictures are re-encoded, which removes hidden metadata such as the location). Notifications: the entries of your inbox and, if you turn it on, your browser push subscription. Technical data: IP address, browser and the pages requested, kept in our server logs. Error and speed reports: when a page fails or loads, the site sends the error message and loading times, without cookies or any identifier, to our own monitoring server so we can keep the site working (legitimate interest). We never ask for a password, payment details or identity documents.

We use account and content data to provide the service you ask for (performance of a contract). We use technical data to keep the site secure, prevent abuse and moderate the community (legitimate interest). Optional cookies, such as advertising cookies once ads are turned on, are used only with your consent where the law requires it. We keep records the law requires (legal obligation). We make no decisions with legal or similarly significant effects by automated means only.

The sign-in cookie and the record of your cookie choice are strictly necessary. Nothing else is set without your consent in the European Economic Area, the United Kingdom, Switzerland and Brazil. The Cookie Policy lists every cookie, and Cookie settings in the footer changes your choice at any time.

We never sell or rent personal data. We share it only with the providers that run the site for us, for that purpose:

• Cloudflare: content delivery, DNS, security, the Turnstile check on the sign-in form, e-mail routing and the storage of the site images and videos (R2).
• Our server host: a virtual private server where our API, database and error monitoring run, operated by us.
• Our e-mail delivery provider: sends sign-in links, moderation notices and the e-mail notifications you turn on, so it receives your e-mail address and the message.
• Google, Discord, GitHub, Twitch and LINE: only if you sign in with them. Discord also carries the alerts of our forum bot.
• Video sites (YouTube, Twitch, TikTok and the like): when you open a gallery video or a post that comes from there, your browser loads it from their site.
• Browser push services, if you turn on push notifications.
• Google Analytics: only with your consent to analytics cookies; receives the pages you visit, your browser and your IP address (used to estimate country and city, not stored), so we can count visits.
• Google AdSense: only if ads are turned on, and only with your consent where the law requires it.

Some of these providers process data outside your country, mainly in the United States. Those transfers rely on the European Commission's standard contractual clauses, the EU-US Data Privacy Framework where the provider is certified, and the standard clauses of the Brazilian data protection authority (ANPD).

Account data: until you close your account, plus the 30-day grace period. Content: until you delete it; when an account is closed, its guides, topics and replies stay without the name, and its private messages, likes, gallery items, characters, favorites lists and guild memberships are deleted. Notifications: 90 days after you read them, at most 180 days. View counts: anonymous daily counts, kept for 90 days. Server logs: 30 days. Backups: 30 days. Access records (IP address and time): 6 months, as Brazilian law (Marco Civil da Internet, art. 15) requires. Consent records: 5 years.

You can ask to access, correct, delete or receive a copy of your data, object to its use, and withdraw consent at any time. On the account page you can download your data as a JSON file and close your account yourself. For anything else, write to [email protected]; we answer within 15 days (LGPD) or one month (GDPR). You can also complain to the Brazilian authority (ANPD) or to the data protection authority of your EU country.

You must be at least 13 years old, or the minimum age in your country if it is higher, to create an account. The site is not directed to children. If we learn that an account belongs to someone younger, we close it and delete its data.

The site uses HTTPS everywhere, sign-in without passwords and a bot check on the sign-in form. Only the people who run the site can reach the database, and only to operate it.

When this policy changes, the date at the top changes too. For important changes we tell signed-in members on the site or by e-mail before they take effect.