Privacy Policy

1. Information We Collect

We collect the following information when you visit our website:

• Website usage information (pages visited, session duration)
• Technical data (IP address, browser type, operating system)
• Information voluntarily provided through contact forms

2. How We Use Your Information

We use your information to:

• Improve user experience on the website
• Respond to your inquiries and requests
• Analyze website traffic and usage
• Maintain website security and functionality

3. Cookies and Similar Technologies

We use cookies and similar technologies to improve your browsing experience and analyze website traffic. You can control cookie usage through your browser settings.

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, except when necessary to provide our services or when required by law.

5. Data Security

We implement appropriate security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

6. Your Rights

You have the right to:

• Access your personal information that we hold
• Request correction of incorrect information
• Request deletion of your information
• Withdraw consent for data processing

How to request deletion

If you have a supporter account, the request is made in your account area and runs immediately: the record is deleted and any active subscription is cancelled first, so nothing keeps being charged. Without an account, just ask through support.

What is NOT deleted, and the legal basis for each:

• The record of a ban, when one exists (date and reason). Basis: Art. 18, §4 of the LGPD — regular exercise of rights. Without keeping it, a deletion request would serve to bypass the decision and return with a new account.
• Identity markers, which are not personal data: they are irreversible hashes (truncated HMAC-SHA256), and Art. 12 of the LGPD places anonymised data outside the scope of the law. Your tax ID is never stored, before or after.
• The event trail, ANONYMISED — the identifier is replaced by a random marker. What happened and when remain, with no link to you. This preserves the ability to investigate a leak of closed material.
• Payment records at Asaas, which are the gateway's tax obligation and not under our control. Their deletion must be requested directly from them.

7. Fraud and Repeat-Offender Prevention

When you support one of the games, we process your tax ID (required by Asaas to issue the charge) and your IP address for one additional purpose: preventing an account closed for rule violations from returning under a new registration.

This data is NOT stored in readable form. It is converted into an irreversible code (HMAC-SHA256) and the original value is discarded. In practice: the system can ask whether a document matches another account, and cannot recover the document itself. A breach of our database would not expose anyone's tax ID.

The IP address is reduced to its network range before conversion, which deliberately lowers identification precision.

Legal basis: legitimate interest (Art. 7, IX of Brazil's LGPD), for fraud prevention and the security of data subjects and third parties.

Automated decisions and your right to review

A support request may be automatically declined when the data indicates a repeat of a closed account. You have the right to human review (Art. 20 of the LGPD).

• Automatic refusal happens only when a prior closure is associated with the same data. Coincidences without that history are merely logged, and the request proceeds normally.
• To request a review, open a ticket on our Discord. Every review is done by a person, and the answer explains the reason.
• The irreversible codes are kept while the closure history remains relevant, and deleted on request when no closure is associated.

8. Contact

For privacy-related questions or to exercise your rights, please contact us at: contato@harlleybastos.com.br