1. Who is responsible
The controller of the personal data processed in the game is: Lucas Arcanjo, responsável pelo projeto Grand Pokémon Adventure.
- Contact and data protection officer (DPO): contato@idlegames.online
2. What data we process
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| create and protect the account, recover access, service notices | performance of a contract | |
| Password | authentication (we only store a cryptographic hash, never the password) | performance of a contract |
| Character name and game data (Pokémon, items, currency, progress, market) | provide the service | performance of a contract |
| Chat messages | chat operation and moderation | performance of a contract and legitimate interest |
| IP address and technical access data | security, abuse limits, fraud prevention | legitimate interest |
| Audit log (account actions, transactions) | game integrity, dispute resolution | legitimate interest and legal obligation |
| Acceptance of the terms (version, date and time) | proof of acceptance of the terms | compliance with obligations and exercise of rights |
| Purchase orders (amount, date, quantity and the payment identifier at Stripe); card data stays only with Stripe | process the purchase, refunds, reports and restoring what was bought | performance of a contract and legal obligation |
We do not collect sensitive data, do not build profiles for advertising and do not sell personal data.
3. How we use the data
To create and maintain your account, run the game, keep the market and chat safe, prevent fraud and abuse, meet legal obligations and answer your requests. Technical logs are used for security and to investigate problems reported by players.
4. Who we share it with
- Infrastructure providers that host the game and the database: Contabo (servidor virtual privado).
- Bot and abuse protection, when enabled (for example, Google reCAPTCHA or a network protection service such as Cloudflare).
- Payment provider: Stripe (Stripe Payments Brazil and group companies), which processes the card. From it we only receive the payment confirmation and an identifier; we neither see nor store the card number.
- Authorities, when there is a legal obligation or a court order.
These providers process data only to provide the contracted service. Some may be outside Brazil (see International transfer).
5. International transfer
The servers may be outside Brazil. In that case we adopt the safeguards provided in the LGPD, such as contracts with providers and security measures.
6. How long we keep it
- Account and game data: as long as the account exists.
- Transaction audit logs: for the time needed for game integrity and possible disputes, and for legal deadlines.
- Purchase history and restoration credits: kept even after the game is reset, for as long as tax law requires and to refund and restore what was bought.
- Technical hunt logs: a short time (hours to days), only to operate and verify the service.
- Security and error logs: 90 days.
When you delete the account, we erase or anonymize personal data, except what the law requires us to keep.
7. Security
Passwords stored with a hash, encrypted connection (HTTPS) once the service is in production, abuse limits, an audit log and restricted access to the database. No system is fully immune: in case of an incident with relevant risk, we will notify the people affected and Brazil's National Data Protection Authority (ANPD), as the law requires.
8. Your rights
At any time you may request: confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and deletion of the account and data. Write to contato@idlegames.online from the account's email. We will reply within a reasonable time and, if needed, ask for identity confirmation.
You may also complain to Brazil's National Data Protection Authority (ANPD).
9. Browser storage and cookies
- Essential (no consent needed): we store in your browser the login token and the game's preferences (for example, your sprite setting and the notice on this page already seen), using local storage (
localStorage). Without it the game does not work. - Advertising cookies and third-party trackers: we do not use them.
- Fonts and images: hosted by us, without calling third-party services for it.
- Security services (reCAPTCHA or network protection), when enabled, may set technical cookies needed for protection.
- If we ever use usage analytics or another non-essential cookie, we will ask for your consent first, with an option to decline.
You can clear the site's data in your browser settings. This ends your login.
10. Minors
The game is for people over 18. If we learn of a minor's account, it may be closed.
11. Changes to this policy
We may update this policy. The version in force is the one published here, with the date in the footer, and relevant changes will be announced in the game.
12. Contact
contato@idlegames.online