Privacy Policy

1. Who looks after your data

Controller: [NOME DO RESPONSÁVEL], [CNPJ/MEI]. Contact and data protection officer (DPO): [E-MAIL DE CONTATO].

2. Data we collect

Account: e-mail, trainer name, password (stored only as an Argon2id hash, never in plain text) and preferred language.

Technical: IP address, session identifier (cookie), browser/device (user agent) and server access and error logs.

Game: progress, Pokémon, items, in-game transactions, global chat messages and reports.

Phone notifications (optional): the delivery address your browser generates, only if you turn them on.

Wallet: the public address of the Solana wallet you sign in with. We never receive your private key or seed phrase, and signing in does not move funds.

3. What we use it for

To create and keep your account and make the game work (performance of contract).

For security, fraud and cheating prevention, chat moderation and bug investigation (legitimate interest).

To comply with legal obligations, such as payment records (legal obligation).

To send phone notifications, only if you turn them on, and you can turn them off at any time (consent).

We do not use your data for advertising and we do not sell data.

4. Who we share it with

Hosting and storage provider (DigitalOcean), where the game server and files run.

No payment provider: the game does not process payments.

Your browser's notification service (Google, Apple or Mozilla), only if you turn notifications on.

Authorities, when the law or a court order requires it.

Inside the game, other players see your trainer name, public profile, showcase and the messages you send in global chat.

5. How long we keep it

Global chat messages: 7 days. Reports: 90 days.

Server logs: rotated automatically by size (usually a few days). Database backups: up to 14 days.

Account and progress: while the account exists. During the alpha phase, game data may be deleted at the end of testing.

Payment records: for as long as the law requires.

[LEGAL REVIEW: confirm the access-log retention required by the Brazilian Internet Civil Framework (Marco Civil da Internet), art. 15.]

6. Cookies and local storage

We use only what is necessary: the session cookie (to keep you logged in), the CSRF protection cookie and the language cookie. Your browser also stores game preferences, such as audio volume.

We use no advertising or third-party tracking cookies.

7. Your rights

You may request: confirmation that we process your data, access, correction, anonymisation or deletion, portability, information about sharing and withdrawal of consent (LGPD, art. 18).

Ask by e-mail at [E-MAIL DE CONTATO]. You may also complain to the Brazilian National Data Protection Authority (ANPD).

8. Security

Encrypted connection (HTTPS), password stored only as a hash, restricted database access, and logs without password, token or e-mail. No system is 100% secure; if a relevant incident happens, we will notify as the law requires.

9. International transfer

The servers are in the United States (DigitalOcean). When you use the game, your data is processed there, with the protections of this policy.

10. Children and teenagers

Players under 18 should play with a guardian's knowledge. Data of children under 12 is only processed with specific consent from a parent or guardian (LGPD, art. 14).

11. Changes and contact

We may update this policy; the version is shown at the top of this page. Contact: [E-MAIL DE CONTATO].