Controller: [LEGAL ENTITY NAME] — [COMPANY ID / CNPJ], operating as WildSouth Games (“we”). Data Protection Officer: [DPO EMAIL] General contact: [email protected]
This Policy describes how we process personal data on playeldvorn.com and in the Eldvorn game services, in compliance with Brazil’s LGPD (Law No. 13.709/2018) and, where applicable, the GDPR.
1. Data we collect
| Context | Data | Purpose |
|---|---|---|
| Beta waitlist | Email address, language, signup source | Notify you about the beta opening and game updates |
| Player account | Email, password (stored as a hash), creation date | Authentication and game access |
| Game usage | Characters, progression, inventory, in-game actions, connection logs | Operate the persistent world, enforce rules, prevent fraud |
| Security | IP address, access timestamps, error logs | Abuse prevention, rate limiting, and technical diagnostics |
We do not collect payment data at this time. We do not use third-party tracking or advertising cookies.
2. Legal bases
- Consent — joining the waitlist.
- Contract performance — player account and game operation.
- Legitimate interest — security, fraud prevention, and service improvement.
- Legal obligation — records required by law, such as access logs.
3. Sharing
Personal data is processed by providers that host and support the service, including Render (API hosting), Supabase (database), Upstash (cache), and Cloudflare (site hosting and protection). These providers may process data outside your country; in that case we adopt appropriate contractual safeguards. We do not sell personal data.
4. Retention
- Waitlist: until you request removal or the list is closed.
- Account: while the account is active. After deletion, game data is removed or anonymized unless retention is required by law.
- Access logs: for the minimum legal period (6 months under the Brazilian Internet Framework).
5. Your rights
You may request confirmation, access, correction, anonymization, portability, deletion, or withdrawal of consent at any time (LGPD art. 18; GDPR arts. 15–21) by writing to [DPO EMAIL]. Brazilian users may also file a complaint with the ANPD.
6. Local storage
The site and game use your browser’s localStorage to keep your session (JWT token) and preferences. We do not use third-party cookies.
7. Minors
Eldvorn is not directed at children under 13. Accounts for users between 13 and 18 require consent from at least one legal guardian, per LGPD art. 14.
8. Security
We apply reasonable technical measures (hashed passwords, HTTPS, access control, rate limiting). No system is 100% secure; in the event of a relevant incident, we will notify affected users and authorities as required.
9. Changes
We may update this Policy; the revision date appears at the top of this page. Material changes will be announced on the site or by email.