Privacy Policy

1. Data Collected

We collect only what is essential for your experience:

• Account: email and password (the password is stored encrypted by Supabase) or, if you sign in with Google, the email and name of your Google account.
• Profile: username, avatar and preferred color.
• Characters: sheets, backstory, learned spells and the images you upload.
• Support: email, type and message, when you use the contact form.
• Technical data: when you visit the site, Vercel and Supabase log the IP address, browser and requested pages, for security and error diagnosis. On protected forms, Cloudflare Turnstile checks the IP and browser signals to tell people from bots. To count visits we use Cloudflare Web Analytics, which uses no cookies and does not identify you: it only records aggregate numbers, such as page views and load times.

2. Data Usage

Your data is used exclusively to:

• Keep you signed in and protect your account.
• Save your characters and sync them across devices.
• Send account emails (sign-up confirmation and password reset) and reply to your support messages.

3. Sharing

We do not sell your data to third parties. To run RPG World we use these services: Supabase (database, sign-in and image storage), Vercel (hosting), Resend (email delivery), Cloudflare Turnstile (bot protection on sign-up, the magic link, password reset and the contact form; and anonymous visit counts, with Cloudflare Web Analytics), Discord (where the support team receives the messages sent through the contact form: email, type, message and, if you are signed in, your account id) and Google (only if you sign in with Google). Today your characters and your profile are visible only to you; avatar images are stored at a public address that is not listed anywhere.

4. Your Rights

In accordance with LGPD/GDPR, you have the right to access, correct, or delete your data. While the automatic deletion feature is under development, you can request the total deletion of your account and all associated data through our Discord server, telling us your account's email. We will process your request within 5 business days.

5. Cookies

We only use necessary cookies: the ones for your sign-in session, the language you chose and your time zone. We do not use advertising or tracking cookies.

6. International Data Transfer

To operate the system, we use third-party infrastructure (such as Supabase, Vercel, Resend and Discord). As a result, your data may be processed and stored on servers located outside of Brazil, specifically in the United States. By using RPG World, you consent to this international transfer, conducted under strict security and encryption standards.

7. Data Retention and Deletion

Your data remains stored in our database as long as your account is active. If your account remains inactive for more than 24 months, we reserve the right to perform automatic deletion for security and resource saving.

8. Contact and Data Controller

For any questions regarding your privacy or to exercise your rights (LGPD), talk to the team on our Discord server. For matters about your account, prefer a direct message to the team over the public channels.