Privacy Policy

1. Data Collected

When registering as a mercenary in our lands, we collect the following information entrusted to us:

• Adventurer name (username) and email address
• Authentication data necessary to protect your identity in the realm
• Date of birth, for minimum age verification
• Progress information, achievements, and in-game interactions
• Technical data of the device used to access the realm (browser, operating system, IP address, screen resolution)
• Activity logs and session history in our lands
• Transaction and purchase data within the realm (when applicable)
• Communication information exchanged through in-game channels (chat, messages)
• Approximate geolocation data derived from IP address

We do not collect sensitive data (racial or ethnic origin, religious conviction, political opinion, health or sexual life data) except when strictly necessary and with specific consent.

2. How We Use Your Data

The information entrusted to us is used for the following purposes:

• Maintain and improve your gaming experience in the realm of Elariam
• Ensure the security of your account and prevent illicit activities
• Personalize your journey and offer relevant content
• Communicate updates, events, and news from the realm
• Generate statistics and rankings among mercenaries
• Process transactions and purchases made in the game
• Moderate content and ensure compliance with rules of conduct
• Fulfill legal and regulatory obligations
• Respond to requests from competent authorities

3. Legal Basis for Processing

As required by the LGPD (art. 7), all processing of personal data carried out by the Lords of Elariam is based on at least one of the following legal bases:

• Contract performance (art. 7, V): processing necessary for the provision of gaming services, account creation and maintenance, purchase processing, and delivery of contracted functionalities.
• Consent (art. 7, I): when we request your express authorization for specific purposes, such as sending marketing communications, advanced experience personalization, and use of non-essential cookies. Consent may be revoked at any time.
• Legitimate interest (art. 7, IX): to ensure game security, prevent fraud, improve our services through analytics, and protect the rights of the Lords of Elariam, always respecting the rights and expectations of the player.
• Compliance with legal obligation (art. 7, II): to meet legal and regulatory requirements, such as the retention of access logs required by the Brazilian Internet Civil Framework.
• Regular exercise of rights (art. 7, VI): for the exercise of rights in judicial, administrative, or arbitration proceedings.

4. Cookies and Technologies

Just as the scribes of the realm record the deeds of heroes, we use cookies and similar technologies to:

• Keep your session active while you explore our lands
• Remember your preferences and game settings
• Analyze how adventurers navigate the realm to improve the experience
• Ensure the security and integrity of the domain

You may manage your cookie preferences through your browser settings, although this may limit some functionalities of the realm.

5. Data Sharing

Your data is treated as sacred relics. We do not sell or trade your personal information. We may share it only under the following circumstances:

• With service providers who assist us in operating the realm (hosting, analytics, support), through contracts that ensure an equivalent level of protection
• When required by law, court order, or competent authority
• To protect the rights, property, or safety of Elariam and its adventurers
• Public ranking information and achievements visible to other players
• With payment processors for the completion of in-game purchases

All third parties who access personal data on our behalf are bound by confidentiality and data protection agreements, as required by the LGPD.

6. Data Retention

Adventurers' personal data is retained only for the time necessary to fulfill the purposes for which it was collected, observing the following periods:

• Account and profile data: retained while the account is active. Upon deletion request, data will be eliminated within 30 (thirty) days, except where legal retention obligations apply.
• Application access logs: retained for a minimum period of 6 (six) months, as required by the Brazilian Internet Civil Framework (art. 15).
• Financial transaction data: retained for a period of 5 (five) years, in accordance with applicable tax and fiscal legislation.
• Data for regular exercise of rights: retained while the possibility of litigation persists, respecting applicable statute of limitations periods.
• Banned account data: retained for the period necessary to prevent fraud and ensure the effectiveness of the sanction, limited to 5 (five) years.

After the end of the retention period, data will be securely deleted or irreversibly anonymized.

7. International Data Transfer

Some of our service providers and infrastructure may be located outside Brazilian territory. When your data is transferred to other realms (countries), we ensure that:

• The transfer will only occur to countries that provide an adequate level of protection, as assessed by the National Data Protection Authority (ANPD), or through standard contractual clauses that ensure data protection.
• Recipients will be bound by contractual protection obligations equivalent to those provided for in Brazilian legislation.
• The player will be informed about the transfer and may exercise their rights regardless of the location of the data.

Currently, we use hosting and processing services that may store data on servers in the United States and the European Union, all protected by adequate contractual clauses.

9. Security Incidents

In the event that the walls of our realm are breached and a security incident occurs that may pose a relevant risk or harm to adventurers, the Lords of Elariam commit to:

• Notify the National Data Protection Authority (ANPD) within a reasonable timeframe, as determined by current regulations (art. 48 of the LGPD).
• Notify affected players, informing them of the nature of the compromised data, the risks involved, and the measures adopted to mitigate damages.
• Adopt immediate technical and administrative measures to contain the incident, restore security, and prevent new occurrences.
• Maintain an internal record of all security incidents, regardless of their severity, for audit and continuous improvement purposes.

10. Minors

The protection of young adventurers is a sacred priority of the realm of Elariam. We observe the following guidelines:

• The game Elariam is intended for players with a minimum age of 13 (thirteen) years. We do not intentionally collect data from children below this age.
• For players between 13 and 18 years of age, data processing will be carried out in their best interest, based on specific and prominent consent given by at least one parent or legal guardian, in accordance with art. 14 of the LGPD.
• Data collected from minors will be limited to what is strictly necessary for the provision of the service, applying the principle of minimization in a reinforced manner.
• Parents or legal guardians may, at any time, consult the data processed relating to the minor under their responsibility, request correction or deletion, through the contact channels indicated in this policy.
• Should we become aware that data has been collected from children under 13 years of age without adequate consent, we will proceed with the immediate deletion of such information.

11. Your Rights

As a citizen of the realm, you have the following rights over your personal data, as provided for in the Brazilian General Data Protection Law (LGPD, arts. 17 to 22):

• Confirmation of the existence of processing of your personal data
• Access and obtain a copy of your personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data under the LGPD
• Request the portability of your data to another service provider
• Request the deletion of data processed based on consent
• Be informed about the public and private entities with which your data has been shared
• Be informed about the possibility of not providing consent and its consequences
• Revoke consent at any time, through express request
• Petition the National Data Protection Authority (ANPD) in case of non-compliance with legislation
• Object to processing carried out based on a hypothesis of consent waiver, in case of non-compliance with the LGPD

To exercise any of these rights, contact us through the channels indicated in the Contact section. We will respond to your request within 15 (fifteen) days, in accordance with art. 18, par. 5 of the LGPD.

8. Security

We employ the most robust digital walls to protect your information. We use encryption, access controls, and continuous monitoring to ensure that your data remains secure within our domains. However, no fortress is absolutely impregnable, and we cannot guarantee absolute security against all threats of the digital world.

12. Data Protection Officer (DPO)

In compliance with art. 41 of the LGPD, the Lords of Elariam have designated a Data Protection Officer, responsible for:

• Accepting complaints and communications from data subjects and the ANPD
• Providing clarifications and taking appropriate measures
• Guiding realm collaborators on data protection practices
• Performing other duties determined by the controller or by legislation

Data Protection Officer: Elariam Data Protection Team

Email: dpo@elariam.com

The Data Protection Officer may be contacted at any time for clarifications regarding data processing carried out by the realm of Elariam.

13. Contact

If you wish to exercise your rights, clarify questions, or send a message to the data guardians of the realm, please contact us through the following channels:

General email: contato@elariam.com

DPO email: dpo@elariam.com

We commit to responding to your request within 15 (fifteen) days, as provided for in the LGPD. In case of complex requests, this period may be extended with justification provided to the data subject.