Privacy Policy
How we collect, use, and protect your personal data when you use Arcaforge, in accordance with applicable law, including the Brazilian General Data Protection Law (LGPD).
Last updated: July 2026
Data controller
The controller of personal data processed through Arcaforge is the operator identified in our Legal Notice. For privacy matters, contact privacy@arcaforge.com.br.
Data we collect
Account data you provide when you register or sign in, such as your username, email, and the provider identifier when you continue with Google, Discord, or Steam.
Usage and transaction data generated as you use the service, including case opens, battles, upgrades, exchanges, inventory, balance movements, credit purchases, and item deliveries.
Identity verification data you submit for item delivery (KYC), such as photos of your identity document and a selfie, along with device and usage information such as IP address and browser details when necessary for security, fraud prevention, or legal compliance.
Purposes and legal bases
We process personal data to operate your account, provide the digital entertainment service, process credit purchases, arrange item deliveries, run the affiliate program, prevent fraud and multi-accounting, comply with legal and verification obligations, maintain security, and improve the service.
Processing is based on contract performance, legal or regulatory obligations, legitimate interests compatible with your rights (such as security and fraud prevention), and consent where required, always observing LGPD principles of purpose, adequacy, necessity, and transparency.
We do not sell your personal data.
Proportionate verification
Identity verification is requested when needed for item delivery, fraud prevention, or legal compliance. We collect only the documents and technical data strictly necessary for those purposes and retain them only for the period compatible with the stated purpose.
Service providers
We rely on trusted providers to run the platform: Supabase for authentication and data storage, Stripe for payment processing, Steam for sign-in and for delivering items through our delivery provider, and Google and Discord for optional sign-in. These providers process your data only as needed to deliver their part of the service.
Referral and affiliate tracking
When you arrive through a referral link or enter a referral code, we record the connection between your account and the referrer so that commissions and bonuses can be calculated.
Cookies, local storage, and connection records
We use cookies and local storage to keep you signed in, remember preferences such as your language, and understand how the service is used.
We may retain connection and technical logs needed to evidence account activity, security, fraud prevention, and electronic acceptance of terms, as permitted by applicable law, including the Marco Civil da Internet.
Data retention
We keep your data for as long as your account is active and as required to meet legal, security, and financial obligations. When you delete your account, related data such as balance, inventory, and history is removed, except where we must retain certain records by law.
Your rights
Under the LGPD and, where applicable, other laws, you may request access, correction, anonymization, portability, deletion, information about sharing, and revocation of consent when processing is based on consent. To exercise these rights, contact privacy@arcaforge.com.br.