Privacy Policy — version 2026-07-22. Applies to Fantástica Fábrica de Jogos.
Official store documents: Portuguese (prevails for Brazil) and English.
1. Who is responsible
The operator of the platform and of real-money sales is the supplier shown at checkout and below (acting as individual (natural person)). Nome completo: Leandro F.. CPF: ***.***.***-14. Trade name: Fantástica Fábrica de Jogos. Address / city: Sumaré. Contact: [email protected]. If any field shows as "—" on the site, real-money checkout stays blocked until configuration is complete — do not pay if the seller identity is not visible.
2. Scope
This Policy explains how Fantástica Fábrica de Jogos processes personal data on the site, Factory Launcher, sign-up, community, checkout, orders, refunds, purchase receipts, the Engrenagens store, and distributed games. Portuguese and English are the official languages of these documents; for Brazilian operations, Portuguese prevails if translations conflict.
3. Data we may process
Account: email, password (secured by the auth provider), username, full name (if provided), birth date and derived age. Checkout and store: CPF (required for real-money purchases), optional phone, orders (FFJ-n code, items, amounts, status, dates), refund history, and acceptance records for Terms, Privacy and Refund Policy (version + timestamp). Community and play: comments, likes, favorites, feedback, reports, scores, progression, cosmetics, Engrenagens, Factory Seals, and technical play-session data needed for security. Launcher and device: random device identifier, user-provided computer name, public key, launcher/OS version, authorized library, installs, updates, sanitized failure codes, and game sessions/heartbeats. Private keys and refresh tokens stay in the operating-system vault and are not sent as telemetry. We do not create an invasive hardware fingerprint. Site usage: navigation/performance data (e.g. Google Analytics and Web Vitals) and advertising (e.g. Adsterra) to operate, improve, and monetize the platform. Security: rate limits, CAPTCHA when configured, abuse prevention. Protected ROM flows may use hashed network identifiers rather than storing raw IP. We do not request unnecessary sensitive data to use the store.
4. Purposes (plain language)
Perform the service: account, demos, unlocks, orders, receipts, refunds, moderation, Engrenagens economy. Legal claims and basic records: keep purchase/refund trails and, when needed, CPF linked to orders for proof and fraud prevention. Security: prevent abuse and economy exploits. Legitimate interest / improvement and monetization: usage metrics (GA4) and advertising (Adsterra) to understand the audience, fund the service, and show ads. We do not sell your email list. We do not use your CPF for marketing spam.
5. Recipients
Infrastructure/auth/private distribution (e.g. Supabase and Cloudflare R2), site hosting/CDN, payment provider when live checkout is enabled, Google for analytics (GA4), Adsterra for ads, and authorities when legally required. Admin keys never ship to the player browser or launcher renderer.
6. International processing
Cloud providers may process data outside Brazil under their security and contractual safeguards. We keep processing limited to what the service needs.
7. Cookies and local storage
Essential: login session, locale, and local cart. Analytics/ads: Google Analytics and Adsterra cookies/identifiers for metrics and advertising. PWA/cache may store site files for performance.
8. Minors
Community accounts require age 13+. Real-money purchases require age 18+. The platform is not directed at children under 13. We may close under-age accounts when we learn of them.
9. Retention and deletion
Active accounts keep data needed to run the service. Account deletion soft-deletes the profile and community content where possible. We may retain for a reasonable period: order/refund records, legal acceptances, device/license security records and minimal fraud-prevention links even after account deletion — not for marketing. Structured launcher logs stay locally with bounded rotation; provider backups rotate on their schedules.
10. Your rights
You may request access, correction, deletion where applicable, information about sharing, and withdrawal of analytics/ad consent via the site contact email. We respond within a reasonable time. Absolute erasure may be limited by open disputes, security, or minimal legal retention.
11. Security
We use HTTPS, access control, validation, rate limits and database policies. No system is perfectly secure — contact us if you suspect account compromise.
12. Receipts and invoices
Digital purchases generate an in-account order receipt (FFJ-n). It is not an electronic tax invoice (NF-e/NFS-e). When the seller is an individual (PF), the platform issues a purchase receipt, not a company tax invoice. Buyer CPF is used for identity, support, abuse prevention and purchase records.
13. Changes
We may update this Policy. Current package version: 2026-07-22. Material changes are published on this page; re-acceptance may be required when we change the package version.
Contact and data-subject rights
To exercise your rights or ask about data: [email protected].