Privacy Policy — version 2026-07-17. Applies to Fantástica Fábrica de Jogos.
Official store documents: Portuguese (prevails for Brazil) and English.
1. Who is responsible
The operator of the platform and of real-money sales is the supplier shown at checkout and below (acting as individual (natural person)). Nome completo: Leandro F.. CPF: ***.***.***-14. Trade name: Fantástica Fábrica de Jogos. Address / city: Sumaré. Contact: [email protected]. If any field shows as "—" on the site, real-money checkout stays blocked until configuration is complete — do not pay if the seller identity is not visible.
2. Scope
This Policy explains how Fantástica Fábrica de Jogos processes personal data on the site, sign-up, community, checkout, orders, refunds, purchase receipts, the Engrenagens store, and hosted games. Portuguese and English are the official languages of these documents; for Brazilian operations, Portuguese prevails if translations conflict.
3. Data we may process
Account: email, password (secured by the auth provider), username, full name (if provided), birth date and derived age. Checkout and store: CPF (required for real-money purchases), optional phone, orders (FFJ-n code, items, amounts, status, dates), refund history, and acceptance records for Terms, Privacy and Refund Policy (version + timestamp). Community and play: comments, likes, favorites, feedback, reports, scores, progression, cosmetics, Engrenagens, Factory Seals, and technical play-session data needed for security. Site usage: analytics/performance (e.g. GA4, Web Vitals) only if you allow metrics; ads (e.g. AdSense) only with ad consent. Security: rate limits, CAPTCHA when configured, abuse prevention. Protected ROM flows may use hashed network identifiers rather than storing raw IP. We do not request unnecessary sensitive data to use the store.
4. Purposes (plain language)
Perform the service: account, demos, unlocks, orders, receipts, refunds, moderation, Engrenagens economy. Legal claims and basic records: keep purchase/refund trails and, when needed, CPF linked to orders for proof and fraud prevention. Security: prevent abuse and economy exploits. Consent: analytics and personalized ads — you may refuse. We do not sell your email list. We do not use your CPF for marketing spam.
5. Recipients
Infrastructure/auth (e.g. Supabase), site hosting/CDN, payment provider when live checkout is enabled, Google for analytics/ads only with consent, and authorities when legally required. Admin keys never ship to the player browser.
6. International processing
Cloud providers may process data outside Brazil under their security and contractual safeguards. We keep processing limited to what the service needs.
7. Cookies and local storage
Essential: login session, locale, local cart, consent choice. Analytics/ads only after you allow them. The default is to deny analytics/ad storage until you choose. PWA/cache may store site files for performance.
8. Minors
Community accounts require age 13+. Real-money purchases require age 18+. The platform is not directed at children under 13. We may close under-age accounts when we learn of them.
9. Retention and deletion
Active accounts keep data needed to run the service. Account deletion soft-deletes the profile and community content where possible. We may retain for a reasonable period: order/refund records, legal acceptances, and minimal fraud-prevention links even after account deletion — not for marketing. Provider backups rotate on their schedules.
10. Your rights
You may request access, correction, deletion where applicable, information about sharing, and withdrawal of analytics/ad consent via the site contact email. We respond within a reasonable time. Absolute erasure may be limited by open disputes, security, or minimal legal retention.
11. Security
We use HTTPS, access control, validation, rate limits and database policies. No system is perfectly secure — contact us if you suspect account compromise.
12. Receipts and invoices
Digital purchases generate an in-account order receipt (FFJ-n). It is not an electronic tax invoice (NF-e/NFS-e). When the seller is an individual (PF), the platform issues a purchase receipt, not a company tax invoice. Buyer CPF is used for identity, support, abuse prevention and purchase records.
13. Changes
We may update this Policy. Current package version: 2026-07-17. Material changes are published on this page; re-acceptance may be required when we change the package version.
Contact and data-subject rights
To exercise your rights or ask about data: [email protected].