Legal
Privacy Policy
How we collect, use and protect personal data on this website, and how to exercise your rights under the LGPD.
Version pending company approval
1. Who is responsible for your data
This Privacy Policy explains how personal data is processed on the website www.idle.online (the “Website”), operated by Idle Online.
The data controller (controlador), under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — Law No. 13,709/2018, “LGPD”), is:
- Legal name: [Legal name — pending publication]
- CNPJ: [CNPJ — pending publication]
- Registered address: [Registered address — pending publication]
- Data protection officer (encarregado): [Encarregado — pending publication] — [Encarregado contact — pending publication]
2. Scope of this policy
This policy covers the Website only: its pages, the support contact form and the technical operation of the Website.
Each game operated by Idle Online runs on its own website and may have its own privacy policy covering game accounts, gameplay and purchases. When you use a game, that game's policy also applies. Links to each game's official website are available on its page in our game portfolio.
3. What data we process
Data you give us through the contact form
- Full name and email address, so we can reply to you;
- The topic, the related game (if any), the subject and the content of your message.
Data collected automatically
- Technical connection data — such as IP address, date and time of access, the page requested and browser information — recorded in server logs for security and to operate the Website;
- When you submit the contact form, your IP address is used temporarily to limit abusive or automated submissions.
Cookies and similar technologies
The Website does not use advertising cookies. Optional analytics are only activated with your consent. See the Cookie Policy for details.
We do not ask for sensitive personal data (as defined in LGPD art. 5, II) through the Website. Please do not include it in your messages.
4. Why we process it, and on what legal basis
| Purpose | Data | Legal basis (LGPD art. 7) |
|---|---|---|
| Answer your message and provide support | Contact form data | Your request and our legitimate interest in responding (art. 7, V and IX); exercise of rights (art. 7, VI) where applicable |
| Keep the Website secure and prevent abuse and spam | Technical connection data | Legitimate interest (art. 7, IX) |
| Keep access logs as required by law | Access logs | Compliance with a legal obligation (art. 7, II) — Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014, art. 15) |
| Understand how the Website is used (only if enabled) | Analytics cookies and usage data | Consent (art. 7, I), which you can withdraw at any time |
6. International transfers
Some providers may store or process data outside Brazil. When this happens, we rely on the mechanisms allowed by LGPD art. 33, such as standard contractual clauses, and require an adequate level of protection.
7. How long we keep data
Contact messages are kept for as long as needed to handle your request and any follow-up, and afterwards only where necessary to comply with legal obligations or to exercise rights in legal proceedings.
Access logs are kept for at least six months, as required by art. 15 of Law No. 12,965/2014, and then deleted or anonymized.
8. Your rights
Under LGPD art. 18, you may request at any time:
- confirmation that we process your personal data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- portability of your data to another provider, in accordance with regulations;
- deletion of data processed on the basis of your consent;
- information about the entities we share data with;
- information about the possibility of not giving consent and its consequences;
- withdrawal of consent.
To exercise these rights, use the contact form and choose “Privacy & legal”. We may need to confirm your identity before answering. You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD).
9. Security
We use technical and organizational measures appropriate to the risks involved, including encrypted connections (HTTPS), restricted access to messages and protections against automated abuse. No system is completely secure; if a security incident may cause relevant risk or damage to you, we will notify you and the ANPD as required by LGPD art. 48.
10. Children and adolescents
The Website is not directed at children. Personal data of children and adolescents is processed in their best interest, as required by LGPD art. 14. If you are a parent or guardian and believe a child has sent us personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this policy to reflect changes in the Website or in the law. The date of the current version is shown at the top of this page.
12. Contact
For any question about this policy or your personal data, contact our data protection officer at [Encarregado contact — pending publication] or use the contact form.