VERSION 2026-08-18 · DEVELOPMENT

Privacy Policy

This policy explains how personal data is processed when you create an account and use Roadbound: The Unseen Kingdoms.

Development version. The controller's formal identity and privacy channel must be configured and reviewed before commercial publication.

1. Controller and contact

The stated controller of the service is Moodlr, and the product is developed by Moodlr Dev Hub. The legal entity and privacy-request channel will be published before commercial launch.

2. Data processed

  • email, display name, password hash and acceptance records;
  • session identifiers, IP address, user agent and access dates;
  • progress, characters, inventory, choices, expeditions and reports;
  • technical security, defect and fraud-prevention records.

3. Purposes and legal bases

  • contract performance to create an account, save progress and provide the game;
  • legitimate interests in security, abuse prevention, diagnostics and improvement;
  • compliance with law or valid orders;
  • separate consent for future optional purposes.

4. Cookies and storage

We use a strictly necessary HttpOnly, SameSite session cookie. The installable app may cache static files. The MVP uses no advertising cookies.

5. Sharing and transfers

In local development, data remains in the machine's PostgreSQL database. In production, hosting, database, observability and support processors may handle only necessary data under appropriate contracts.

6. Retention and security

Account data is kept while active and as needed for obligations or legal defense. Sessions expire after 30 days. We use access controls, hashes and separation of public data from secret expedition results.

7. Data-subject rights

Subject to Brazil's LGPD, you may request confirmation, access, correction, sharing information, applicable portability, objection, withdrawal and deletion where legally available.

8. Children and teenagers

The service is not directed to children. A public release must define its age rating and appropriate controls. Guardians should supervise use by minors.

9. Incidents and changes

Relevant incidents will be assessed and reported as required by law. Material policy changes receive a new version and, when necessary, renewed acceptance.

10. References

This policy considers Brazil's Law 13,709/2018 (LGPD), ANPD guidance and Law 12,965/2014 (Marco Civil da Internet).