1. Introduction
Welcome to Cosmos & Scriptura. Our Privacy Policy is designed to reaffirm our commitment to the security and privacy of the information we collect from our users. This document follows widely accepted principles by international privacy laws, including GDPR (European Union), CCPA (California), LGPD (Brazil), and other global standards.
2. Data Minimization and Collection
We collect only the data strictly necessary for the functioning of the gamified platform. No information is requested without a legitimate, clear, and documented purpose. The data collected includes:
- Account Information: Username, email address (usually provided via social login, such as Google), and avatar.
- Progress Data: Level, XP (LUX), conquered relics, medals, and history of completed missions.
- Access Data: Daily login information to calculate the access streak.
3. Specific Purpose
Your data is used exclusively to:
- Authenticate and maintain the security of your account.
- Save and synchronize your profile progress (missions, XP, relics).
- Generate and display global and weekly rankings (only your `@username` and score data become public).
- Provide the public profile functionality, in case you wish to share your progress.
4. Transparency and Responsible Sharing
Cosmos & Scriptura values total transparency. We never sell your personal data.
Data sharing only occurs in scenarios strictly necessary to operate the platform:
- Infrastructure Providers: Cloud services (such as Oracle Cloud) where databases are hosted under strict security standards.
- AI Integration: The "Oracle" assistant (Google Gemini) temporarily processes questions sent during sessions but does not link the prompts to your identifiable data for training.
5. Clear and Informed Consent
The collection and processing of non-essential cookies only occur after your explicit acceptance in our Consent Banner. You have the option to manage your preferences at any time by accessing the Cookie Notice page.
6. Your Rights
According to data protection laws, you have the right to:
- Access and view all your stored data through the profile dashboard.
- Correct inaccurate information.
- Request the definitive deletion of your account and all associated data (which can be done directly in your profile settings).
- Revoke consent for cookies and analytical tracking at any time.
7. Security and Protection
We apply technical measures to protect your data against unauthorized access and leaks. This includes:
- Password encryption (hashing).
- Secure communication via HTTPS/SSL on all pages.
- Strict access controls to our databases.
8. Storage Limitation
We keep your data only for as long as your account is active. Upon requesting account deletion, your personal data is permanently deleted or anonymized in our production databases.
9. Incident Notification
In the unlikely event of a security incident that compromises your data, we will notify affected users and competent authorities within the legal deadlines.
10. Changes to this Policy
We periodically review our privacy practices. If there are significant changes, we will notify users through a notice on the platform or via email (if applicable).
11. Contact
If you have any questions about our Privacy Policy or how we handle your data, please contact us through our official Discord server or through the networks listed in the footer.
Last updated: May 2026