Privacy Policy

1. Who we are

This Policy explains how RuneCastle, based in Niterói, RJ, Brazil (“RuneCastle”, “we”), handles personal data, in accordance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018). We are the controller of the data collected on the website and in the beta sign-up. Contact for privacy matters: .

2. Data we collect

In the beta sign-up form:

• nickname and email;
• favorite class and the platform you plan to play on (computer, mobile or both);
• your consent to receive the invitation and news, and the date/time of the sign-up.

Automatically, when you visit the website: IP address, browser type and technical access data, recorded by the hosting servers for security and operation.

In the game (when the beta starts): account data, progress, items, chat messages, ranking, guild and technical performance data. This Policy will be updated to detail the game data before the beta begins.

We do not ask for ID documents, banking details, health data or other sensitive data.

3. What we use the data for

• sending the beta invitation and announcements about the game (legal basis: consent);
• organizing spots and understanding which classes and platforms interest the community (legitimate interest);
• keeping the service secure and preventing fraud and cheating (legitimate interest and compliance with legal obligations);
• complying with legal obligations and responding to authorities when required.

We do not sell your personal data.

4. Who we share it with

We use providers that process data on our behalf, under contract and only for the contracted service: hosting and database, email delivery and analytics or support tools, if adopted. The website also loads fonts from Google Fonts, which sends your IP address to Google. Some providers may be outside Brazil; in those cases we adopt the safeguards that the LGPD provides for international transfers. We may also share data to comply with a legal or court order.

5. How long we keep it

We keep sign-up data while the beta and launch are in progress, or until you ask for deletion or stop receiving our messages. Afterwards, we delete or anonymize the data, unless the law requires keeping it longer.

6. Your rights

At any time, you may request:

• confirmation that we process your data, and access to it;
• correction of incomplete or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• portability;
• deletion of data processed based on your consent;
• information about who we share your data with;
• withdrawal of consent, without affecting what was already processed.

To exercise these rights, write to . You may also complain to Brazil's National Data Protection Authority (ANPD).

7. Users in other countries

If you live in the European Union, the United Kingdom or another country with its own data protection law, we also respect the rights provided by that law, within the limits that apply. Your data may be processed in Brazil and in other countries where our providers operate.

8. Emails and unsubscribing

You can stop receiving our emails at any time, through the unsubscribe link in the messages or by contacting us.

9. Security

We adopt technical and organizational measures to protect data, such as restricted access, encrypted communication (HTTPS) and permission controls on the database. No system is completely secure; in case of an incident that may cause relevant risk, we will notify you and the ANPD as required by law.

10. Children and teenagers

The website is not directed to children under 13 and we do not knowingly collect their data. Teenagers must have a guardian's authorization. If we learn that a child's data was collected without authorization, we will delete it.

11. Changes to this policy

We may update this Policy. The date at the top shows the latest revision, and relevant changes will be announced on the website or by email.