Privacy Policy
Contents
1. Purpose
This Policy explains what data WPG Project processes, why, with whom it is shared and for how long it is kept, when you use the tools, the Community, the Feed, VIP, the AI Coach, the WPG Store, donations, the partner launcher and sign-in.
2. Data we process
2.1. Account and sign-in
- ID, username and avatar of the Discord account;
- e-mail (from Discord or from the e-mail and password sign-up);
- password, only in protected form (key derivation function), never readable;
- linked sign-in providers and country of access;
- the two-step verification secret, when enabled;
- the in-game nickname given before a payment, used to identify who paid.
2.2. Identity registration (optional)
In Profile > Account, "Complete your profile" asks for full name, date of birth and an ID document. These three fields are encrypted. Only the calculated age, the document type, the submission date and a value derived (hash) from the document stay readable internally, used against fraud and multiple accounts. The document never appears on the public profile, in the ranking or in any public response. [Pending legal validation] Legal basis, necessity and retention period of this registration.
2.3. Technical and security data
- IP address and browser, for security, abuse prevention and new-device sign-in alerts;
- approximate country, given by the network, for language, presentation and to know whether the AI Coach serves that country;
- account security event log (sign-in, sign-out, important changes), with date, IP and browser;
- active sessions and recognised devices.
2.4. Content you create
- Feed posts, comments and likes;
- channel, group and direct messages in the Community;
- uploaded images and videos;
- the game account levels you fill in on the tools and in the AI Coach's My Account.
2.5. Payments and acceptances
Payments go through Mercado Pago; no card data reaches WPG Project. We receive and keep the transaction ID, amount, status, and the e-mail and first name given by the payer. This is used to release VIP, the AI Coach plan or points, the Store item or to record the donation, for reconciliation and for refunds.
Before each purchase we keep the acceptance record: account, product, plan, amount, payment method, terms version, date and time and the transaction reference. We do not keep IP or card data in this record. You can see yours in Profile > Account > Purchases and accepted terms.
2.6. WPG Store, XP and referrals
The cosmetic items on your account and the ones equipped (shown on your public profile), your XP and level, and the code of whoever referred you, if any.
2.7. Partner launcher uploads
With your consent on the linking screen, the launcher sends reports of your spending and prizes in game events: a character identifier calculated inside the launcher (not the game account number), the nickname, server, region, event, week and the event numbers. We keep only a summary (hash) of the launcher token. Uploads start private; the numbers are added up, without identifying you, into the calculators' data.
2.8. Roles and permissions
Membership of the official Discord server and roles, used for VIP, AI Coach, Staff and communities.
3. WPG AI Coach
The AI Coach is an automated assistant. To answer, the site sends the AI provider (Anthropic) your question, the previous messages in the same conversation, public site data (calculators, events, values) and, if you filled them in, your game account levels. Your name, e-mail and sign-in ID are not sent to the AI.
- Conversations: are stored only in your browser (local storage), not on WPG's server.
- Questions to improve the Coach: the text of questions is kept without the name or account of who asked, for up to 13 months, so the team can see what the Coach could not answer.
- Usage per account: number of questions and AI usage per month, for up to 13 months, for points and cost control.
- Balance and plan: plan, period, points and the latest answers (code only, no text), for as long as the account exists.
- "Wrong answer": when you mark an answer as wrong, we keep the question, the answer and your comment, linked to your account, so the team can check it and return the point.
- Age: you give your date of birth; we keep only whether you are over 18 or not and the date of the statement, not the date of birth.
The AI provider processes data outside Brazil. [Pending legal validation] Legal basis and safeguards for this international transfer.
5. What we use it for
- authenticating and identifying the account;
- processing and proving purchases, terms acceptances, refunds and donations;
- providing the AI Coach and managing points;
- checking the AI Coach's minimum age;
- preventing fraud and multiple accounts and protecting the platform;
- moderating content and reviewing reports;
- building the calculators' combined data from launcher uploads;
- sending security messages and, if you want, general notices;
- maintaining and improving the platform.
[Pending legal validation] The legal basis for each purpose (contract, legal obligation, legitimate interest, consent).
6. Sharing and processors
WPG Project does not sell personal data. The services below process data only as far as each purpose requires:
- Cloudflare: hosting, database, files, network and geolocation; almost all data passes through it.
- Discord: sign-in, roles, support and Staff notices.
- Mercado Pago: payments for VIP, the AI Coach, the Store and donations. You enter payment details directly on its pages.
- Anthropic: the AI provider for the AI Coach; receives the content described in section 3.
- Resend: sending e-mails (verification, password, sign-in alerts, notices).
- RealtimeKit: Community voice, video and screen sharing, during the call.
- YouTube: only a public lookup of partner channels' latest video; none of your data is sent.
[Pending legal validation] Each processor's country of processing and international transfer safeguards.
7. Security
We use reasonable technical and organisational measures: encrypted identity registration, password stored only in protected form, checking the authenticity and amount of payment notifications, launcher tokens stored only as hashes, acceptance records with restricted access, and users ending their own sessions. No system on the internet is completely secure.
8. Retention
Data is kept only as long as needed for its purposes and legal obligations. Periods marked [PLV] depend on legal confirmation.
| Data | Period |
|---|---|
| Account (sign-in, e-mail, password) | While active; after 24 months [PLV] unused, with no VIP and no open purchase, it is anonymised after notice |
| Payments and terms acceptances | 5 years [PLV] after the purchase; then anonymised, keeping the accounting record |
| AI Coach questions (without the account) and usage per account | Up to 13 months |
| AI Coach "wrong answer" | Until the team decides and while the account exists [PLV] |
| Launcher uploads | While the account exists or until you ask for deletion; the token expires in 90 days |
| Reports and moderation | Reporter anonymised after 12 months [PLV]; the action stays while the account exists |
| Security logs (with IP) | 6 months [PLV] |
| Deleted posts and comments | Permanently removed after 30 days |
| Direct messages | Removed 30 days after both people delete them, or when either account is deleted |
| Files | With the content; unused files are removed within 30 days |
9. Controller and data protection officer
[Pending legal validation] The formal identification of the controller and the data protection officer's channel will be added in the final version. No name or address is shown because it is not confirmed.
10. Data subject rights
You can already: edit your display name and bio; end sessions; turn two-step verification on or off; see the security log; set notification preferences; see your terms acceptances; revoke the launcher link; and delete AI Coach conversations in the browser.
Under the LGPD, you can ask for confirmation, access, correction, anonymisation, deletion, portability and information about sharing, and withdraw consent, through the channels in section 13, subject to legal exceptions (such as records that must be kept). Self-service account deletion and data export are in development.
11. Minors
Minors may use the platform when represented or assisted by their guardians, under section 3 of the Terms of Use. The AI Coach is for people over 18 only.
[Pending legal validation] Processing of minors' data in the Feed and the Community and the applicable safeguards.
12. Changes to this policy
This Policy changes when the platform, the processing or the law changes. The current version is on this page and previous ones at /legal/versoes/.
13. Contact
Requests about your data: Profile > Help > Contact staff (private support thread on the official Discord) or the official WPG Project Discord. [Pending legal validation] A formal e-mail channel will be given in the final version.