Global Privacy Policy

By creating a My Astorny Account, downloading our games, accessing our websites, joining the Duo Program, or interacting with any Astorny service, you expressly declare your free, informed, and unconditional consent to all practices described in this document.

If you do not agree with any clause within this Policy, you are strictly prohibited from using our services and must immediately request the permanent deletion of your account.

1. Scope of the Astorny Ecosystem

This Policy applies entirely to all products, services, platforms, and games developed and operated by Astorny Games Studio LTDA, collectively referred to as the "Astorny Ecosystem", which includes, but is not limited to:

• My Astorny Account: The unified, centralized system for account management, profiles, and cross-platform authentication.
• Astorny Games & Universos: All our digital universes, multiplayer servers, and video game titles (e.g., Entity that Haunts Us, CoffeePie, Foxy's Forest Finds).
• Astorny Family Center: The parental control and monitoring dashboard exclusively designed for legal guardians to manage minor accounts.
• Astorny Duo Program: The specialized portal for metrics analysis, support, and resource distribution for official Content Creators (Duals).

2. Categories of Data We Collect

To provide a secure, optimized, and continuous service, Astorny executes the collection of active data (voluntarily provided by you) and passive data (automatically collected by our servers and anti-cheat systems).

2.1. Data Directly Provided by the User (Active Data)

• Identity and Contact Information: Full legal name, date of birth, valid email address, and optionally, a Discord Tag for Duo members.
• Social and Profile Data: Astorny Tag-Name (e.g., Name#1234), avatar, biographical description, and authorized links to external social media platforms.
• Authentication and Security Data: Passwords (strictly stored under irreversible cryptographic hashes), secret keys for Two-Factor Authentication (2FA), and account recovery history logs.
• User-Generated Content (UGC): Texts, direct chat messages, in-game communications, images submitted to our platforms, and technical support tickets.

2.2. Automatically Collected Data (Passive Data)

Whenever an Astorny service is executed on your device (browser, mobile, console, or PC), we passively and continuously collect:

• Physical and Logical Identifiers: Internet Protocol (IP) address, MAC Address, Hardware Identification Numbers (HWID), device model, CPU, GPU, RAM capacity, operating system version, and ISP.
• Telemetry and In-Game Usage: Game statistics, scores, unlocked achievements, session durations, menu navigation routes, match history, and interactions with other players (friend lists, blocks).
• Connection Logs and Crash Reports: Detailed registers of login/logout timestamps, clicked links, automated software failure reports (crash logs), and network latency.
• Anti-Cheat Engines and System Integrity: During gameplay, our anti-cheat software aggressively scans volatile memory, background processes, and system files to detect anomalies, code injection, macro usage, automated scripts, or malware aimed at defrauding the services.

2.3. Data Received from Third Parties

If you choose to link your My Astorny Account to external services (such as Social Login via Google), we will receive the exact information you authorized us to access through the third-party provider's API, including your unique provider user ID, name, and email address.

3. Use of Cookies and Tracking Technologies

The Astorny ecosystem utilizes Cookies (small encrypted text files), Web Beacons, Pixels, and Local Storage for the following crucial operational purposes:

• Strictly Necessary Cookies: To maintain your active session, guarantee the functioning of 2FA, and protect forms against Cross-Site Request Forgery (CSRF) attacks. These cannot be disabled.
• Analytical and Performance Cookies: To comprehend how you utilize our sites, identify error-prone pages, and measure server efficiency using aggregated traffic tracking.

4. How and Why We Use Your Data (Legal Basis)

No data collection occurs without a justified technical or legal purpose. We utilize your information under the legal bases of Contract Execution, Explicit Consent, Legal Obligation, and Legitimate Interest to:

4.1. Provide, Maintain, and Optimize Services

• Create, authenticate, and manage continuous secure access to your My Astorny Account.
• Synchronize your progression, virtual items, and Gemins balances seamlessly across all Astorny Games.
• Identify critical software bugs, stabilize multiplayer servers, and optimize graphics based on the hardware statistics of our global player base.

4.2. Security, AI-Driven Moderation, and Fraud Prevention

Ecosystem security is our absolute maximum priority. Your data (including encrypted chat logs, IPs, and HWIDs) is actively and aggressively utilized to:

• Identify and instantly hardware-ban users who attempt to commercialize accounts, Gemins, or promote "black markets," in strict obedience to our Zero Tolerance policy.
• Detect financial anomalies to prevent credit card fraud and illegal chargebacks within our payment gateways.
• Permanently ban the Hardware IDs (HWID/MAC) of hackers, exploiters, and users who employ third-party cheats in our games.

4.3. Astorny Duo Program and Communications

• Send essential operational alerts (e.g., password reset tokens via our secure email infrastructure).
• Manage the operations of the Astorny Duo Program, calculate engagement metrics, distribute exclusive resources, and issue monthly Spoiler/Metrics reports to Duals.

5. With Whom We Share Your Data

Astorny Games Studio LTDA DOES NOT SELL AND DOES NOT RENT your personal information to third-party advertisers or data brokers under any circumstances. Data sharing occurs exclusively in the scenarios described below, always supported by rigorous Data Processing Agreements (DPAs):

• Infrastructure and Cloud Service Providers: Hosting companies, encrypted email servers (e.g., Titan), database management systems, and DDoS mitigation networks.
• Anti-Cheat and Security Providers: Third-party proprietary tools that assist in the immediate identification of malware and unauthorized game modifications.
• Government Authorities and Law Enforcement: Astorny will proactively and immediately share user data, IP addresses, chat histories, and connection logs with international law enforcement, Interpol, or local police if there is any judicial mandate, investigation of financial fraud, or suspicion of cybercrimes, pedophilia, death threats, or terrorism.
• Corporate Transitions: In the event of a merger, acquisition, corporate reorganization, or sale of Astorny assets, user data may be transferred to the new legal entity, retaining all protections outlined in this Policy.

6. International Data Transfers

Astorny Games Studio LTDA operates globally. Your data may be transferred, stored, and processed on server clusters located outside your country of residence (such as the United States or the European Union) by our cloud infrastructure partners. By utilizing our services, you expressly consent to this global transfer, acknowledging that Astorny guarantees these transfers only occur to jurisdictions or companies providing an adequate degree of data protection via Standard Contractual Clauses.

7. Child Protection and the Astorny Family Center

The Astorny ecosystem deeply respects global child protection regulations (such as COPPA in the USA, GDPR-K in Europe, and LGPD in Brazil).

• Accounts created by users whose date of birth indicates an age below the local digital age of consent are categorized as "Minor Accounts" and locked into a restricted environment.
• We collect only the absolute minimum telemetry required for the technical functioning of the game on these accounts.
• Crucial features, such as changing Tag-Names or engaging in complex social interactions, can only be unlocked, managed, and monitored by a verified legal guardian through account pairing in the Astorny Family Center.

8. Data Storage and the "Right to be Forgotten" (With Non-Negotiable Exceptions)

8.1. Standard Retention and Deletion Requests

We will securely store your personal data as long as your My Astorny Account remains active. If you decide to end your journey with us, you may request the total deletion of your account. We will process this request within thirty (30) business days, permanently anonymizing or destroying your operational data.

8.2. The Irrevocable Exception (Banned Accounts and Offenders)

Data deletion DOES NOT APPLY to platform rule offenders. If your My Astorny Account is permanently banned or under active investigation for the use of hacks, severe toxicity, financial fraud, copyright infringement, or violation of the black-market trading prohibitions stipulated in the Terms of Use, Astorny will permanently retain your machine's key identifiers (IP, HWID, MAC) and your email address.

This retention is based on legitimate interest and the regular exercise of rights, with the sole, uncompromising purpose of preventing malicious users from requesting data deletion merely to create new accounts the following day to harm the Ecosystem again.

9. Information Security and User Negligence Exemption

Astorny employs state-of-the-art organizational, technical, and administrative measures—such as application firewalls, TLS 1.3 encryption in transit, and database isolation—to defend your information against leaks or illicit access. However, no internet transmission is mathematically infallible.

Astorny IS NOT RESPONSIBLE for the compromise of your personal data or virtual goods originating from actions or omissions of the User. If you provide your passwords to third parties, fall victim to Phishing (scams on fake websites that mimic Astorny), or your device is infected by Keyloggers/Malware, the incurred losses (including stolen Gemins or exposed data) will fall entirely upon you. We will not issue rollbacks or refunds for User negligence.

10. Your Rights as a Data Subject

In accordance with global data protection laws (such as GDPR and LGPD), you, as the data subject, possess undeniable rights:

• Confirmation and Access: The right to know if we process your data and to request a copy of it.
• Rectification: The correction of incomplete, inaccurate, or outdated data via the My Astorny Account dashboard.
• Anonymization or Deletion: Pertaining to unnecessary or excessive data processed in noncompliance with the law.
• Revocation of Consent: You may, at any time, revoke consent for data processing. However, you acknowledge that revoking consent for fundamental operational data will result in the immediate termination of your account.

11. Modifications to this Policy

Astorny reserves the exclusive right to modify this Global Privacy Policy at any time to accommodate new services, regulatory changes, or technological updates in our infrastructure. The "Effective Date" will indicate the current version. Continued use of our services following such modifications will constitute express and incontestable acceptance of the new policy.

12. Data Protection Officer (DPO) and Contact

If you have any questions, formal requests, or wish to exercise your data privacy rights, please open a secure ticket in our support portal or contact our Data Protection Officer (DPO) through the official channels listed at astorny.com.br/support.