Privacy notice

Version 2026-10-12-v5 · October 12, 2026

Who is responsible

Shadow’s Art Studio determines how registration data is used. Contact for accounts and privacy: support@valiantale.com.

Data and purposes

We use your username, email, account ID, creation dates, access and action records to provide the account, authenticate users and protect the service. Passwords are stored as a cryptographic derivation with a random value per account and are not displayed in the admin panel. After email confirmation and when integration is enabled, the game server receives the ID, login, account status and cryptographic derivation needed for authentication, without receiving the original password. The private bridge also sends Founder Supporter badge status to authorize the decoration room. If you use this room, the plaque position is saved against your account. Email is provided by you and may be used for confirmation and password recovery when delivery is configured. We do not send campaigns at this stage.

Display name, city, state and country are optional and can be edited or removed from your profile. We do not request your residential address or infer your exact location. Do not enter sensitive information in these fields.

IP addresses, sessions and cookies

The application temporarily uses your connection's IP address to limit attempts, storing a cryptographic key rather than the raw IP in that table. Application action logs do not store raw IP addresses in this version. Hosting infrastructure may also keep technical connection logs under its own procedures. We use a necessary session cookie, without advertising cookies or tracking added by this registration service. You can sign out to end your session.

Processing and access

Data necessary for your account is used to provide the requested service. Security logs and rate limits protect accounts and infrastructure. Hostinger hosting and email services process data to run the site and database and deliver confirmation and recovery messages. Authorized team members access data needed for administration and support; passwords and tokens are not shown in the panel. We do not sell data or include marketing consent in acceptance of these documents.

Retention

Account and profile data are retained while the account exists and as needed to provide the service. You may request deletion. Security events have a reference retention period of 90 days, with periodic cleanup; sessions, tokens and rate-limit records expire and are removed by maintenance. Hosting backups and technical logs follow the provider's procedures. Additional retention may be required where permitted by law.

Pix support

We use your account ID, email, order reference, amount, acceptance version and date, and payment status to create the charge, confirm the badge and track refunds and disputes. The email, amount and reference required for payment are shared with Mercado Pago. We do not receive your bank password. Financial and acceptance records are retained as necessary to administer support, handle requests and meet applicable obligations. Deletion requests take these needs into account. Mercado Pago also processes data under its privacy policy.

We also use a cookie to remember your language choice (PT, EN or ES). It is not used for advertising.

Your rights

You may request confirmation of processing, access, correction or deletion of your data, and explanations of sharing, as well as other applicable rights. Contact support@valiantale.com. We may request proportionate information to verify your identity; never send your password. Optional fields can be removed directly in My account. See also the ANPD guidance on your rights.