Privacy Policy
What data we collect, why we collect it, how we use it and who we share it with — in plain language.
This text was written by the PokeXP team and has not yet been through professional legal review. It describes honestly how the site works today, but it does not replace a lawyer.
About this policy
The PokeXP team, responsible for the game and this website, takes the protection of our users' data seriously. This policy explains, in plain language, what data we collect, why we collect it, how we use it and who we share it with.
By creating an account or using our website, you agree to what is described here. If you are a minor, ask a parent or guardian to read and approve this policy before continuing.
Cookies
Cookies are small text files the website stores in your browser. PokeXP only uses essential cookies — none for analytics, advertising or tracking.
"pkx-sessao" keeps you signed in. It stores only your account number and sign-in time, with a signature that prevents tampering, and lasts 7 days. Page scripts cannot read it.
"pkx-locale" remembers the language you picked ("pt", "en" or "es"). It lasts one year.
"pkx-convite" only exists if you open a creator's link: it stores that link's code for up to 30 days, so the account you create next is tied to that creator. It is deleted as soon as the account is created.
You can block cookies in your browser, but signing in will stop working.
Data you give us
Account registration: username, email and password. The password is stored as a hash, never as readable text. The website account is the same one used to enter the game.
Characters: the name and gender chosen when creating a character.
Contact form: name, email, subject and message.
Creator program application: name or nickname, email, your channel addresses (Twitch, Discord, YouTube, TikTok), audience size and average, frequency, where you plan to promote and your motivation.
Payments: name, ID document (such as the Brazilian CPF) and payment details are entered directly with the processor — Stripe or EfiPay — on their payment screen, and only when you decide to buy. PokeXP does not receive or store card data.
Data collected automatically
IP address at registration: recorded with the account, to investigate abuse and fraud.
IP address on forms and sign-in: used as a temporary counter that limits repeated attempts. It stays only in the server's memory and expires on its own — it is not stored.
Game server records: sign-in and sign-out times and the last IP address of each character, used for moderation and fraud detection.
Referral: if your account was created through a creator's link, the website stores that link between the two accounts.
Technical access logs: like any web server, the hosting records IP, time, requested page and browser, to run the service and defend against attacks.
How we use your data
Account identification and security: email and password authenticate your sign-in; the IP address helps detect unauthorized access and abuse.
Communication: we use your email for necessary messages — registration confirmation, password recovery, replies to contact and application results. We do not send advertising. If non-essential announcements ever exist, you will be able to opt out.
Payments: the data goes to the processor (Stripe or EfiPay), which completes the charge. We only receive the transaction confirmation back.
Moderation: violations of the Terms of Use may result in a ban by account or by IP address.
Creator program: the application is used to evaluate participation, and referral links show the creator how many accounts came through their link.
No audience analytics or advertising
This website does not load Google Analytics, Meta Pixel, Hotjar or any other analytics, advertising or heatmap tool. Your browsing behaviour is not sent to any company.
The trailer on the home page is hosted on YouTube, and nothing is loaded from there until you press play. From then on, YouTube’s privacy policy applies.
Sharing with third parties
We do not sell your data. We only share it with providers needed to run the service:
Stripe — card and foreign-currency payment processing.
EfiPay — payment processing in Brazil, including PIX.
Hosting provider — keeps the website and the game server online.
YouTube — only if you press play on the trailer.
Discord — when a creator application arrives, the team gets a notice in an internal channel with the nickname provided. The email and the rest of the application are not sent.
Payments via Stripe and EfiPay are governed by those companies' policies. Beyond these cases, data would only be handed over by court order or legal requirement.
How long we keep data
Account data is kept for as long as the account exists.
Contact messages and creator applications are kept for as long as they are useful for support and for the program.
Payment records may be kept for the period the law requires for financial and tax purposes, even after the account is deleted.
Your rights
Under the Brazilian General Data Protection Law (Law 13.709/2018), you can request at any time: access to a copy of the data we hold about you; correction of inaccurate data; deletion of your account and associated data, subject to legal requirements for financial and tax records; and cancellation of non-essential email communication.
To do so, write to adminpokexp@gmail.com. We reply within 15 days.
Children and teenagers
If you are a minor, use PokeXP with the knowledge and approval of a parent or guardian.
If you are a parent or guardian and believe a child sent us data without authorization, write to adminpokexp@gmail.com: we delete the record.
Changes to this policy
This policy changes when PokeXP changes — for example, when linking external accounts or opening support tickets becomes available. The date of the last review is at the top of the page, and relevant changes are announced on the official channels.
Contact
For any question or request related to this policy, write to adminpokexp@gmail.com.
Questions about this document
If any part is unclear, or if you want to exercise any of the rights described here, talk to the team. We answer in Portuguese, English and Spanish.