Your privacy matters to us. This policy describes what data we collect and how it is handled on the Idle Expedition portal.

1. Data We Collect

When you register, we collect what you provide voluntarily: your account name, your email address and your password (stored as an irreversible cryptographic hash). We also record IP addresses temporarily for security auditing — for example, protection against brute-force attacks.

2. How We Use It

The data we collect is used only to:

• let you log in and authenticate on the game and on the site;
• allow you to recover a forgotten password;
• process donations and credit the points in the game;
• keep the service safe from abuse and attacks.

3. Cookies

We use the session cookies needed to keep you signed in, plus one cookie that remembers the language you picked. If you tick "Remember me", we create an encrypted authentication cookie valid for up to 30 days so you do not have to sign in repeatedly.

4. Data Sharing

No data from our database is sold, rented or shared with third parties. The only outbound requests go to Mercado Pago, to generate the Pix QR Code, and they share only the point reference and the character name needed to create the charge.

This policy is published in Portuguese, English and Spanish. If the versions are ever read differently, the Portuguese version prevails.