Privacy Policy

Pandot processes your data under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018). This page explains what we store, why, and how to request your data or the deletion of your account.

Updated on 27/10/2026.

What we store

• Account: email, account name, country and creation date.
• Password: we never store your password, only a protected version that cannot be reversed.
• Game: characters, progress, items, public channel messages and reports.
• Security: the IP address of each login, to fight bots, account theft and attacks. It is deleted automatically after 90 days.
• Cookies and browser storage: the essential ones for the site to work and to measure visits (session, language, open menus, your cookie choice and Google Analytics) and, only if you allow it, the Meta and Google Ads marketing cookies. The full list is below.
• Visit statistics: the website uses Google Analytics to learn, in aggregate, how many people visit it, where they come from (approximate country and city) and which pages and devices they use. It does not identify you.
• Marketing: only with your permission in the cookie notice, the website may use Meta Pixel and Google Ads to measure Pandot ads and show them to people who have visited the site. Without permission, they are not loaded.

Payments

• Pix payments are processed by Stripe and its partner in Brazil, EBANX (the name shown as the recipient in your bank app). To create the Pix we send them the payer's name and CPF and the account email, as Stripe requires. Pandot never receives bank or card details.
• For each purchase we keep the package, amount, dates, payment status and only the last 4 digits of the CPF. The IP address of whoever created the Pix is deleted after 90 days.

Sharing

• We do not sell data. We only use the services needed to run Pandot: hosting, website protection and forwarding of emails sent to support (Cloudflare), account emails (Amazon Web Services, in São Paulo), visit statistics (Google Analytics) and Pix payments (Stripe and EBANX), or when the law requires it.

Your rights

• You can request access, a copy, correction or deletion of your data through Pandot support, from your account email. We reply within 15 days.

Site cookies

Change my cookie choice