Privacy Policy
This page explains plainly what data Ultmu Online collects on this site, why, for how long, and what you can demand about it. It covers the site: game accounts don't exist yet.
In short
- We ask for your email for one thing only: to tell you when the server opens.
- No measurement script loads before you allow it.
- We don't sell your data, don't rent it, and don't use it for advertising.
- You can access, correct or delete your data at any time.
Who is responsible for your data
The party responsible for processing the personal data collected on this site — what Brazil's LGPD calls the controller — is the Ultmu Online project.
For anything related to this policy or to your data, the channel is the email below. It is also the channel to reach the data protection officer.
- Controller
- Ultmu Online
- Contact
- [email protected]
What we collect
We collect little, and always for a stated reason:
- Email and language — when you fill in the launch notice form. The language travels with it so the message reaches you in the right one.
- Technical access records — IP address, browser and system, date and time, and the pages visited. These are generated automatically by the server and by infrastructure providers.
- Essential cookies — the language you pick and your decision about cookies.
- Measurement cookies — only if you allow them. We use Google Analytics and the Meta Pixel (Facebook and Instagram), which write their own identifiers and record browsing in aggregate.
We do not collect names, phone numbers, national ID numbers, addresses, payment details or game account data. Accounts, rankings and Founder's Pack sales don't exist on this site yet; when they do, this policy will be updated first.
What we use it for
- To tell you when the server opens — that is the only purpose of the email you leave.
- To keep the site up and secure and to investigate abuse and failures — the purpose of the technical records.
- To remember your preferences: the language and your cookie choice.
- To understand in aggregate how the site is used, so we can improve it — only with your permission.
We don't use your data for advertising, we don't build individual behaviour profiles, and we don't sell or rent your data to anyone.
On what legal basis
- Consent (Art. 7, I) — for the notice-list email and for measurement cookies. You can withdraw it at any time, and withdrawing is as simple as giving it.
- Legitimate interest (Art. 7, IX) — for the technical records needed for the security and operation of the site.
- Compliance with a legal obligation (Art. 7, II) — for keeping access logs as required by Brazil's Internet Civil Framework.
How long we keep it
- Notice-list email — until you ask for removal, or up to 12 months after the server opens, whichever comes first.
- Access logs — 6 months, the period set by Brazil's Internet Civil Framework.
- Consent cookie — 6 months, after which the question is asked again.
- Language cookie — about 1 year.
- Measurement data — for the period configured in the Google Analytics and Meta accounts.
Your rights
The LGPD (Art. 18) guarantees you, over your own data, the right to:
- confirm whether we process any data of yours, and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or unlawfully processed data;
- request portability to another provider;
- know who we share your data with;
- withdraw consent and request deletion of the data processed on that basis;
- lodge a complaint with the Brazilian data protection authority (ANPD).
To exercise any of them, write to the contact email. We answer within 15 days. We may ask for information confirming your identity — not to make it harder, but to avoid handing your data to someone else.
Security
We take reasonable technical and administrative measures to protect what we hold: restricted access, encrypted traffic, and collection kept to a minimum — data that doesn't exist is the only kind that can't leak.
No system is immune. If a security incident poses a relevant risk to your rights, we will notify you and the ANPD, as Art. 48 requires.
Minors
Ultmu Online requires you to be 13 or older to create an account and play, as set out in the Terms of Use. We do not knowingly collect data from anyone below that age, and if we identify such a record it is deleted.
Children's data — under 12, in the LGPD's definition — receives the reinforced protection of Art. 14. Between 13 and 18, processing is carried out in the teenager's best interest, and we recommend their guardians are aware of it.
Changes to this policy
If the site starts collecting something new — a game account, a Founder's Pack payment, rankings — this policy is updated first, not afterwards.
A relevant change of purpose reopens the cookie question: your previous decision stops applying and you choose again, with the new text in front of you.
Contact
Questions, data subject requests or complaints about this policy: write to the address below. It is the same channel for reaching the data protection officer.
You may also complain directly to the Brazilian data protection authority (ANPD).