Privacy Policy

1. Who is responsible

MMMJR Studios, a company registered in Brazil, decides how your personal data is used in Eternity and is responsible for it. For anything about your data, including requests to our data protection contact (the "encarregado" under the LGPD), write to support@eternity-mmo.com.

2. What we collect

Data you give us:

• account data: username, email address, password (we store only a one-way hash of it, never the password itself), and the acceptance of these documents with its date and version;
• your date of birth and, if you are 16 or 17, the email address of a parent or legal guardian;
• the players you block, and the reports you send (the category, an optional text and the place in the game where you were);
• what you write in the Service: chat messages, whispers, names of characters and guilds, posts, reports and messages you send to support.

Data created when you use the Service:

• connection records: IP address, date and time of access, and the browser’s user agent for website sessions;
• device data from the game: an identifier derived from your computer’s hardware, used to protect accounts and fight cheating and ban evasion, and technical data about the game client such as its version and the integrity of its files;
• game data: characters, appearance, level, inventory, currencies, trades, auction orders, quests, combat and PvP records, rankings, and the history of in-game economy movements;
• account status: confirmation of the email address, premium time and its history, test access, sanctions and the reasons for them;
• parental controls: the guardian’s confirmation, with its date and time, and the settings they choose for whispers, chat and Premium;
• reports about you: the place in the game and a copy of your last chat lines (up to 20, from the previous 2 hours), kept as evidence;
• moderation records: warnings, mutes and bans, with the reason, how long they last and which member of our team applied them;
• security records: sign-ins, failed sign-ins, password changes and other account events (on the website the IP address in these records is stored only as a one-way hash).

We do not collect payment card data. When premium is sold by a payment provider or reseller, it processes the payment under its own policy.

3. Why we use it, and on what legal basis

• To create and run your account and let you play, including saving your progress and showing your characters in rankings. Basis: performance of the contract with you (LGPD art. 7, V; GDPR art. 6(1)(b)).
• To keep the Service secure and fair: preventing fraud, cheating, bots, real-money trading and ban evasion, moderating chat and investigating reports. Basis: our legitimate interest and that of other players in a safe, fair game (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• To protect teenagers: checking the minimum age, asking a parent or legal guardian to confirm the account of a player under 18, and applying the protections they choose. Basis: legal obligation and the best interest of the teenager (LGPD art. 14).
• To keep connection records and answer lawful requests from authorities. Basis: legal obligation (LGPD art. 7, II; Brazilian Civil Rights Framework for the Internet, Law 12.965/2014, art. 15).
• To send you service emails: account confirmation, password recovery and important notices. Basis: performance of the contract.
• To understand how the game is played and improve balance and stability, using game data in aggregate. Basis: legitimate interest.
• To defend our rights in disputes. Basis: regular exercise of rights (LGPD art. 7, VI; GDPR art. 6(1)(f)).

We do not send advertising emails and we do not use your data for automated decisions that have legal effects on you. Automated checks against cheating may flag an account; a person reviews before a permanent ban.

4. What other players see

Your character names, guild, level, class, race, kills, equipment (when inspected) and your messages in public channels are visible to other players and, for rankings, on the website. Your username, email address, IP address and device identifier are never shown to other players.

The players you block and the reports you send are never shown to other players, and a reported player is not told who reported them.

5. Who receives your data

We do not sell or rent personal data. We share it only with:

• service providers who work for us under contract: hosting and servers, email delivery (to send account emails) and Cloudflare Turnstile (to tell people from automated abuse on account forms);
• payment providers or code resellers, when you buy premium from them;
• your parent or legal guardian, if you are 16 or 17: they receive emails about your account and, in the guardian portal, see your username and the protections they choose;
• public authorities, when the law requires it or a court orders it;
• a buyer or successor, if the game or the company is transferred, under the same protections.

Discord is a separate service with its own policy. What you share there is not covered by this policy.

6. International transfers

Some of our providers process data outside Brazil, for example in the United States and in the European Union. When that happens, we use the safeguards the LGPD (art. 33) and the GDPR require, such as standard contractual clauses, and we choose providers that protect data at a level comparable to the law of Brazil.

7. How long we keep it

• Account and game data: while your account exists. After you ask for deletion, we delete or anonymize it within 30 days, except what the law or a pending dispute requires us to keep.
• Connection records (IP address, date and time): at least 6 months, as Brazilian law requires, and longer only when needed for security or a legal request.
• Chat messages and security records: up to 12 months, unless needed for an open investigation, a dispute or a legal obligation.
• Website sessions, which record the IP address and the time of each sign-in: about 6 months after they end, because they are also connection records. Confirmation and password reset links, and account emails already sent: 30 days.
• Date of birth and the list of players you block: while your account exists.
• Your guardian’s email address and the protections they chose: while you are under 18 and your account exists; they are deleted when you turn 18.
• Reports, with the evidence copied from chat: up to 24 months after the report is closed, or longer if needed for an investigation, a dispute or a legal request.
• Records of the acceptance of these documents and moderation records (warnings, mutes, bans and their reasons): while your account exists and for up to 5 years after it is closed, the period in which claims about them can be brought under Brazilian law.

8. Your rights

You may ask us, free of charge, to:

• confirm whether we process your data and give you access to it;
• correct data that is incomplete, wrong or out of date;
• anonymize, block or delete data that is unnecessary or processed against the law, and delete your account;
• give you your data in a structured format (portability);
• tell you with whom we share your data;
• withdraw a consent you gave, and object to processing based on legitimate interest;
• review a decision taken only by automated means.

Write to support@eternity-mmo.com from the email address of your account, or tell us your username, so we can confirm it is you. We answer within 15 days. You may also complain to the Brazilian data protection authority (ANPD) or, in the European Economic Area and the United Kingdom, to your local supervisory authority.

Deleting the account deletes your characters and Virtual Items permanently, and it cannot be undone.

9. How we protect it

Connections to the game and to the website are encrypted, passwords are stored only as strong one-way hashes, sessions are random tokens stored as hashes, access to servers and databases is restricted, and the game’s content files are signed so they cannot be altered. No system is perfectly secure; if an incident puts your data at risk, we will tell you and the authorities as the law requires.

10. Children and teenagers

Eternity is not meant for anyone under 16. Account creation asks for your date of birth: under 16, no account is created. At 16 or 17, you must give the email address of a parent or legal guardian, who receives a link to the guardian portal to confirm the account and choose its protections: who can whisper to you, whether your chat is on and whether Premium can be activated. Until they change them, whispers are limited to your party and Premium cannot be activated. Your guardian may also exercise, on your behalf, the rights described above. If we learn that an account belongs to someone under 16, we close it.

11. Cookies

The website uses only the cookies it needs to work and to keep you signed in. The Cookie Policy lists them.

12. Changes to this policy

We will update this policy when our processing changes. When the change is important, we will tell you on the website, in the game or by email before it takes effect.