Privacy Policy

1. Who controls your data

Aurora Open Tibia Server ("Aurora", "we", "us") is responsible for the personal data described in this policy. Aurora operates its services from Brazil and processes data in accordance with applicable law, including Brazil's Lei Geral de Proteção de Dados (LGPD) where it applies.

2. Data we process

Website and Aurora account

• account name, email address, country, password hash and account-security settings;
• characters, gameplay activity, guilds, transactions and other records required to operate the game;
• support communications, email preferences and administrative actions;
• payment references, status and transaction metadata supplied by the payment provider. Aurora does not need to store your full card credentials;
• IP address, browser or device information, session data, timestamps and security or diagnostic logs.

Discord application

When you install, invoke or link the Aurora Discord application, we may process:

• your Discord user ID and public profile fields made available by Discord, such as username and avatar;
• server, channel and role IDs needed to perform an authorized command or feature;
• commands, interaction identifiers, timestamps and technical error or abuse-prevention logs;
• the association between your Discord ID and Aurora account if you explicitly use an account-linking feature;
• message content only when a feature clearly requires it and Discord makes it available under the permissions granted.

We do not sell Discord API data or use it for unrelated advertising.

3. Why we use data

• to create accounts, authenticate users and deliver website, game and Discord features;
• to process purchases, provide transaction records and prevent payment fraud;
• to secure the service, investigate abuse, enforce rules and maintain reliable operations;
• to respond to support requests and send transactional or requested communications;
• to meet legal obligations, establish or defend legal claims, and improve service performance.

Depending on the context, our legal bases include performing our agreement with you, legitimate interests in operating and securing Aurora, compliance with legal obligations, and consent when the law requires it. You may withdraw consent without affecting processing already performed lawfully.

4. Sharing and service providers

We disclose only the data reasonably necessary to:

• Discord, when you use the Discord platform and the Aurora application;
• Mercado Pago or another displayed payment provider, when you initiate a purchase;
• hosting, content-delivery, security, email, storage and monitoring providers used to operate Aurora;
• authorities or advisers when required by law or reasonably necessary to protect rights and safety.

These providers may process data in other countries. Where required, we use legally recognized safeguards for international transfers. Discord and payment providers also process information under their own privacy policies.

5. Retention

We retain personal data only while it is needed for the purposes above. Account and gameplay records are generally retained while the account is active; security and interaction logs are retained for a limited operational period; and payment or administrative records may be retained longer when required for fraud prevention, accounting, legal obligations or dispute resolution. Data is deleted or anonymized when it is no longer reasonably needed.

6. Cookies and local storage

Aurora may use cookies, browser storage or equivalent technologies needed for authentication, security, preferences and core site operation. We do not use these technologies to sell personal data. Your browser can remove stored data, but disabling essential storage may prevent sign-in or other features from working.

7. Your rights and data deletion

Subject to applicable law, you may ask us to confirm processing, access, correct, export, anonymize, restrict or delete personal data, object to certain processing, or receive information about sharing. You may also unlink your Discord identity and request deletion of Discord data held by Aurora.

Send your request from the email associated with your Aurora account to support@auroraotserver.com and describe the account or Discord user ID involved. We may request reasonable verification before acting. Some records may be retained when law, fraud prevention, security or the establishment of legal claims requires it. Removing the app from Discord stops future access but does not by itself erase data already held by Aurora.

8. Security and children

We use reasonable technical and organizational safeguards designed to protect personal data, but no online system is completely secure. Do not send passwords or authentication codes through support messages.

Aurora is not directed to children under 13. Users must also meet any higher minimum age required in their country. If you believe a child has provided data contrary to these requirements, contact us so we can investigate and delete it where appropriate.

9. Policy changes

We may update this policy when our services, providers or legal obligations change. We will revise the date above and may provide additional notice for material changes. The current version will remain available at this URL.

10. Contact

Aurora Open Tibia Server
support@auroraotserver.com