Privacy

EterSystem processes Supabase Auth account data, admin profile data, language and appearance preferences, RPGs, characters, attributes, skills, abilities, traits, stories, external image URLs provided by users, Discord IDs, Discord webhooks when configured, dashboard feedback, technical logs, portal sessions, Session Mode state, functional browser storage, and Vercel Analytics.

It may also process data required for Discord/LOT nickname synchronization when enabled by the GM.

Every page visit records the IP address, country, region, city, time zone, requested path, and user agent for 7 days, so we can see who reaches the site and detect abuse. This record does not depend on consent and is never used for advertising.

We use Supabase for authentication and database hosting, Vercel for hosting and aggregated analytics, Sentry for error monitoring, Google and Discord when an admin chooses social login, Cloudflare Turnstile for signup abuse protection when configured, Discord for rolls/webhooks, and LOT for nickname synchronization when enabled by the GM.

These providers may process technical data needed to deliver their services. Optional integrations are used only when an admin configures them or starts the corresponding login flow.

If you accept advertising and analytics cookies, Meta receives technical browsing data and the completed sign-up event, as an independent controller, and PostHog receives usage events and a session recording with masked fields, as a processor acting on our instructions, on servers in the United States. Declining prevents the scripts from loading and nothing is sent to them. Details in the Cookie Policy.

We use this data to authenticate admins, deliver the character portal, isolate campaigns, synchronize rolls and nicknames, answer support, investigate failures, protect the service, and measure aggregated product usage.

The initial launch is on the Beta Plan and does not yet use Stripe, checkout, or billing. The Beta Plan limits non-super-admin accounts to 5 RPGs, 10 players per RPG, and 10 NPCs per RPG. Existing features may become part of paid plans after the beta.

RPGs, characters, stories, and settings may be shared with other admins in the same campaign. When an account is deleted, content needed for campaign continuity may remain available to other active admins unless a specific feasible removal is requested through support.

Deactivated accounts are blocked immediately and are scheduled for operational deletion after 15 days when administrative dependencies allow it. Deletion can be blocked when an active RPG would have no other active admin.

Retention periods: visit records 7 days, security events 90 days, change-audit trail 365 days, deactivated accounts 15 days until deletion. Feedback and support reports are kept as long as needed for triage and audit, with user-agent minimization when possible.

In security and audit records, IP addresses and login identifiers are written as an HMAC SHA-256 hash, never in plain text. The exception is the visit record described above, which keeps the IP in plain text for those 7 days.

You can request access, correction, portability, anonymization, or deletion of your data, ask who it is shared with, and withdraw advertising and analytics consent at any time. Withdrawal lives in Settings › Privacy; everything else goes through the contact below, answered within the statutory 15 days.

Legal bases: account data and content are processed to deliver the service; technical logs and visit records under legitimate interest in security; Meta and PostHog only with your consent.

Supabase, Vercel, Sentry, PostHog, and Meta process data outside Brazil, mainly in the United States.

The data controller is the party responsible for EterSystem, reachable at contato@etersystem.com.

Privacy requests, data removal, and security reports should be sent to suporte@etersystem.com.

General product questions are also welcome in the official Discord (https://discord.gg/ZfaZ7Angh6). Do not raise privacy, removal, or security matters there: it is a public channel readable by anyone in the server.