Loading…
Privacy Policy
Last updated: 2026-06-06
1. Data Controller
The data controller responsible for your personal data is:
Raphael da Silva Jacuá Avenida Comandante Ramiro Correia, 6, 2º Direito 7800-261 Beja, Beja, Portugal Email: privacy@apogealodge.com
This Privacy Policy explains how Apogea Lodge (apogealodge.com) collects, uses, stores, and protects personal data when you use our website and community features.
2. Scope and Audience
This policy applies to visitors and registered users worldwide. We aim to comply with the EU General Data Protection Regulation (GDPR), the Brazilian Lei Geral de Proteção de Dados (LGPD), the California Consumer Privacy Act (CCPA) where applicable, and other relevant privacy laws.
Apogea Lodge is not directed at children under 13, and we do not knowingly collect personal data from children under 13.
3. Personal Data We Collect
Depending on how you use the Service, we may process the following categories of data:
- Account data from OAuth sign-in: email address, display name, and profile image from Google, GitHub, or Discord.
- Profile data you provide: lodge username and optional custom avatar URL.
- User-generated content: builds, forum posts, comments, votes, and related metadata.
- Technical data: session cookies, locale preference cookie, and limited access cookies used during alpha or preview periods.
- Bug report data (when submitted): description, optional screenshot, page URL, browser user-agent, locale, and your account email/name so we can respond.
- Future advertising data: if we enable ads, third-party ad partners may collect cookies or similar identifiers only after you give consent through our cookie banner.
4. How and Why We Use Data
Legal bases under GDPR may include performance of a contract (providing the Service), legitimate interests (security, abuse prevention, basic analytics-free operation), legal obligation, and consent (marketing and, in the future, non-essential cookies or advertising).
- Authenticate you and maintain your lodge account.
- Attribute builds, comments, and forum posts to your profile.
- Operate, secure, and improve the Service.
- Respond to bug reports and support requests.
- Send optional marketing emails only if you opt in separately.
- Comply with legal obligations and enforce our Terms of Service.
5. Third-Party Service Providers
We use trusted processors to run the Service. They process data on our instructions and under their own privacy and security terms:
We do not sell your personal data.
- Vercel — website hosting and delivery.
- Neon — PostgreSQL database hosting for accounts and community data.
- Resend — transactional email delivery for bug reports and confirmations.
- Google, GitHub, and Discord — OAuth authentication providers.
- Future ad partners — only if advertising is enabled and you consent.
- Patreon and Ko-fi — external voluntary support platforms; they process payments outside Apogea Lodge.
7. Data Retention
We keep account and profile data while your account is active. When you delete your account, we delete personal account data and private builds. Public forum posts and comments may remain with the author shown as a deleted user, as described in section 11.
Bug report emails are retained only as long as needed to investigate and resolve the issue, unless a longer period is required by law.
8. Your Privacy Rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is based on consent.
You may also have the right to data portability and to lodge a complaint with a supervisory authority.
To exercise your rights, contact privacy@apogealodge.com. We may need to verify your identity before completing your request.
9. Additional Information for EEA/UK Users (GDPR)
If you are in the European Economic Area or United Kingdom, you have the rights described in section 8. Our legal bases are listed in section 4. International transfers may occur where processors operate outside the EEA; we rely on appropriate safeguards offered by those providers.
You may contact privacy@apogealodge.com or your local data protection authority if you believe your rights have been violated.
10. Additional Information for Brazil (LGPD)
If you are in Brazil, you may confirm whether we process your data, request access, correction, anonymization, portability, or deletion, and obtain information about shared use of data. Contact privacy@apogealodge.com to exercise LGPD rights.
11. Additional Information for California Residents (CCPA)
If you are a California resident, you may have the right to know what personal information we collect, request deletion, and opt out of certain sharing for cross-context behavioral advertising. We do not sell personal information. Contact privacy@apogealodge.com for privacy requests.
12. Account Deletion and Public Content
You can delete your account from your profile settings or by emailing privacy@apogealodge.com. After deletion, your account, profile, sessions, private builds, and linked authentication data are removed.
Public community posts and comments may remain visible to preserve discussion context, but your identity will be shown as a deleted user and your profile links will no longer work.
13. Marketing Communications
We do not send marketing emails by default. If you opt in from your profile, we may send occasional updates about Apogea Lodge or Apogea community news. You can withdraw consent at any time in your profile or by emailing privacy@apogealodge.com.
14. Security
We implement reasonable technical and organizational measures to protect personal data. However, no website or internet transmission is completely secure. Please use a strong provider account, sign out on shared devices, and contact us if you suspect unauthorized access.
15. Data Breaches
If a personal data breach likely affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law, including GDPR and LGPD timelines where they apply.
16. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be communicated through the website or by email where appropriate.
17. Contact
Privacy questions and requests: privacy@apogealodge.com
Operator: Raphael da Silva Jacuá, Avenida Comandante Ramiro Correia, 6, 2º Direito, 7800-261 Beja, Beja, Portugal.