Privacy Policy

This policy explains how Realms Store and the Realms Modularity platform handle personal data. The controller is the individual based in Brazil who runs Realms Store. The policy follows Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018) and, for users outside Brazil, the privacy laws that apply to them.

We never receive card or bank details: payment happens on the partner's page (Stripe, PayPal or Mercado Pago).

We do not use advertising cookies or third-party tracking cookies.

We share data only with those needed to run the service:

• Discord — sign-in, account identification and your server list;
• Stripe, PayPal and Mercado Pago — payment processing;
• Hosting and storage providers — who keep the platform online, under contract;
• Authorities — when required by law or court order.

Account data and your server list are kept while the account exists. Order and payment records are kept for the period required by the applicable tax law (in Brazil, generally 5 years). Security logs and diagnostics are deleted after a short period.

If you are in Brazil, the LGPD lets you, at any time:

• confirm whether we process your data and access it;
• correct incomplete or outdated data;
• ask for unnecessary data to be anonymised, blocked or deleted;
• ask for a copy of your data (portability);
• withdraw consent and ask who your data is shared with.

We process your data to perform the contract (deliver purchases and support), to meet a legal obligation (tax records), on legitimate interest (security and fraud prevention) and with your consent (when you choose to give something, like an e-mail). Some partners are outside Brazil; those transfers follow the LGPD's safeguards.

We reply within 15 days. You may also complain to Brazil's National Data Protection Authority (ANPD).

If you are in the United States, you can ask at any time to access, correct or delete your personal data, and to receive a copy of it. We honour these requests for every US user.

Residents of states with their own privacy laws — such as California (CCPA/CPRA) — have the rights those laws grant, where they apply to Realms. Because we do not sell or share data for targeted advertising, there is nothing to switch off in a "Do Not Sell or Share" request. We will never treat you differently for exercising these rights.

We reply within 45 days, as those laws require.

If you are in another country, you can ask at any time to access, correct, delete or receive a copy of your data, and object to its use. We honour these requests for every user, whatever their country.

If your country's law grants further rights — such as the GDPR in the European Union or the UK GDPR in the United Kingdom — you have those too, and you can complain to your country's data protection authority. We reply within 30 days.

To exercise any right, contact support on Discord. We may confirm that the account is yours before replying.

• A copy of your data — we send you a file with your account's data: profile, servers, orders, licences, slots, connected bots, reviews and reports;
• Deletion — we delete your account and the data tied to it. Order and payment records the law requires us to keep are retained, detached from your profile, for the legal period.

We use encrypted connections, protected sessions, access control and automatic removal of secrets from error reports. No system is 100% secure; if an incident affects you, we will tell you as your country's law requires.

Because the bot runs on your infrastructure, the data it processes in your Discord servers (ticket messages, transcripts, settings) is stored in the database you choose. For that data, you are responsible towards your server's members.

The store is not intended for children under 13, or under your country's minimum age if it is higher. If you believe we have collected a child's data, contact support and we will remove it.

We may update this policy. The date at the top shows the current version; significant changes will be announced in the store or on Discord.