Privacy Policy

Last updated: November 12, 2026

In short

We do not sell personal data.
We use the data of those who subscribe to AtlinGuard to provide the service, bill for it and keep accounts secure.
Analytics and advertising cookies are only used on the site with your consent.
Player data is used to protect the game server. As a rule, the server owner decides how it is used.
To talk about privacy, write to [email protected].

1Who we are

AtlinGuard is a service of ATLIN INOVA SIMPLES (I.S.), registered in Brazil under CNPJ no. 68.736.097/0001-39, referred to in this policy as "ATLIN" or "we".

Our channel for privacy and data protection matters, including requests from data subjects and communications from the Brazilian National Data Protection Authority (ANPD), is [email protected].

2Who this policy applies to

Our role depends on who the person is and how the data is used:

Person	Who they are	ATLIN's role
Customers and teams	Those who subscribe to AtlinGuard and the members invited to the panel	Controller
Visitors	Those who browse the site and the documentation	Controller
Players	Those who use the game client of a server protected by AtlinGuard	As a rule, processor, following the settings and instructions of the server owner, who is the controller

When we decide on our own the purpose of a processing activity, such as the security of our platform, the investigation of abuse against the service or compliance with a legal obligation, we are responsible for it as controller.

3Customer and team data

Data	What we use it for	Legal basis
Name, email and its verification, Atlin ID account identifier, avatar, phone (if provided), language and time zone	Create and maintain the account, authenticate access and personalize the panel	Performance of a contract
Name on the account, role of each member and email of invitees	Organize team access and send or validate invitations	Performance of a contract; legitimate interest
Domain, certificate email, public address and port of the game server	Install and run AtlinGuard on the server	Performance of a contract
Country, name or company name, billing email and Brazilian tax ID (CPF or CNPJ)	Issue invoices, process payments and meet tax obligations	Performance of a contract; legal obligation
Subscriptions, invoices, coupons, payment attempts and daily usage peaks	Bill, reconcile payments, apply plan limits and send notices	Performance of a contract
IP address, browser (user agent), approximate location derived from the IP, login events and action audit	Protect accounts, show your activity, investigate incidents and keep access records	Legitimate interest; legal obligation
Messages sent to support	Answer and resolve your request	Performance of a contract; legitimate interest

Authentication is handled by Atlin ID, ATLIN's identity service. Passwords and authentication factors are kept in Atlin ID, not in the AtlinGuard panel.

We do not receive full card details. Payments in US dollars are made on the checkout page of the international gateway, and payments in Brazilian reais are made by Pix.

You also send technical data about your files: when you authorize DLLs in the panel, the browser computes the hash of each file and sends only that hash, the name and the size. The file never leaves your computer.

4Site visitor data

Like any page on the internet, the site and the documentation rely on technical server records, such as IP address, date, time and page accessed.

The site delivers fonts, icons and styles from AtlinGuard's own servers, without requesting files from third parties. The documentation may load fonts from Google Fonts, which receives the visitor's IP address when delivering the files. We use this data based on legitimate interest, to display the pages and keep them working.

To understand how the site is used and measure the results of our campaigns, we may use third-party analytics tools and advertising pixels. They may collect the pages visited, the source of the visit (link, search or ad), the type of device and browser, the approximate location derived from the IP and identifiers stored in cookies. This data may be used to show AtlinGuard ads to people who have already visited the site.

These tools are only turned on after you consent in the cookie notice, and you can withdraw consent at any time without affecting your browsing. The AtlinGuard panel does not use these tools.

5Player data

If you play on a server protected by AtlinGuard, the owner of that server is primarily responsible for your data. The server owner must tell you the legal basis for processing your data and respond to your requests. Depending on the features the owner turns on, we may process:

Machine identifier (HWID): a technical identifier built from hashes of the computer's physical identifiers. It is treated as personal data.
Session: client version, session state and network address, needed to run and protect the connection.
Integrity: technical results of integrity and compatibility checks, including the name, size and hash of modules (DLLs) loaded into the game process.
Administrative events: bans, locks, disconnections and the recorded reason.
Game account name: only when the server owner turns on account observation, linked to the HWID and the login time.
Crash reports: only when the feature is on, with data such as the module where the crash happened, error code, critical error text, call stack and module hashes.
Detailed diagnostics: an encrypted file, turned on by the AtlinGuard team for a specific HWID and for a limited time, to investigate a problem.

Account observation does not collect passwords, emails or character names or identifiers. The game stores visual preferences and any accounts saved with the Saved Accounts feature locally on the player's Windows computer. If the server owner turns on Discord Rich Presence, the program communicates with the Discord app installed on the player's computer.

Each server owner only accesses data within their own scope, according to the role of each member of their team. Bans and locks are applied per server.

We do not sell personal data. To provide the service, we rely on:

Recipient	Purpose	Data involved
Stripe	Card payments in US dollars	Payment data and, when sent, name and email
Mercado Pago	Pix payments in Brazilian reais	Name, email, CPF or CNPJ and payment data
Cloudflare (R2)	Storage of media and encrypted backups	Media and an encrypted copy of the database
Hosting, email and monitoring providers	Keep the platform online, send notices and track failures	Data needed for each activity, such as the recipient's email and technical records
Analytics and advertising tools	Measure site usage and campaign results, when you consent	Pages visited, device and browser data, IP address and cookie identifiers. These providers may also process the data under their own policies
Game server owner and their team	Run and protect the server	Player data within their own scope
Public authorities	Comply with the law or a court order and exercise rights in legal proceedings	Data required in the specific case

In a corporate reorganization or sale of the business, data may be transferred to the successor, who remains bound to protect it.

7International transfers

Some providers, such as Stripe and Cloudflare, the Google Fonts service used by the documentation and the analytics and advertising tools may process data outside Brazil. Customers and players from other countries may also have their data processed in Brazil. In these cases, we rely on the grounds and mechanisms provided for in the applicable data protection law.

8How long we keep data

Customers and teams

Data	Period
Account and profile	While the account exists; afterwards, only what is needed for security, audit and legal obligations
Billing and invoices	During the contract and afterwards for the applicable tax and legal periods and for defense in legal proceedings
Login events	90 days
Action audit	365 days
Technical queue and payment events	30 days
Invitations	Up to 90 days after being accepted, revoked or expired
Daily usage peaks per subscription	365 days
Server logs and backups	According to the infrastructure's technical rotation cycles

Players

Data	Period
Technical data for anti-bot analysis	7 days
Telemetry and admission events, observed DLLs, appearances per server and HWID change observations	30 days
Detailed diagnostics	30 days
Observed account logins	90 days
Crash reports	90 days; crash groups, up to 90 days without a new occurrence; daily totals, 180 days
HWIDs, HWID change cases and administrative audit	No automatic expiry, because they support sanctions and the identification of the same machine over time

9Security

We adopt technical and administrative measures to protect data. Among them: encrypted connections, name, email and billing document stored with encryption, encrypted remote database backups, role-based access control, two-step verification or passkey for sensitive operations and logging of administrative actions.

No system is completely immune to failures. If an incident occurs that may cause relevant risk or harm, we will notify those affected and the ANPD, as required by law.

10Your rights

Under the Brazilian General Data Protection Law (LGPD), you may request:

confirmation that we process your data and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
portability, under the applicable regulations;
information about who we share your data with;
withdrawal of consent, when consent is the basis for the processing;
objection to irregular processing;
review of decisions made solely on the basis of automated processing that affect your interests.

Send your request to [email protected]. We may ask for information to confirm your identity and will reply within the legal deadlines. Some data may be kept when there is a legal obligation, or when it is needed to exercise rights.

Players should first contact the owner of the server they play on, who decides on sanctions and the use of the data.

You may also file a complaint with the ANPD. If you are in another country, local law may grant you other rights, including the right to complain to the competent authority.

11Cookies and local storage

We use items needed for the panel to work and to remember your preferences. On the site and in the documentation, we may also use optional analytics and advertising cookies, which are only turned on with your consent.

Name	Type and location	Purpose	Duration
`__Host-app_session`	Panel cookie	Keep the authenticated session	Up to 24 hours
Temporary login cookie	Panel cookie	Link the browser to the Atlin ID login flow	During login
`app_locale`	Panel cookie and local storage	Remember the language	1 year (cookie); until deleted (local storage)
`atlinguard-docs-theme`	Documentation local storage	Remember the light or dark theme	Until deleted
`ag_consent`	Site and documentation cookie	Remember whether you accepted or rejected optional cookies	Up to 1 year
Analytics and advertising cookies (optional)	Third-party cookies on the site and in the documentation	Measure visits and campaigns and show AtlinGuard ads	Set by each tool and stated in the cookie notice

You can accept, reject or change your choice about optional cookies at any time through the "Cookies" link in the site footer. You can also delete or block these items in your browser settings, but without the session cookie you cannot sign in to the panel. Atlin ID may use its own cookies during authentication.

12Children and teenagers

The AtlinGuard panel is intended for people aged 18 or over. If a player is a child or teenager, it is up to the server owner to observe the applicable rules, including those on the best interests of the minor and the involvement of parents or guardians.

13Changes and contact

We may update this policy when the service or the law changes. The date at the top of the page shows the version in force and, for relevant changes, we will notify customers through the panel or by email.

Questions and requests: [email protected]. See also the Terms of Use.