CMD HACKER / LEGAL DOCUMENTS
Privacy Policy
How we handle real data behind a fictional universe.
Last updated: September 16, 2026 · Draft 1.0
1. Controller and scope
This policy applies to the CMD Hacker website and game. Data controller: [INSERT LEGAL NAME AND ADDRESS]. Privacy and account deletion contact: [INSERT PUBLIC EMAIL]. These details must be completed before official publication.
2. Fictional gameplay, real account data
Target IPs, scans, attacks (ATK), devices, city locations, operations, credits and balances are simulation elements. They do not represent access to external networks, bank accounts or real assets. This does not make your account data fictional: email addresses, identifiers and connection logs may be personal data. The real IP used to connect to the service is different from an IP represented in the game universe.
3. Data processed
Current functionality includes account ID, nickname, device or installation identifier, creation and access dates and, when provided, email address and verification status. We process progress, virtual resources, operations, Clan interactions and moderation records. Technical logs include the real connection IP, client information (user agent), requested route, time, response status and request duration. Communications sent to support may also contain personal data. Do not include passwords, banking information or sensitive information in names or messages.
4. Purposes and legal bases
We use necessary data to create and authenticate accounts, save progress and provide requested features on the basis of contract performance. Security, fraud and cheating prevention and diagnostics may rely on legitimate interests, subject to necessity assessments and respect for individual rights. Legal obligations and the establishment, exercise or defense of legal claims support the corresponding processing. Where consent is required, it will be requested separately and may be withdrawn; this policy is not blanket consent.
5. Visibility and sharing
Your nickname, actions and gameplay information may be visible to other players depending on the feature; Clan messages are intended for channel participants. Hosting, infrastructure and email service providers may process data necessary to operate the service, subject to data protection obligations. Data may also be disclosed to comply with valid legal requirements or exercise legal rights. App stores process data under their own policies. Operational providers, processing countries and any international transfers must be confirmed before launch; transfers must follow the safeguards required by applicable law.
6. Local storage and website
The app uses local storage for preferences and information needed for sessions. The current promotional website does not include advertising cookies, a registration form or third-party analytics. Hosting may generate technical access logs. Changes introducing tracking or new purposes must be reflected in this policy and, where required, accompanied by a choice or consent.
7. Retention and security
We retain data for as long as necessary for the stated purposes and applicable legal obligations. Account deletion does not immediately erase data whose retention is necessary and lawful for security, legal obligations or legal claims. Backups must follow an expiration cycle and restricted access. Specific retention periods for logs, backups and account data must be defined before publication. We apply technical and organizational measures proportionate to risk; no system offers absolute security.
8. Your rights and deletion
Depending on applicable law, you may request confirmation of processing, access, correction, anonymization, restriction or deletion of unnecessary or unlawfully processed data, portability where applicable, information about sharing, withdrawal of consent and review of automated decisions affecting your interests. You may also contact the Brazilian ANPD or another competent authority. Account and data deletion requests should be submitted to the privacy contact above once configured. We may verify your identity proportionately. We will explain any required retention and its grounds. Uninstalling the app does not delete your account.
9. Children and teenagers
Processing children’s and teenagers’ data must respect their best interests, the age rating and applicable legal requirements, including guardian involvement when required. The age rating and appropriate age and authorization mechanisms must be defined before launch. If you suspect improper processing of a minor’s data, use the privacy contact to request review and appropriate action.
10. Updates
We may update this policy to reflect service and legal changes. The date and version will appear on this page; material changes will be communicated appropriately. New purposes still require a lawful basis or consent where required.