Privacy policy

This is a translation provided for convenience. The Portuguese version is the one that applies; if they differ, the Portuguese text prevails.

Last updated: 16/10/2026. This policy explains what personal data Re:bot processes, for what purpose, with whom and for how long, under the Lei Geral de Proteção de Dados (LGPD, Brazil's General Data Protection Law, Law 13.709/2018).

Who the controller is

Volgin Teck, 65.837.003/0001-20. Contact for any personal data matter: support@rebotapp.com.

What data we process

• Email: provided when creating the account or at purchase; it receives the access link to the customer area, the license key and the license notices.
• Sign-in with Google (optional): if you choose "Continue with Google", we ask Google only for your email address, already confirmed by Google. We do not receive your password, name, photo or contacts, and we do not keep any Google identifier or token: the Re:bot account is the same as your email's.
• License and orders: plan, amount, dates, payment status and the payment identifier at Mercado Pago. We do not receive bank or card data.
• Computer identifier: a cryptographic digest (hash) generated from Windows data, to limit the license to one computer. The original data never leaves your computer.
• IP address and date of access to the license server and to the website: for security and rate limiting.
• Free trial control: a cryptographic digest (hash) of your email address and the identifier of the computer on which the trial was activated, so that each person and each computer uses the trial only once.
• Session cookie: only in the customer area, essential to keep you signed in; we do not use advertising or analytics cookies.

Re:bot does not send us data about the game, the character, your settings, screens or files: reading the client happens only on your computer. We store the license key only as a cryptographic digest.

What we use it for and on which legal basis

• Selling, delivering and validating the license, releasing updates and providing support: performance of a contract (art. 7, V).
• Keeping sales records: compliance with a legal obligation, tax and consumer-related (art. 7, II).
• Preventing fraud, abuse and attacks: legitimate interest (art. 7, IX), with the minimum of data.

We do not sell data and we do not use it for advertising.

Who we share it with

Only with the processors needed for the service to work, each one processing the data solely for its own function:

• Mercado Pago: processes the PIX payment (receives the email address and the purchase amount).
• Google: only when you choose to sign in with your Google account; it confirms your email address to us (the sign-in is also subject to Google's privacy policy).
• Resend: sends the license emails (receives the email address and the text of the message).
• Cloudflare: hosts the website, the DNS and the distribution of the launcher.
• Vultr: hosts the license server and the backups.

Some of these processors keep servers outside Brazil (for example, in the United States). The international transfer relies on their contractual guarantees and is limited to what is necessary to provide the service (art. 33 of the LGPD).

How long we keep it

• Licenses and paid orders: for as long as the license exists and for up to 5 years afterwards, due to tax and consumer obligations.
• Unpaid orders (expired, cancelled or declined PIX): up to 30 days.
• Free trial control (email hash and computer identifier): kept even after the account is deleted, for up to 5 years, solely to prevent the trial from being repeated (legitimate interest, abuse prevention). The email address itself is not kept.
• Content of the emails: deleted from our server right after sending (only the recipient, subject and date remain).
• Customer area: the access link is valid for 15 minutes and for a single use; the session ends after 24 hours without use or 7 days, whichever comes first. Expired links and sessions are deleted right after.
• Access logs with IP: for a short time, in files of limited size, and for at most 30 days.

How we protect it

Always-encrypted connections (HTTPS), keys and sessions stored only as cryptographic digests, server with key-restricted access, backup copies and minimal permissions. No system is infallible; if there is an incident that may pose a risk to you, we will notify you and report it to the ANPD (Brazil's National Data Protection Authority) as the law requires.

Your rights

You may confirm whether we process your data, access it, correct it, request portability, deletion of what is not required by law, and information about sharing (art. 18 of the LGPD), through the customer area or at support@rebotapp.com. Deletion cancels the license. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

Minors

The purchase must be made by persons aged 18 or older, or with the authorization of their legal guardian.

Changes to this policy

When this policy changes, the date above is updated; relevant changes are notified by email to those with an active license.