xTibia

.com

Privacy Policy

Last updated: November 9, 2026

This policy explains what data xTibia (xtibia.com) collects, how it is used, and what rights you have over it, in accordance with the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).

Data we collect

  • Account data: username, email address, and password. The password is stored only as a cryptographic hash, never in plain text.
  • Content you post: topics, posts, private messages, profile photo, signature, reactions, and any other information you add to your profile.
  • Technical data: IP address and date/time of registration, sign-in, and posts, used for security and spam prevention.
  • Account preferences: language, time zone, and notification settings.

How we use your data

  • Create and maintain your account and let you sign in.
  • Display the content you post in the community.
  • Send account emails, such as registration validation, password recovery, and notifications you enable.
  • Moderate the community, prevent spam, fraud, and abuse, and keep the site secure.
  • We do not sell your data and do not use it for targeted advertising.

What is public

  • Your username, profile photo, signature, and content posted in public forums can be seen by any visitor.
  • Your email address and IP address are never shown publicly.
  • Private messages are visible only to the conversation participants, except when review is needed to handle a report or comply with a legal obligation.

Who we share data with

  • Cloudflare: site delivery, attack protection, and anti-bot verification at registration.
  • SendGrid: delivery of account emails.
  • Backblaze B2: storage of uploaded images and files.
  • These providers process data only to deliver their service to xTibia. We may also share data when required by law or court order.

Cookies

  • Session cookie, required to keep you signed in.
  • Preference cookies, such as your chosen language and access to password-protected forums.
  • We do not use advertising or third-party tracking cookies.

Sign-in with external accounts (Google)

  • If you sign in with your Google account, we receive only your name, email address, and profile photo, with your permission.
  • This data is used only to create or link your xTibia account and let you sign in.
  • We do not access any other Google account data and do not share this data with third parties. Its use complies with the Google API Services User Data Policy, including the Limited Use requirements.
  • You can revoke access at any time at myaccount.google.com/permissions.

How long we keep data

  • Account data is kept while the account is active.
  • Technical records, such as IP addresses, are kept as long as needed for security and legal compliance.
  • When an account is deleted, its personal data is removed. Public posts may remain anonymously to preserve discussions.

Your rights

  • You can access and correct your data in your account settings.
  • You can request a copy of your data, account deletion, or withdrawal of consent through the contact email below.

Changes to this policy

  • We may update this policy. The last update date is shown at the top of the page, and relevant changes are announced on the site.

Questions or requests about your data can be sent to contato@xtibia.com