Privacy policy

This document describes how WELVMNG collects, uses, stores, shares and protects the personal data of visitors to this website, in line with the Brazilian General Personal Data Protection Law (Law 13.709/2018 — the "LGPD"). The European Union General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") also applies where the data subject is in the European Economic Area.

Last updated:

1. Who we are

WELVMNG ("We Love Music And Games", "we") is a community of people who gather around music, games and geek art, and is responsible for the personal data collected through this website (the "Site"). The community is not a company and sells nothing.

We are committed to processing personal data in a transparent, minimal and secure way. This site has no forms, no login and no tracking scripts of any kind (Google Analytics, Meta Pixel or equivalent). For any question about this policy, reach us through the channels listed at the bottom of this document.

2. What data we collect

This site neither asks for nor receives any data from you: there is no form, no sign-up and no login. The only data that exists is technical — generated automatically by any visit on the internet — plus your own preferences, which stay in your browser:

  • Technical browsing data. IP address (transiently), device type, operating system, browser and pages visited. Collected by the hosting provider (Cloudflare Pages) for security and technical-diagnostic purposes, and never used by us to identify anyone.
  • Site preferences. Your chosen theme (light/dark), visual style, language and your cookie-consent record. Stored locally in your browser (localStorage) and never sent to any server.
  • Music player preferences. Optional background-music preference, chosen volume, and best-effort playback position, stored locally in your browser (localStorage/sessionStorage); nothing is sent to third parties, no tracking.

3. Why we process your data (purposes and legal basis)

We process personal data based on the following legal grounds set out in art. 7 of LGPD (and, where applicable, in art. 6 of GDPR):

  • To operate and protect the Site. Technical operation, fraud prevention and security-incident response. Legal basis: legitimate interest (LGPD art. 7, IX / GDPR art. 6(1)(f)).
  • To comply with legal obligations. Where applicable, to comply with legal, regulatory or judicial requirements. Legal basis: legal obligation (LGPD art. 7, II / GDPR art. 6(1)(c)).
  • Site analytics and improvement. Only with your consent (analytics cookies). Legal basis: consent (LGPD art. 7, I / GDPR art. 6(1)(a)).
  • Marketing and personalization. Only with your consent (marketing cookies). Legal basis: consent.

4. With whom we share data

We do not sell personal data. We share data only when strictly necessary, with the following categories of third parties:

  • Hosting and CDN provider. Cloudflare Pages, which delivers the site and stores technical access logs.
  • Analytics tools (with consent). The site uses none today. If it ever does, it will run in anonymized mode and only with your consent.
  • Public authorities. When required by law, regulation or judicial order.

5. International data transfers

Some of our providers may store data on servers outside Brazil. When this occurs, we require Standard Contractual Clauses or use providers established in jurisdictions with an adequate level of protection, in compliance with arts. 33–36 of LGPD and, where applicable, arts. 44–49 of GDPR.

6. How long we keep data

We retain personal data only for as long as necessary to fulfill the purposes described, observing applicable legal and regulatory obligations:

  • Technical logs. Up to 6 months, in line with security best practice and art. 15 of the Brazilian Internet Civil Framework. Kept by the hosting provider, not by us.
  • Cookie-consent record. Up to 12 months in your browser, after which we will ask for your consent again.
  • Site preferences. They stay in your browser until you clear the site's data. They never leave your device.

7. Cookies and similar technologies

Cookies are small files stored in your browser. On this Site we also use local storage ("localStorage") for functional preferences. We organize these resources into three categories:

  • Strictly necessary (always active). Enable basic functionality — theme preference, language preference and your consent record. They do not require consent and cannot be disabled.
  • Analytics & performance (consent). Measure aggregated site usage so we can improve it. Activated only with your consent and revocable at any time.
  • Marketing & personalization (consent). Help us understand traffic sources and personalize communication. Activated only with your consent.

You may review or change your choice at any time by clicking "Manage cookies" in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

8. Your rights as a data subject

Under art. 18 of LGPD (and, where applicable, arts. 15–22 of GDPR), you have the right to:

  • Confirmation and access. Confirm the existence of processing and access your data.
  • Rectification. Correct incomplete, inaccurate or out-of-date data.
  • Anonymization, blocking or erasure. Request the blocking or erasure of unnecessary, excessive or non-compliant data.
  • Portability. Request the portability of your data to another provider, subject to commercial and industrial secrecy.
  • Erasure of data processed based on consent. Request the erasure of personal data processed under your consent, except where retention is legally required.
  • Information about sharing. Know with whom your data is shared.
  • Information about the option to refuse consent. Know the consequences of not providing consent.
  • Withdrawal of consent. Withdraw your consent at any time, as easily as it was given.
  • Objection. Object to processing carried out under one of the legal grounds that does not require consent, in case of LGPD non-compliance.
  • Review of automated decisions. Request the review of decisions taken solely on the basis of automated processing that affect your interests.

To exercise any of these rights, contact our DPO using the channels listed at the bottom of this policy. We will respond within a reasonable timeframe, in line with art. 19 of LGPD.

9. Information security

We adopt technical and administrative measures to protect personal data against unauthorized access, loss, destruction, alteration and undue disclosure — including encryption in transit, role-based access control, audit logs and periodic review of procedures.

In the event of a security incident that may pose a relevant risk or harm to data subjects, we will notify the Brazilian Data Protection Authority (ANPD) and the affected data subjects, in accordance with art. 48 of LGPD.

10. Children's and adolescents' data

This Site is not directed at children. We do not knowingly collect personal data from minors under 18 without specific and prominent consent of at least one parent or legal guardian, as required by art. 14 of LGPD. If you believe we have collected data from a child without proper consent, contact us so we can remove that information.

11. Changes to this policy

We may update this policy to reflect changes in our practices, in legislation or in this site. The most recent version will always be available on this page, with the update date shown at the top. Material changes will be communicated prominently on the Site.

12. How to reach us

For questions, requests related to your rights or to report incidents, contact the community's organisers:

  • Discord. The community server is the official contact channel. The invite is in the header button and in the footer of every page on this site.

You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD): https://www.gov.br/anpd.

Join the Discord