Privacy Policy
Last updated: July 27, 2026
NecroForja is an independent, non-commercial fan project. We collect as little data as possible — and what we do collect exists only to make the site work. This page explains, without legalese, what is collected, why, and where it lives.
01 // WHO RUNS THE SITE
NecroForja is maintained by a single person — the project's creator (see the Creator page) — as a hobby and portfolio project. It is not a company, sells no products or services, shows no ads and does not profit from your data.
02 // ACCOUNTS AND AUTHENTICATION
There is no self-signup: accounts are created manually by the Arbitrator, only for the campaign's players. An account stores a display name, an e-mail and a password — the password is stored with a strong cryptographic hash (Argon2), never in plain text.
When you sign in, an essential session cookie keeps you authenticated. It expires and can be removed by signing out or clearing your browser cookies.
03 // CONTACT FORM
When you use the contact page you provide a name, an e-mail, a subject and a message. That data is used exclusively to read and answer your message: it is delivered by e-mail to the maintainer through a sending provider, and never feeds marketing lists, is never sold and never shared with third parties.
05 // USAGE METRICS
We use Vercel Analytics to understand site usage in an aggregated, anonymous way (most visited pages, country of origin). It uses no cookies and does not identify individual visitors.
06 // SECURITY AND RATE LIMITING
To prevent abuse (contact-form spam, excessive use of the rules assistant), the IP address of requests is processed temporarily by a rate-limiting service. It is not used to build profiles and is not cross-referenced with other data.
07 // RULES ASSISTANT
Questions asked to the rules assistant (available to signed-in users) are sent to AI providers (Anthropic and OpenAI) solely to generate the answer. There is a daily question limit per user. Avoid including personal data in your questions.
08 // WHERE THE DATA LIVES
The site is hosted on Vercel. The database and image storage live on Supabase (São Paulo region). Rate limiting uses Upstash. Contact-form messages go through an e-mail sending provider. Each of these services processes only what its function requires.
09 // GALLERY IMAGES
The gallery and the reports contain photos of miniatures and games from our table. If you appear in an image (or are the author of one) and want it removed, ask through the contact page — removal is handled with no bureaucracy.
10 // YOUR RIGHTS (LGPD)
Under the Brazilian General Data Protection Law (LGPD), you can request access to, correction of or deletion of your personal data at any time. Just use the contact page — no forms, no absurd deadlines.
11 // CHANGES TO THIS POLICY
This policy may be updated as the site gains new features. The date of the last update appears at the top of the page; relevant changes will be reflected here.