Privacy Policy
We are committed to protecting your personal data and being transparent about how we collect and use it. This policy applies to all users worldwide.
Last updated: February 22, 2026
Who We Are
Unofficial Communities is operated by Unofficial Brasil. We act as the data controller for the personal information we collect through our Platform.
Data Controller: Unofficial Communities by Unofficial Brasil
Data Protection Officer (DPO): Reachable at contato@unofficialbrasil.com.br
Primary Data Storage: Brazil
LGPD (Lei Geral de Protecao de Dados — Lei 13.709/2018)
The Brazilian General Data Protection Law applies to all processing of personal data in Brazil. As a Brazil-based platform, LGPD is our primary data protection framework.
GDPR (General Data Protection Regulation — EU 2016/679)
The GDPR applies when we offer services to individuals in the European Union or European Economic Area. We process EU personal data in accordance with GDPR requirements, including lawful bases for processing, data minimization, and cross-border transfer safeguards.
CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act)
The CCPA, as amended by the CPRA, applies to California residents. We honor all rights granted under these laws, including the right to know, delete, and opt-out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.
Data You Provide to Us
We collect the following personal data that you voluntarily provide:
Name and Display Name
To identify you on the Platform, display your profile to other Members, and personalize your experience.
Performance of contract (Art. 7, V)
Performance of contract (Art. 6(1)(b))
Email Address
To create and manage your account, send transactional notifications, and communicate important updates about the Platform.
Performance of contract (Art. 7, V)
Performance of contract (Art. 6(1)(b))
Password (Hashed)
To authenticate your identity and secure access to your account. We store only cryptographic hashes, never plaintext passwords.
Performance of contract (Art. 7, V)
Performance of contract (Art. 6(1)(b))
Profile Information (Bio, Avatar, Interests)
To personalize your experience, power Living Graph connection recommendations, and display your profile to the community.
Consent (Art. 7, I)
Consent (Art. 6(1)(a))
Payment Information
To process subscription payments. Payment details are handled by our third-party payment processor and are not stored on our servers.
Performance of contract (Art. 7, V)
Performance of contract (Art. 6(1)(b))
Support Communications
To respond to your inquiries, resolve issues, and improve our services based on feedback.
Legitimate interest (Art. 7, IX)
Legitimate interest (Art. 6(1)(f))
Data Collected Automatically
We automatically collect certain information when you use the Platform:
Usage and Engagement Data
To calculate XP, maintain streaks, track mission progress, and improve gamification features. This includes pages visited, features used, and interaction timestamps.
Legitimate interest (Art. 7, IX)
Legitimate interest (Art. 6(1)(f))
Device and Browser Information
To ensure compatibility, diagnose technical issues, and protect against security threats. This includes device type, operating system, browser type, and screen resolution.
Legitimate interest (Art. 7, IX)
Legitimate interest (Art. 6(1)(f))
IP Address and Approximate Location
To enforce age restrictions, prevent fraud, comply with legal obligations, and provide region-appropriate content.
Legal obligation (Art. 7, II) and Legitimate interest (Art. 7, IX)
Legal obligation (Art. 6(1)(c)) and Legitimate interest (Art. 6(1)(f))
Cookies and Similar Technologies
To maintain your session, remember your preferences, and analyze Platform usage. See our Cookie Policy for full details.
Consent (Art. 7, I) for non-essential cookies
Consent (Art. 6(1)(a)) for non-essential cookies
How We Use Your Data
We use collected data for the following purposes:
Platform Operation
To provide, maintain, and improve Platform features, including account management, gamification (XP, missions, streaks, badges), UC World interactions, and Living Graph recommendations.
Personalization
To tailor your experience, recommend connections through the Living Graph, suggest relevant communities, and display content aligned with your interests.
Communication
To send transactional emails (account verification, password resets, subscription confirmations), service updates, and, with your consent, promotional communications.
Safety and Security
To detect and prevent fraud, abuse, and security incidents, enforce our Terms of Use, and protect the rights and safety of our Members.
Analytics and Improvement
To understand how Members use the Platform, identify areas for improvement, conduct research, and develop new features.
Legal Compliance
To comply with applicable laws, regulations, and legal processes, including responding to lawful requests from public authorities.
We never sell your personal data to third parties. We do not share your personal information for third-party advertising purposes.
Data Security
We implement comprehensive technical and organizational measures to protect your personal data:
Encryption in Transit
All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS).
Encryption at Rest
Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
Password Security
Passwords are hashed using bcrypt with unique salts. We never store plaintext passwords.
Access Controls
Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based access controls and audit logging.
Infrastructure Security
Our servers are protected by firewalls, intrusion detection systems, and regular security audits. We use containerized deployments with health monitoring.
Incident Response
We maintain a documented incident response plan. In the event of a data breach, we will notify the relevant supervisory authority and affected individuals as required by applicable law.
Your Rights (LGPD — Brazilian Users)
Under the LGPD, you have the following rights regarding your personal data:
Confirmation and Access
Art. 18, I and IIYou have the right to confirm whether we process your personal data and to access a copy of the data we hold about you.
Correction
Art. 18, IIIYou have the right to request the correction of incomplete, inaccurate, or outdated personal data.
Deletion
Art. 18, VIYou have the right to request the deletion of personal data processed with your consent, except where retention is legally required.
Portability
Art. 18, VYou have the right to request the portability of your personal data to another service provider, in a structured, commonly used format.
Revocation of Consent
Art. 18, IXYou have the right to revoke your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, contact us at contato@unofficialbrasil.com.br. We will respond within 15 days as required by the LGPD.
Your Rights (GDPR — EU/EEA Users)
If you are located in the EU or EEA, you have the following additional rights under the GDPR:
Right to Erasure (Right to Be Forgotten)
Art. 17You may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, or the data has been unlawfully processed.
Right to Data Portability
Art. 20You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller without hindrance.
Right to Restriction of Processing
Art. 18You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Right to Object
Art. 21You have the right to object to processing based on legitimate interests or direct marketing at any time. We will cease processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
Art. 22You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. Our Living Graph recommendation system provides suggestions only and does not make binding decisions about you.
To exercise any of these rights, contact our DPO at contato@unofficialbrasil.com.br. We will respond within 30 days as required by the GDPR. You also have the right to lodge a complaint with your local supervisory authority.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:
Right to Know
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting the information, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions required by law.
Right to Opt-Out of Sale or Sharing
You have the right to opt-out of the sale or sharing of your personal information. However, we do not sell or share your personal information as defined by the CCPA/CPRA.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive a different level of service or pricing for exercising your rights.
Right to Correction
You have the right to request that we correct inaccurate personal information that we maintain about you.
We do not sell or share personal information as defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months.
To exercise your California privacy rights, contact us at contato@unofficialbrasil.com.br. We will verify your identity before processing your request and respond within 45 days.
International Data Transfers
Your personal data is primarily stored and processed in Brazil. If you access the Platform from outside Brazil, your data will be transferred to and processed in Brazil.
Transfers from the EU/EEA
When we transfer personal data from the EU/EEA to Brazil, we ensure appropriate safeguards are in place as required by Chapter V of the GDPR. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized transfer mechanisms.
General Safeguards
Regardless of where your data is processed, we apply the same security measures and data protection standards described in this Policy. Brazil's LGPD provides a comprehensive data protection framework that has been recognized as offering adequate protection for personal data.
Applicable Law
The data protection law that applies to your personal data depends on your location:
Brazil
Your data is protected under the LGPD (Lei 13.709/2018). The ANPD (Autoridade Nacional de Protecao de Dados) is the supervisory authority.
European Union / EEA
Your data is additionally protected under the GDPR (Regulation 2016/679). You may contact your local Data Protection Authority for complaints.
California, United States
Your data is additionally protected under the CCPA (Cal. Civ. Code 1798.100 et seq.) as amended by the CPRA. The California Privacy Protection Agency enforces these rights.
All Other Jurisdictions
The LGPD applies as the primary framework, along with any mandatory local data protection laws in your jurisdiction.
Cookies
We use cookies and similar technologies to operate the Platform. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy. Read our Cookie Policy.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy:
Account Data
Retained while your account is active, plus 6 months after deletion to allow for account recovery.
Necessary for service provision and to comply with legal obligations.
Analytics and Engagement Data
Retained for up to 180 days (analytics events) or 365 days (social events), then automatically purged.
Used for Platform improvement, gamification calculations, and trend analysis.
Legal and Financial Records
Retained for up to 5 years after account deletion.
Required by Brazilian tax law, consumer protection regulations, and to defend against potential legal claims.
Children and Minors
The Platform is intended exclusively for users aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If we discover that we have inadvertently collected data from a minor, we will promptly delete it and terminate the associated account. If you believe a minor has provided us with personal data, please contact us immediately at contato@unofficialbrasil.com.br.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email or through a prominent notice on the Platform at least 30 days before the changes take effect. We encourage you to review this Policy periodically.
Supervisory Authorities
You have the right to lodge a complaint with the relevant data protection authority:
ANPD (Brazil)
Autoridade Nacional de Protecao de Dados — The Brazilian National Data Protection Authority. Website: https://www.gov.br/anpd
EU Data Protection Authorities
EU/EEA users may contact their local supervisory authority. A full list is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en
FTC (United States)
The Federal Trade Commission enforces data protection in the United States. California residents may also contact the California Privacy Protection Agency (CPPA) at https://cppa.ca.gov.
Related Documents
Contact Us
For any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us:
We aim to respond to all data protection inquiries within 15 days (LGPD), 30 days (GDPR), or 45 days (CCPA/CPRA), depending on the applicable regulation.
contato@unofficialbrasil.com.br