Who runs MundOT

MundOT is a hobby project. One person runs it, not a company: there is no registered company and no CNPJ today, and that may change later. Until it does, that person is the controller of your personal data under the LGPD (Lei 13.709/2018), and every request described on this page reaches him at [email protected].

This page holds the terms of use, the terms of sale and refunds, and the privacy notice together, because they answer one question: what you agree to when you use or buy on MundOT, and what happens to your data. Brazilian law applies to all three.

Your account

You need an account to play. You give an email address, you choose a password, a nickname and a region. The nickname is yours everywhere on MundOT — the scoreboard, the season board and the site all use it — and it is permanent: there is no rename. The account is yours: you answer for what happens under it, and for keeping your password to yourself.

When you sign up we send a confirmation link to that address. Opening it confirms the address and makes the account active. Completing a password reset does the same, because opening a link we mailed to that address proves the same thing. Neither of them changes an account that staff has suspended or deleted.

To buy Mundo Coins, the account has to be active, which means its email address is confirmed: receipts and refunds go to that address.

What we collect

  • Your account. The email address you signed up with, a bcrypt hash of your password, and the nickname and region you chose at signup. The password itself is never stored.
  • Your sessions. One record for each device you are signed in on: the IP address our service saw the request arrive from, the browser user agent string, and the times the session was created, last used and expires. You can read that list on your account page and end any session in it.
  • Your password reset and confirmation links. When you ask for a password reset, and when we send a confirmation email, we store one record for that link: a hash of the link's token — never the token itself, so a copy of the database yields no working links — what the link is for, when it expires, whether it has been used, the address the request came from, and when it was created. A reset link lasts one hour, a confirmation link lasts 24 hours, and either works exactly once.
  • Your characters. Their names, and everything the game server records about them while you play — level, experience, deaths, frags, bans and the rest.
  • The address you played from. To recognise matches between players on the same network, the account service keeps, for each match that ends, only a hash of the IP address you joined from, made with a secret key of ours; the address itself stays on the game server only until the account service has received the match.
  • Your orders and your balance. Each purchase of Mundo Coins becomes an order: the package, the amount in reais, the status (waiting for payment, paid, expired, failed, refunded or reversed), the dates, and the Pix code generated for the payment. We also keep the account's Mundo Coin balance and every change to it, with the reason. You can read the balance and your latest orders on your account page.
  • The creator code and who invited you. If you arrived through a content creator's link, we keep that creator's code on your account and copy it to each order. That is how we know which link a purchase came from. If you created your account through a player's invite link, we keep on your account which account invited you. That is how we know whom to pay for the invite (item 12 of the terms of sale). Every account also has the code of its own invite link.
  • What you own and what you show. The items your account owns, such as the Founder pack's title, badge and frame, and the title, frame and banner you choose to show on your profile.

That is the whole list. At sign-up we do not ask for your name, your address, your documents or your date of birth: only your email and your password. At checkout we ask for your first name, your surname and your CPF, and we pass all three to Mercado Pago with the order. We do not keep them: not in our database, not in our logs, not in our error reports. They stay in memory only for the request that creates the charge. We also do not buy data about you from anyone.

Cookies

Five cookies, and no others. What the site keeps in your browser outside cookies is further down, under "Buyer details in this browser".

  • tgod_session keeps you signed in. It carries the session token, and the browser does not let scripts read it.
  • tgod_session_meta carries when the session was issued and when it expires, so the site can renew it before it lapses without asking the server on every page.
  • tgod_locale remembers the language you chose.
  • tgod_ref keeps the referral code of the link you arrived through (from a creator, a server list or an event). It lasts 30 days, is deleted when you create your account, and no script can read it.
  • tgod_invite keeps the code of a player's invite link, if you arrived through one. It lasts 30 days, is deleted when you create your account, and no script can read it.

There are no analytics cookies and no advertising cookies on this site. We run no tracker, we embed no advertising network, and nothing here builds a profile of you. That is also why there is no cookie banner to accept: the five cookies above are for the site to work, to remember your language and to know which link you arrived through.

The purchase confirmation screen loads Mercado Pago scripts. On that screen only, and on no other page, the site loads MercadoPago.js and Mercado Pago's security script. They identify your device to prevent fraud and run under Mercado Pago's own policy, not ours. The device identifier goes with the order. We still set only the five cookies of our own above and run no analytics or advertising.

Buyer details in this browser

The confirmation screen has a checkbox, "Remember buyer details", unticked by default. If you tick it, your first name, your surname and your CPF are kept in this browser's local storage (localStorage), and your next purchase on this browser arrives pre-filled. They leave the browser only when you confirm a purchase. They are not tied to your account: whoever uses this browser after you would see them.

To remove them, confirm a purchase with the box unticked, sign out on this browser, or clear the site's data in the browser settings. One risk remains: a script injected into the site could read them. That is why the box is unticked by default, and why you should not tick it on a computer that is not yours.

Crash and error reports. When the game or this site fails, it sends a report to Sentry, an error-reporting service outside Brazil. The report is technical: the stack trace (where in the code it failed), the game or site version, and your operating system or browser type. It contains no password. We do not store your IP address, and we do not keep the memory dump of a crash. These reports do not track or record what you do, and they set no cookies.

Why we keep it

We keep your email and password hash to run your account and let you sign in. We keep sessions so you can see where your account is signed in and end one you do not recognise, and so a stolen token being used from somewhere new can be noticed. We keep the link records so a link cannot be used twice, and so nobody can use one address to flood somebody else's inbox with reset mail. We keep character data because it is the game: a character is a record on a game server, and a ranking is that record read back. We keep orders and the balance to credit the Mundo Coins you bought, show your history, handle refund requests and have a record of each sale. We keep the creator code to know which link an account and a purchase came from. We keep who invited an account to pay the invite to the inviter. We keep the items and profile choices to show what is yours.

Under the LGPD, running your account, sending the emails it depends on (the password reset, the confirmation and the receipt for each purchase) and processing the purchases you make are what the service you asked for requires. The session and link records are also how accounts are kept secure.

What is public, and what can never be

Public pages show character names and what the game recorded about those characters: rankings, the online list, deaths and bans.

Your account appears nowhere on this site. Not your email, not your region. Your nickname is different: it is the name you play under, so it is exactly what public pages show — the scoreboard, the season board and search all use it. This is not a habit we keep — it is built in. The read layer the website uses cannot select the accounts table at all: the query guard rejects any statement that so much as mentions it, so there is no page, no endpoint and no accident that can publish it.

Bans follow from the same rule. The game bans an account, but a ban is published per character, with its reason, and never per account. Publishing it per account would tell everyone which characters belong to the same person, which is exactly the link the rule above exists to prevent.

What you choose to show on your profile is public. Your title, frame, banner and badges appear on your player page, next to your nickname. Someone who buys the Founder pack therefore shows that they bought it. Your balance and your orders are visible only to you, when you are signed in.

Where your data is, and who else handles it

The game servers, the account service and their databases run on Magalu Cloud in São Paulo, Brazil.

The website itself is served by Vercel and passes through Cloudflare, and both operate networks outside Brazil, so a page request may be handled on a server in another country. What they handle is the request. Your personal data lives in the Brazilian databases above.

Email is delivered from outside Brazil. Password reset and confirmation messages, and purchase receipts, are sent through Resend, an email provider in the United States, from [email protected]. Sending one means two things leave the country: the address the message goes to, and the message itself. A reset or confirmation message contains a single-use link and nothing else about you; a receipt gives the order number, the package, the amount, the Mundo Coins and the date of the purchase. Nothing else reaches them — not your characters, not your region, not the addresses we recorded. Our emails carry no images and no tracking pixel, so opening one tells us nothing. Resend keeps its own delivery records under its own policy, which we do not control.

Payments go through Mercado Pago. To generate the Pix code, we send Mercado Pago the order number, the amount, the package, your account's email address and the date it was created, your first name, your surname and your CPF, and your device identifier. Mercado Pago treats these as an independent controller, to process and protect the payment, under its own privacy policy, which we do not control. We send them because the purchase you asked for needs them (LGPD art. 7, V). We do not keep the payer's name, surname or CPF, and we do not keep your bank account details: from Mercado Pago we keep the order's status, the Pix code and QR, and the payment notices it sends us.

We do not sell your data, we do not share it with advertisers, and no analytics company receives it.

How long we keep it

A session stops working when it expires or when you end it. A reset or confirmation link stops working as soon as it is used, and otherwise when it expires — one hour for a reset, 24 hours for a confirmation.

The records do not outlive that. A job on our server runs on a recurring schedule and deletes expired sessions and expired link records from the database, so an expired row is not merely ignored — it is removed.

Your account and your characters stay for as long as the account exists. If you ask us to delete the account, its characters, its sessions, its link records, its balance and its items go with it. Purchase orders are the exception: an order's record is not deleted with the account, because it is our proof of what was charged, credited and refunded. An account that has orders is therefore kept with them, for as long as we need that proof. If MundOT shuts down, the data goes too.

Your rights

Under the LGPD you may ask us to:

  • confirm whether we hold data about you, and give you a copy of it;
  • correct anything that is wrong;
  • delete your account and its characters, except for purchase orders (see “How long we keep it”);
  • hand your data to you in a form you can take elsewhere;
  • explain what we do with it, which this page sets out to do already.

Write to [email protected] and say what you want. We will ask you to write from the address the account uses, because that is the only way to tell the request is yours. Your nickname and region are set once at signup and there is no self-service way to change either — write to us if one needs correcting.

One honest limit on deletion. Deleting your account removes the account, its characters, its sessions, its reset and confirmation links, its balance and its items; if the account has purchase orders, it is kept with their record. It cannot undo what other players already saw while you played: a name someone kept in a screenshot, a death another player watched, a frag counted on someone else's record. We can erase our copy of your data, not their memory of the game.

Playing fairly

The rules are short:

  • No automation. Do not use a bot, a macro, or any program that plays for you.
  • No exploiting bugs. If you find one, report it instead of using it. Using it is the part that ends in a ban.
  • No trading accounts. Do not sell, buy, rent or hand over an account or a character.
  • No attacking the service. Do not try to reach other people's accounts, and do not try to disrupt the servers or this website.

Staff may remove a character or an account that breaks these rules, with or without warning depending on what happened. Bans are listed publicly on this site, per character, with the reason written by the member of staff who issued it. If you believe a ban is wrong, write to the address above. What happens to the Mundo Coins and items of a closed account is in item 11 of the terms of sale.

Terms of sale and refunds

These are the terms for buying and receiving Mundo Coins on MundOT. If the languages of this page ever differ, the Portuguese text is the one that applies.

  1. Who sells. Diogo Carneiro Dourado, CPF 093.361.826-33, Rua Olegário Mariano, 242, Tijuca, Rio de Janeiro, RJ, CEP 20510-210, [email protected].
  2. Mundo Coins. Mundo Coins are a virtual currency used only inside MundOT. They have no cash value, cannot be transferred, sold or exchanged between accounts, and do not expire.
  3. Buying. Prices are in reais. Payment is by Pix, processed by Mercado Pago. The Mundo Coins enter your account when the payment is confirmed, and you receive a receipt by email.
  4. Right of withdrawal. Up to 7 days after buying a package, you can ask for a full refund, as long as the Mundo Coins from that package have not been used (Brazil's Consumer Defense Code, CDC, art. 49). The same applies to the Founder pack, and the Founder title, badge and frame are removed.
  5. Items bought with Mundo Coins. Cosmetic items and the season pass are delivered immediately. Once delivered, they are not refunded, except for a defect or a legal obligation. Nothing you buy changes what happens inside a match.
  6. Season pass. It is valid for the season it names. Each reward is delivered when you reach its level. The pass ends with the season.
  7. Reversed payment. If a payment is reversed (a return through Pix, a dispute or fraud), the matching Mundo Coins are taken back. If they were already used, the shop stays locked for the account until the situation is resolved.
  8. No draws. No purchase delivers a random item.
  9. Changes. Prices and items can change. Limited-time items, such as the Founder pack, are not sold again.
  10. How to ask for a refund. Write to [email protected] from the account's email address, with the order number. We answer within 5 business days.
  11. Closed accounts. If we close an account for fraud, cheating, an improper chargeback or another violation of these terms, the account's Mundo Coin balance and items are lost, with no refund, unless the law guarantees otherwise. If you ask us to close your own account, unused Mundo Coins follow the rule in item 4.
  12. Player invites. Every account has a personal invite link. When an account created through it confirms its email, the link's owner receives 200 Mundo Coins, once per invited account. The limit is 1000 Mundo Coins per account, across all invites, and it does not renew. Only the inviter receives anything: the invited account gets nothing. Invite Mundo Coins are Mundo Coins like any others and follow item 2. Creating accounts only to collect the reward is fraud, and item 11 applies. A suspended or deleted account receives nothing, and a suspended or deleted invited account does not count.

What we do not promise

MundOT is offered as it is. There is no uptime guarantee and no service level: this is a hobby project, and it can be down at the hour you want to play.

The world may be restarted, reset or discontinued, and characters and their progress may be lost with it. Do not treat what you build here as permanent. To say it plainly: we are not liable for lost progress, lost items or lost time, or for what follows from the service being unavailable. This does not change the terms of sale above, or what the law guarantees to someone who buys.

Changes to this page

When this page changes in a way that matters — a new kind of data, a new purpose, a change in what we sell or in how a refund works — we will email the address on your account when the change takes effect, instead of editing the text quietly.

Contact

[email protected], for anything on this page: a request about your data, a ban you want looked at again, or a question about a term you do not like.