Skip to content
Cavaleiros Celestiais Download the launcher

Cavaleiros Celestiais

Privacy Policy

Version of November 2, 2026

This page explains what data Cavaleiros Celestiais (the game, the launcher, the Android app and the cconline.com.br website) keeps about you, what each piece is for, how long it stays and how to ask us to delete it all. We describe the game as it actually works today.

1. Who looks after your data

The controller is Cavaleiros Celestiais, an independent developer in Brazil. Any privacy contact goes through the report form on the website or the account deletion form. This policy follows the Brazilian General Data Protection Law (LGPD, Law 13,709/2018).

2. Data we keep

  • Account data: username, e-mail and password. Your password is never stored as you typed it: the server keeps only a hash of it (an irreversible fingerprint).
  • Game data: your characters, level, items, gold, progress, quests, friends, clan and account settings.
  • Chat messages: what you write in private conversations is stored on the server for up to 90 days. What you write in game channels (general, global, party and clan) is kept while your account exists and is deleted with it. This record helps settle disputes about trades, purchases and sales between players, and to investigate abuse.
  • IP address and access logs: the IP of your last access and logs of in-game actions (for example, movements of gold and items) are kept for security, to investigate cheating and to enforce the limit of accounts per IP.
  • Sign-in confirmation: the code we send by e-mail and, if you choose to trust a device, a mark that identifies that computer for 90 days so we do not ask for the code every time.
  • Device and performance data: graphics card model, screen size, chosen graphics quality, the map you were on and performance numbers (frames per second, stutters). They are used only to make the game lighter and are kept for up to 30 days.
  • Reports: whatever you write in the report form, the contact you provide and a scrambled version (hash) of your IP, used only to block abuse of the form.
  • Storage on your device: the game keeps your open session, language and screen preferences on your device or browser. We do not use advertising cookies.

3. What we use it for

To create and maintain your account, make the game work, protect your account and the game from fraud and cheating, answer your requests and reports, and improve performance. We do not make automated decisions that have legal effects on you.

4. What we do not do

  • We do not sell or rent your data.
  • There are no ads in the game or on the website.
  • We do not use third-party tracking for advertising, and we do not build a profile of you for that.

5. Third-party services that help the game run

  • Site protection and delivery network: protects and delivers the website and the game, and provides two services. Turnstile is the anti-bot check that appears when you create an account and sign in. Web Analytics counts visits to the website and to the game in the browser, without tracking cookies and without identifying you.
  • Hosting and e-mail delivery: the game server runs on contracted hosting, and the sign-in code and password-change e-mails go out through an e-mail delivery service. They process data only to provide that service.

Beyond that, we only hand data to authorities when the law requires it.

6. Security

All communication between your device and the server is encrypted in transit (HTTPS). Passwords are stored as hashes. Access to the internal admin panel is restricted to the team. No system is 100% secure, but protecting your account is a priority for us.

7. How long we keep it

  • Account and game data: while the account is active.
  • After a deletion request: the account and its data are erased within 30 days.
  • Exceptions: whatever the law requires us to keep, and security and cheating records, including the economic history (gold, items and trades), which are kept for up to 90 days before being erased.
  • Chat: private conversations up to 90 days; game channels while the account exists. Performance data: up to 30 days.

8. Your rights

Under the LGPD you can ask us to confirm that we process your data, to give you access to it, to correct it, to anonymize it, to port it, to tell you who we share it with, and to delete it. You can also withdraw consent when consent is the basis for processing. To exercise any of these rights, use the report form. You may also complain to Brazil's National Data Protection Authority (ANPD).

9. How to delete your account

Request deletion on the Delete account page. Inside the game, go to the sign-in screen, open the account panel and choose "Delete account". For your safety, we confirm the request through the account's e-mail before erasing anything.

10. Children

The account is for people over 13. If we find an account belonging to someone younger, it is deleted. If you are the guardian of a child who created an account, ask for deletion through the form above.

11. Changes to this policy

We may update this policy. The version in force is always the one on this page, with the date at the top.