Privacy Policy

Last updated: August 5th, 2026

This Privacy Policy describes how rmsaraiva.com collects, uses, and protects the personal data of users who access this site and its hosted services, in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).

Data controller

The data controller for your personal information is Rodolfo Motta Saraiva, responsible for rmsaraiva.com. To exercise your rights or clarify any questions, contact us at .

Data collected

We process the data needed for the purposes described below, according to the service used and your preferences:

  • Arkanolf leaderboard and local profile: If you save scores, we store your chosen public name, a random identifier generated by the game (userHash), score, level, difficulty, dates, and profile creation or change metadata. The browser also uses localStorage for preferences, progress, records, public name, and this identifier.
  • Arkanolf operational logs: For security, diagnostics, and moderation, records may contain the IP address, random identifier, requested or approved name, locale, score data, validation outcome, error codes, timestamp, and moderation provider/model.
  • Attom session and telemetry: After abuse-prevention verification, Attom stores a random session identifier and its creation date in Cloudflare KV for up to one hour. To limit abuse, the IP address is processed into a temporary hash-derived identifier; the raw IP is not stored in that KV record. This site does not persist question or answer content in D1; it records only technical attempt metadata such as provider, model, duration, status, and error.
  • AI processing: Questions and history submitted to Attom are processed by Google Gemini and/or OpenRouter to generate answers. In Arkanolf, the requested name is sent to those providers for content moderation.
  • Usage data (Google Analytics): On public pages, Google Analytics may receive the page URL and title, visit and campaign source, time, general browser and device characteristics, approximate location, and pseudonymous cookie identifiers. Outside the EEA, United Kingdom, and Switzerland, metrics and campaign-measurement storage starts enabled with immediate opt-out. In those regions, storage stays denied until permission, although the tag may send cookieless signals for aggregate measurement. Admin pages never load Analytics.
  • Contact form data: If you fill out the contact form, we collect your name, email, and message in order to respond to your request.

Purpose of data use

Collected data is used to:

  • Operate the local profile and record and display scores on the Arkanolf public leaderboard.
  • Moderate names, enforce change rules, prevent abuse, and diagnose failures.
  • Validate Attom's abuse-prevention session and monitor provider availability and performance without recording question or answer content in D1.
  • Respond to messages sent via the contact form.
  • Analyze audience, performance, and campaign effectiveness to improve content and user experience under the regional opt-out default and, where applicable, on legitimate interests; or on consent where required or chosen.

Data sharing

Your personal data is not sold or rented. The providers below process data to host and protect the site, provide AI and contact features, or perform measurement according to the configuration and your preferences:

  • Cloudflare: Hosting, network delivery, abuse prevention, Turnstile, KV storage, and D1 databases. The infrastructure may process IP addresses, headers, and data required to deliver and protect the service.
  • Google LLC: Google Analytics processes public-page usage data according to the regional default and saved choice. Advertising measurement may attribute visits and conversions to campaigns; signals for personalization and remarketing require an explicit affirmative choice, and Google Signals remains disabled. Google Fonts receives technical connection data, such as the IP address and headers, when the browser downloads fonts. Gemini processes Attom questions and names submitted for Arkanolf moderation independently of these preferences when you use those features. See Google's Privacy Policy, the explanation of how Google uses data from partner sites, and the Gemini API terms.
  • OpenRouter: Alternative AI provider for Attom questions and Arkanolf name moderation. See its Privacy Policy.
  • Formspree: Service used to process contact form submissions. Your message is forwarded via Formspree to our email.

Data retention

The Attom abuse-prevention session and temporary rate-limit identifiers in KV expire in approximately one hour. Attom technical telemetry contains no questions or answers. Public Arkanolf profile and leaderboard data is retained to preserve the ranking. Operational and moderation logs currently have no fixed automatic deletion period in code and may remain until operational cleanup or a relevant request is handled. Contact messages are retained for as long as needed to respond and meet related obligations. The rms-privacy-v2 preference remains in the browser until it is reviewed, cleared by the user, or replaced by a new version. Retention of data received by Google Analytics follows the property configuration and Google's policies; this code does not set an additional period. You may request access, correction, or deletion through the channels below.

Your rights (LGPD)

Under the Brazilian General Data Protection Law (LGPD), you have the right to:

  • Confirmation and access: Know whether we process your data and obtain a copy of it.
  • Correction: Request correction of incomplete, inaccurate, or outdated data.
  • Deletion: Request deletion of your personal data processed on the basis of your consent.
  • Withdrawal of consent: Revoke your consent to data processing at any time, which does not affect the legality of processing carried out before the withdrawal.
  • Objection: Object to measurement, when based on legitimate interests, through the footer preference control and the "Reject all" option.
  • Portability: Request portability of your data to another service provider.
  • To exercise any of these rights, contact us at .

Cookies

This site uses cookies and similar technologies to:

  • Language preference: The rms_locale cookie keeps your chosen language for up to one year.
  • Attom session: The HttpOnly attom_session cookie identifies a Turnstile-validated session for up to one hour.
  • Google preferences and cookies: Your choice to reject all, allow metrics only, or accept all is stored in localStorage for this origin. Analytics may create measurement cookies and, when applicable, advertising-attribution cookies; when you reject, the site updates the consent signals and attempts to remove first-party Google cookies found on the domain.
  • Arkanolf local storage: The game uses localStorage for preferences, progress, personal records, leaderboard name, random identifier, and local name-change interval control.
  • Signals for ads personalization and remarketing remain denied until the explicit "Accept all" choice. Google Signals stays disabled, and the site does not directly display personalized ads.

Metrics, advertising, and preferences

The Google tag uses advanced Consent Mode v2. When storage consent is denied, the tag does not write the corresponding cookies but may send cookieless signals for aggregate measurement and modeling. After the explicit "Reject all" choice, the site also disables future sends from that page. Google Signals remains disabled in code.

  • Outside the European Economic Area, United Kingdom, and Switzerland, analytics_storage, ad_storage, and ad_user_data start granted for statistics and campaign attribution, with immediate opt-out available.
  • In the EEA, United Kingdom, and Switzerland, all signals start denied until a positive choice.
  • ad_personalization starts denied in every region and is granted only through "Accept all".
  • You can choose "Reject all", "Metrics only", or "Accept all". The landing page provides a discreet icon; the footer lets you review the decision at any time.
  • Each origin (rmsaraiva.com, attom.app, and arkanolf.com) keeps its own preference. Admin pages load neither the tag nor consent controls.

Security

We adopt technical and organizational measures to reduce the risk of unauthorized access, loss, alteration, or improper disclosure, including HTTPS connections, access controls for administrative areas, and abuse prevention. No internet-connected system is completely immune to incidents.

Changes to this policy

This policy may be updated at any time. The "last updated" date at the top of this page reflects the most recent version. We recommend reviewing it periodically.

Contact

For questions, requests, or the exercise of your privacy rights, contact us at .