Privacy policy
Updated October 8, 2026
This policy explains what data banhado.net and the Banhado forum collect, why, and what your rights are. We only collect what we need.
Who is responsible
Condomínio Lagoa do Passo Village Park, Rodovia Estrada do Mar (RS-389), km 20, Quadra 22, Lote 03, Atlântida Sul, Osório - RS, CEP 94678-910, Brasil. Privacy contact: support@banhado.net.
What we collect on the site
- Language preference: a cookie ("lang") stores the language you picked.
- The site does not use advertising or analytics cookies at this time. If it starts to, they will only be enabled after you consent through the cookie notice.
What we collect on the forum
- Username: public, shown on your posts.
- Email: never public. Used to identify and recover your account and for notices about it. It is stored encrypted: not even someone with database access can read it.
- Accounts that do not confirm their email within 7 days are deleted automatically.
- Password: stored only in scrambled, irreversible form (we cannot see your password).
- Posts and reports: posts are public; reports are only seen by moderators.
- Session: an essential cookie ("__Host-banhado_s") keeps you signed in for up to 30 days.
- Abuse protection: to limit sign-up and login attempts, we compute a scrambled code from your IP address. The IP itself is not stored, and the code is deleted within 2 days.
Launch waitlist
- Email: stored encrypted, only to send the Banhado launch notice and news. Only people who confirm through the link we send join the list.
- Language, country (detected from the connection, code only) and, if you tell us, your platform (PC or VR): to send the right message.
- Consent record: date and version of the text you accepted.
- Every email has an unsubscribe link; unsubscribing deletes your email from the list immediately. Unconfirmed sign-ups are deleted after 7 days.
Why we use it and on what legal basis
- To create and maintain your account and posts (performance of the service you requested).
- Security, spam and abuse prevention, and moderation (legitimate interest).
- Launch notice and news by email (consent, which you can withdraw at any time).
Who we share it with
We do not sell or rent data. The site and forum run on Cloudflare infrastructure, which processes connections to deliver pages and protect against attacks. When the forum captcha is enabled, Cloudflare Turnstile checks that a submission comes from a person.
Emails are sent through the Google (Gmail) email service. These providers may process data outside your country; we use providers that adopt data protection contractual clauses recognized under the LGPD and the GDPR.
How long we keep it
Account data is kept for as long as the account exists. When you delete your account, we delete your email and password; public posts stay without identification so conversations are not broken. A log of moderation actions (what was removed or suspended, and by whom) is kept for forum security.
Your rights
On the forum "My account" page you can download a copy of all your data and delete your account yourself. You can also request access, correction, deletion or a copy of your data, and withdraw consent, through the contact above. You can also complain to the data protection authority in your country (in the European Union, the one in your country of residence).
Minimum age
The forum and the waitlist are for people aged 16 and over. If we learn that someone younger signed up, we delete their data.
Changes
When this policy changes, the date at the top will be updated. Important changes will be announced on the site.