Privacy Policy
Last updated September 23, 2026.
1. What we collect
When you create an account, we store your email. When you buy or subscribe, we store the order record (game, amount, payment method, the payment provider's identifiers) and where the visit came from (UTM parameters), used only to understand which channels work. Card details stay with the payment provider; IGP never receives them.
2. How we use it
To deliver games to your library, manage your subscription, send the emails of the cycle (purchase confirmed, new drop, voting open, payment declined) and meet our tax obligations. We don't sell data to third parties.
3. Who processes your payment
Payments in Brazilian reais are processed by Mercado Pago. Payments in US dollars are processed by Paddle.com Market Ltd, acting as Merchant of Record: on that purchase Paddle is the seller of record to you, issues your receipt, is responsible for applicable taxes and receives the data needed for that (email, country and billing details). Each of them handles that data under its own privacy policy.
4. Storage
Data is kept on secure infrastructure (Supabase) and accessed only by authorised staff. Purchase records are kept for the period required by law.
5. Your rights
Under Brazil's data protection law (LGPD), you can ask for access to your data, for corrections or for deletion at any time. Deleting your account removes access to your library; payment records are kept for the period the law requires.
6. Contact
To exercise your rights or ask anything: contato@indiegamepass.com.