Privacy Policy
Last updated: 16/10/2025
Your privacy is important to us.
It is Path of Codex's policy to respect your privacy regarding any information we may collect while operating our website. We have developed this privacy policy in order for you to understand how we collect, use, communicate, disclose and otherwise make use of personal information.
We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.
1. General Principles
- Personal information collection will be conducted by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject.
- Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
- We will collect and use personal information solely for fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
- Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
- We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
- We will make readily available to customers information about our policies and practices relating to the management of personal information.
- We will retain personal information only for as long as necessary for the fulfillment of those purposes, including the account recovery period.
2. Your Rights under LGPD (General Data Protection Law)
This Privacy Policy has been adapted to comply with Law No. 13.709/2018 (General Data Protection Law - LGPD), which grants you, as a resident of Brazil, certain rights regarding your personal data.
Under the LGPD, you have the right to:
- Confirmation and Access: Request confirmation of the existence of processing and access to your personal data held by us.
- Correction: Request the correction of incomplete, inaccurate, or outdated data.
- Anonymization, Blocking, or Deletion: Request the anonymization, blocking, or deletion of unnecessary or excessive data or data processed in non-compliance with the LGPD.
- Portability: Request the portability of your data to another service or product provider.
- Deletion: Request the deletion of personal data processed with your consent.
- Information regarding Sharing: Request information about public and private entities with which we have shared data.
- Revocation of Consent: Revoke your consent at any time.
To exercise any of your rights, please send a request to email: [email protected].
3. Information We Collect
We collect information in various ways:
- Information you provide to us: This includes information you enter when registering (email, username), authenticating with third-party providers (like Path of Exile), and filling out your profile (bio, social links).
- Information we collect automatically: We collect log and device information, such as your IP address, browser type, and activity on the site, to maintain security and functionality.
- Build Import Information: When importing a Path of Building (PoB) build, we collect and store all data contained in that import code (such as items, gems, passive tree, and character statistics).
4. How We Use Your Information
We use your information to:
- Provide, operate, and maintain our website.
- Process your build imports and display them on your profile.
- Improve, personalize, and expand our website.
- Understand and analyze how you use our website.
- Communicate with you for customer support or to provide updates.
- Comply with legal obligations and prevent fraud.
5. Information Sharing
We do not sell your personal information. We may share information in the following circumstances:
- Public Builds: Any build (and the character data contained within) that you mark as public may be used by Path of Codex for promotion in future content.
- Service Providers: We work with service providers (such as Supabase for our database and authentication, and Vercel for hosting) who process data on our behalf.
- Legal Obligations: We may disclose your information if required by law.
6. Data Deletion and Retention
As described in your settings page, you can request the deletion of your account. Upon confirmation, your account will be marked for deletion and deactivated. All your personal data will be permanently removed from our active systems after a 30-day grace period. You can reverse this deletion simply by logging in again within this period.
7. Changes to Privacy Policy
We may change this privacy policy from time to time. We encourage visitors to frequently check this page for any changes. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.