Courtesy translation. In case of any discrepancy, the Portuguese version prevails.
This Policy explains, plainly, how CZSBrasil handles the personal data of people who play on our servers, take part in our Discord or use this website, in line with the General Data Protection Law (LGPD, Law No. 13.709/2018).
It works together with the Terms of Use. The legal terms used here (data subject, controller, processing) are explained in Words we use.
The essentials
This summary does not replace the full text, which follows right below.
- We keep what the game needs to work: your linked accounts (Discord, Steam, EoSID), when and where you played, and your support.
- The servers log chat, commands, joins, leaves and connection IP, for security and to look into reports.
- We never see your password or your card or bank details. And we don't sell anyone's data.
- Some things are public: your Discord name on the Leaderboard, on your profile and in recent support. You can hide it.
- Each kind of data has a time limit. Connection logs stay 6 months; penalty records, while the penalty lasts plus 3 years.
- You can ask to see, correct or delete your data through a Discord ticket. We reply within 15 days.
On this page 17 sections
- 1Who looks after your data
- 2What data we handle
- 3Plugins, bots and tools
- 4What we use it for and on what basis
- 5What other people can see
- 6Security records and abuse prevention
- 7Who we share it with
- 8Data outside Brazil
- 9How long we keep data
- 10Your rights and how to ask
- 11Cookies and data in your browser
- 12Children and teenagers
- 13Security and incidents
- 14Words we use
- 15Changes to this Policy
- 16Reference laws
- 17Contact
1.Who looks after your data
1.1The controller (who decides how data is used) is CZSBrasil, a non-profit community run by Thiago Ribeiro da Silva Rêgo.
1.2Privacy contact: contato@czsbrasil.com.br, or a ticket on the community Discord with the subject “Privacy”.
1.3As a small-scale processing agent, CZSBrasil is not required to appoint a data protection officer (CD/ANPD Resolution No. 2/2022, Art. 11). The channel above plays that role: it receives complaints, questions and requests from data subjects.
2.What data we handle
It depends on what you use. Someone who only visits the website without signing in leaves far less behind than someone who plays and supports.
| Where it comes from | What we keep |
|---|---|
| Discord sign-in | Discord ID, username, display name, picture and account email. |
| Linked game accounts | Steam ID (through Steam's own sign-in) and EoSID (the ARK Ascended ID, through a code typed in the game). |
| Game servers | Character and tribe name, Steam ID or EoSID, connection IP, joins and leaves, time online, chat, commands, progress, items, creatures, buildings, points and purchases in the in-game store. |
| Community Discord | Messages in channels, roles, tickets and what you send to our bots (commands, link codes). |
| Support | Email given at payment, the account that receives the benefit, amount, date, status, coupon and the charge codes generated by the payment platform. |
| Your profile on the website | Profile address, bio, links, cover, title and featured achievements you choose. |
| Browsing the website | Session cookie, chosen language, your answer to the cookie notice and, only if you accept, Google Analytics metrics (with anonymized IP). |
We don't handle sensitive data (racial origin, religion, political opinion, health, sex life, biometrics). We also don't ask for CPF (Brazilian tax ID), address, phone number or ID documents.
3.Plugins, bots and tools
The servers and Discord use third-party programs (plugins and bots) that also touch data. Each card says what the program does, what it keeps, where, whether it sends anything elsewhere and for how long.
3.1. ARK servers (Evolved and Ascended)
Permissions VIP and staff groups on the ARK servers.
- Player data
- Steam ID or EoSID, group and, if you linked it, your Discord ID.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- No.
- How long
- As long as the account exists. VIP leaves the group automatically when it expires.
KalsCrossChat and CrosschatAscended Chat between maps in the same cluster and a bridge to Discord.
- Player data
- Character name, tribe, message, Steam ID or EoSID and, if you use the link command, your Discord ID.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- Messages show up in the chat channel of the community Discord. The tribe log can be sent by the tribe owner to an address they register themselves: that destination belongs to the player, and CZSBrasil does not control it.
- How long
- The message queue is cleared within 7 days. The copy used for moderation stays for 6 months.
WShop and ArkShop Points, store and kits in the game.
- Player data
- Steam ID or EoSID, name, points balance, purchases, kit use and point trades.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- Purchases, kit use and point trades are logged in a private staff channel on Discord.
- How long
- As long as the server exists, until the next wipe.
LethalDecay and LethalDecayAscended Marks and removes abandoned bases.
- Player data
- Tribe and date of last access.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- Warnings about bases about to disappear go to a Discord channel.
- How long
- The date is updated on every access. The base is removed after the server's abandonment period.
ASEBanCheck and ASABanCheck Central ban: anyone banned on one server is blocked on the others.
- Player data
- Steam ID or EoSID, name, reason, date and who applied it.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- Ban notice in a private staff channel on Discord.
- How long
- While the ban is in effect, plus 3 years.
ItemsPlus and ItemsPlusAscended Sending and transferring items between maps.
- Player data
- Steam ID or EoSID and the items sent or transferred.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- On Ascended, sends and transfers are logged in a private staff channel on Discord.
- How long
- The send log is deleted after 2 to 10 days, depending on the server.
TribeEnforcer and NameControl Require players to be in a tribe and check for offensive names.
- Player data
- Tribe, members and character name.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- Warnings in a private staff channel on Discord.
- How long
- Empty tribes are removed after 5 days.
LethalQuests, PlayerUtilities, AntiPVEGriefing and engram plugins Quests, player utilities, base protection on PvE and engrams.
- Player data
- Steam ID or EoSID and your progress in the plugin.
- Where it's kept
- Community database or a file on the server itself, in Brazil.
- Sent anywhere else?
- No.
- How long
- Until the server's next wipe.
3.2. Rust server
DiscordChat, DiscordMessages and DiscordPlayers Chat between the game and Discord, ban, mute and report notices, and a list of who is online.
- Player data
- Name, Steam ID, message and reason for the notice.
- Where it's kept
- On the community Discord.
- Sent anywhere else?
- Yes, to channels on the community Discord: chat in a public channel, penalty notices in a staff channel.
- How long
- Follows the Discord channel's history.
AdminRadar Staff tool to check cheating suspicions.
- Player data
- Player position on the map and Steam ID.
- Where it's kept
- On the staff member's screen, in real time.
- Sent anywhere else?
- Use of the tool is logged in a private staff channel on Discord.
- How long
- Follows the staff channel's history.
ServerRewards, Economics, Kits, PlayerRanks, SimpleStats and Backpacks Points, economy, kits, stats and backpacks in Rust.
- Player data
- Steam ID, balance, transactions, stats and stored items.
- Where it's kept
- Files on the server itself, in Brazil.
- Sent anywhere else?
- No.
- How long
- Until the next wipe. Player preferences: 100 days without use.
3.3. All game servers
The game's own logs Files that ARK, Rust and 7 Days to Die write on their own.
- Player data
- Name, Steam ID or EoSID, joins and leaves and, in some games, the connection IP.
- Where it's kept
- Files on the server itself, in Brazil.
- Sent anywhere else?
- No.
- How long
- 6 months.
3.4. Panel, Discord and bots
CZSBrasil Panel Staff system that brings your accounts together in a single record, measures time online, keeps the server chat and manages support.
- Player data
- Discord, Steam ID, EoSID, names used, who is online every 5 minutes, server chat, support and staff notes.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- The team checks the player's public history on BattleMetrics by Steam ID, for moderation.
- How long
- See the section How long we keep data.
CZSBrasil bot on Discord Game account linking, roles, welcome messages, birthdays, points for voice time, cross chat and spam filter.
- Player data
- Discord ID, game ID and ARK name, birthday (day and month, if you give it), cross chat messages and messages caught by the spam filter.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- No.
- How long
- Link and birthday: as long as they exist. Cross chat and spam filter: 6 months.
Server bots (ArkShopBot and Palworld's XASM) Link your Discord account to your game account and show points.
- Player data
- Discord ID, game ID and points.
- Where it's kept
- Community database, in Brazil.
- Sent anywhere else?
- No.
- How long
- As long as the link exists.
List checked on the servers themselves on October 26, 2026. When a program that keeps player data is added or removed, its card is updated and the date changes.
4.What we use it for and on what basis
The LGPD requires a legal basis for each use (Art. 7). Here is the list:
| What for | Legal basis |
|---|---|
| Deliver the support benefit, link your accounts and keep your VIP | Performance of the agreement with you (Art. 7, V) |
| Run the servers, keep progress, the Leaderboard, Achievements and profile | Legitimate interest (Art. 7, IX, and Art. 10), with the option to leave the Leaderboard and hide parts of the profile |
| Security, anticheat, moderation, looking into reports and stopping banned players from coming back | Legitimate interest (Art. 7, IX) |
| Keep evidence of penalties, fraud and payment disputes | Regular exercise of rights (Art. 7, VI) |
| Keep support records required by accounting or tax rules | Compliance with a legal obligation (Art. 7, II) |
| Website metrics with Google Analytics | Consent (Art. 7, I), given in the cookie notice and revocable at any time |
For legitimate interest, we assessed that this use is expected by anyone who plays in a community with rules, and that we use only the minimum. You can object to this use through the privacy channel. When an objection can't be met (for example, deleting the record of a ban that is still in effect), we explain why.
5.What other people can see
Some things are visible to other players or visitors. None of it shows support amounts, email or IP.
5.1Leaderboard: Discord nickname and picture, time connected and game. To leave, ask on Discord.
5.2Public profile: only exists if you create it. You choose what shows in each part.
5.3Recent support and Highlight of the month, in the store: Discord nickname and picture. Check “Don't show my name” when supporting to appear as Anonymous supporter.
5.4In the game and on Discord: character name, tribe name, chat messages and lists of who is online are seen by anyone on the same server or channel. Chats bridged between the game and Discord repeat the message on both sides.
5.5Livestreams and videos: what is on the game screen (names, chat) may appear in community streams.
6.Security records and abuse prevention
6.1To protect the community from people acting in bad faith, the servers and Discord keep records (logs) of connections, chat, commands and in-game actions. They are used to:
- look into reports of harassment, scams, cheating, account theft or rule breaking;
- recognize people who try to come back with another account after being banned;
- respond to payment disputes (chargebacks) and fraud attempts;
- comply with orders from authorities and report crimes.
6.2Only the administration team accesses these records, each person only for what their role needs. One player's data is not shown to another, nor to the person who made the report.
6.3When there is a ban, we keep the minimum needed to keep it in effect: the linked accounts (Discord, Steam, EoSID), the reason, the date and the evidence. This record is not deleted on request while the penalty is in effect (LGPD, Art. 16 and Art. 7, VI).
The team never asks for passwords, verification codes or tokens. And we don't hand over a player's data to anyone who claims to be “staff”, “the police” or “the account owner” without checking. Access logs are only released with a court order (Brazilian Internet Bill of Rights (Marco Civil da Internet), Art. 10, § 1).
7.Who we share it with
We don't sell, rent or trade data. It only passes through those who help keep the community running:
| Who | What for | Where it's located |
|---|---|---|
| Discord | Website sign-in, community, bots and roles | United States |
| Valve (Steam) and Epic Games | Confirm the game account and run the games | United States |
| Mercado Pago | Receive support by Pix and card | Brazil |
| PayPal | Receive support from people outside Brazil | United States |
| Tebex (old store) | History of support given before the website store | United Kingdom |
| Hostinger | Hosting for this website | United States |
| Google Analytics | Website metrics, only with your consent | United States |
| Machines for the game servers and the database | Run the games and the Panel, and store the data | Brazil |
| BattleMetrics | The team checks the player's public history by Steam ID, for moderation | United States |
We also share data when the law or a competent authority requires it. Each company above follows its own privacy policy.
8.Data outside Brazil
Some of the services above store data outside Brazil (see the table). These transfers follow Arts. 33 to 36 of the LGPD and CD/ANPD Resolution No. 19/2024, based on the data protection clauses these companies offer and on what is necessary to fulfill the agreement with you.
9.How long we keep data
Each type of data has a time limit. After that, the data is deleted or anonymized (it no longer identifies you).
| Data | Time limit |
|---|---|
| Website account and linked accounts | As long as you use the account. Deletion request: within 30 days, except what is in the penalty and support rows. |
| Connection logs (IP, date and time) | 6 months, as set by the Brazilian Internet Bill of Rights (Art. 15). |
| Chat and commands on the servers and Discord | Cross-map chat queue: up to 7 days. Copy used for moderation: 6 months. Excerpts used as evidence of a penalty are kept together with the penalty. |
| Presence on the servers (Leaderboard, Achievements) | As long as you have a record in the community, because the all-time Leaderboard and Achievements depend on history. A deletion request erases it. |
| Progress, items, creatures and points in the game | As long as the server exists, until the next wipe. |
| Penalty records and evidence | While the penalty is in effect, plus 3 years (the deadline to seek civil damages in court, Brazilian Civil Code, Art. 206, § 3, V). |
| Support (amount, date, account, charge codes) | 5 years, due to accounting and tax rules and to respond to payment disputes. |
| Google Analytics metrics | 14 months at Google, only if you accepted. |
| Plugin logs (in-game store purchases, items, tribes) | Until the server's next wipe, or the period on the plugin's card, whichever comes first. |
Even after a deletion request, we may keep what the law allows: to comply with a legal obligation, as evidence in legal proceedings, or in anonymized form (LGPD, Art. 16).
10.Your rights and how to ask
Under the LGPD (Art. 18), you can ask, free of charge, for:
- confirmation that we process your data, and access to it;
- correction of wrong or outdated data;
- anonymization, blocking or deletion of anything unnecessary or excessive;
- portability of your data;
- deletion of what we process based on your consent;
- information on who we share it with;
- withdrawal of consent (the “Cookies” link in the footer reopens the notice);
- review, by a person, of a decision made solely by an automated system (Art. 20).
10.1. How to ask
Open a Discord ticket with the subject “Privacy” or write to contato@czsbrasil.com.br. We reply within 15 days (Art. 19, II).
10.2. How we check it's you
So we don't hand one person's data to another, the request must come from the Discord account linked to the data, or include other simple proof that the account is yours. We never ask for passwords, verification codes or photo ID. Requests on behalf of someone else are only handled with proof that they authorized it, or when the person asking is the legal guardian of a minor.
10.3. What a request doesn't do
A deletion request does not erase a penalty record that is still in effect, does not undo a ban and does not delete data of other players that appears alongside yours (in a conversation, for example). Repeated requests without reason, or made to obstruct an investigation, may be refused, always with an explanation.
If you are not satisfied with the answer, you can file a complaint with the Brazilian National Data Protection Authority (ANPD).
11.Cookies and data in your browser
The website uses few items in your browser. The necessary ones work without asking; the metrics one only after you accept.
| Name | What for | Duration |
|---|---|---|
PHPSESSID | Keep you signed in and protect forms. Necessary. | Until you close the browser or sign out |
czs_locale | Remember your chosen language. Necessary. | 1 year |
czs_cookie_consent | Remember your answer to the cookie notice. Stays only in your browser. | Until you delete it |
_ga and _ga_* | Google Analytics: count visits and the most viewed pages. Only with consent. | Up to 2 years |
To change your choice, use the “Cookies” link in the footer of any page.
12.Children and teenagers
12.1To use the website you must meet Discord's minimum age in Brazil. Data of anyone under 18 is handled in the minor's best interest (LGPD, Art. 14) and with the highest protection by default (Digital Statute of Children and Adolescents (ECA Digital), Law No. 15.211/2025).
- we don't do behavioral profiling or targeted advertising, for anyone;
- we don't offer paid loot boxes (random rewards bought with money);
- a parent or guardian can ask for access to or deletion of the minor's data and remove the minor's name from the Leaderboard and from recent support;
- content that exposes or threatens a child or teenager is removed first and reported to the authorities when appropriate.
12.2If we learn that a child's data was collected without the guardian's permission, we delete it as soon as possible.
13.Security and incidents
13.1Measures we use: data access only for team members who need it, passwords and keys kept out of the code, encrypted connection (HTTPS) on the website, database open only to authorized addresses, and backups of essential data.
13.2If an incident happens that may bring relevant risk or harm, we notify the people affected and the ANPD within 3 business days of learning that it reached personal data (CD/ANPD Resolution No. 15/2024; for small-scale agents the deadline is doubled).
13.3No system is 100% secure. Protect your Discord and Steam accounts with two-step verification.
14.Words we use
- Personal data: information that identifies you or could identify you (e.g. Steam ID, Discord ID, IP).
- Data subject: the person the data is about. Here, you.
- Controller: who decides how the data is used. Here, CZSBrasil.
- Processor: who handles data on behalf of the controller (e.g. the hosting provider).
- Processing: any use of data: collecting, storing, looking up, sharing, deleting.
- Anonymization: removing from the data whatever links it to you, so it's no longer possible to know whose it is.
15.Changes to this Policy
15.1We update this Policy when what we do with data changes, when a program used on the servers changes, or when the law changes.
15.2Changes that expand the use of your data are announced on Discord at least 15 days before they take effect. The date at the top and the list of versions at the end of the page show what changed.
16.Reference laws
This Policy is mainly based on:
- Brazilian Federal Constitution (Constituição Federal), Art. 5, X, XII and LXXIX (privacy, confidentiality and protection of personal data).
- General Data Protection Law (LGPD, Law No. 13.709/2018).
- Brazilian Internet Bill of Rights (Marco Civil da Internet, Law No. 12.965/2014), Arts. 7, 10 and 15, and Decree No. 8.771/2016.
- Digital Statute of Children and Adolescents (ECA Digital, Law No. 15.211/2025, in force since March 17, 2026).
- Legal Framework for Electronic Games (Marco Legal dos Jogos Eletrônicos, Law No. 14.852/2024).
- ANPD Resolutions: No. 2/2022 (small-scale agents), No. 15/2024 (incidents), No. 18/2024 (data protection officer) and No. 19/2024 (international transfer).
- Brazilian Civil Code (Código Civil, Law No. 10.406/2002), Arts. 11 to 21 and 206.
17.Contact
Questions, requests or complaints about your data: a Discord ticket with the subject “Privacy” or contato@czsbrasil.com.br.