Logo ErikrafT

Legal

Privacy Policy

Commitment to transparency, privacy, and personal data protection for our gaming community, visitors, and technology partners.

1. Introduction

Welcome to the official website of ErikrafT. Our primary and official domain is erikraft.com, with all integrated services, platforms, tools, and applications operating under subdomains of this main domain.

As a global top-level domain (.com), this website and its associated pages can be accessed worldwide from any region. Although operated from Brazil and primarily subject to Brazilian legislation, we adopt internationally recognized best practices regarding privacy, data protection, and information security whenever compatible with applicable laws and the nature of our services.

Privacy, security, and transparency regarding the processing of your personal data are fundamental values to us. This Privacy Policy has been formulated clearly, formally, and professionally to demonstrate how we manage information collected or provided across our digital ecosystem, ensuring full legal compliance.

2. Scope

This policy applies fully to all pages, features, tools, and products comprising the ErikrafT ecosystem, including but not limited to:

  • The main homepage (index.html);
  • The Official Store showcase and pages (loja.html);
  • The PIX QR Code generator and donation forms (donation.html);
  • The interactive 3D Minecraft Skin Viewer (skin.html);
  • The achievements and historical milestone timeline (timeline.html);
  • Official redirects to our partner social networks (YouTube, Discord, GitHub, Twitch, Instagram, among others);
  • Any auxiliary tools or contact forms made available in the future.

3. Applicable Guidelines and Legislation

This website operates in compliance with major national and international data protection laws and standards, notably:

  • Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018): Primary law governing our personal data processing activities for users in Brazilian territory;
  • General Data Protection Regulation (GDPR - Regulation EU 2016/679): Applicable as a benchmark for international visitors from the European Union browsing our website;
  • Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet - Law No. 12,965/2014): Governs internet usage, rights, and connection log retention requirements in Brazil;
  • Global Best Practices and Frameworks: We align our technical practices with recognized international frameworks such as ISO/IEC 27001 (Information Security Management) and ISO/IEC 27701 (Privacy Information Management) as internal standards for continuous security improvement, without declaring formal third-party audit certifications.

4. Definitions

For the purposes of this Policy, the following definitions apply in accordance with data protection laws:

  • Personal Data: Information relating to an identified or identifiable natural person.
  • Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, or erasure.
  • Data Subject: The natural person to whom the personal data refers.
  • Data Controller: The natural or legal person responsible for decisions regarding personal data processing (for this platform, the owner of ErikrafT).
  • Data Protection Officer (DPO): The designated person serving as a liaison between controller, data subjects, and supervisory authorities.

5. Data Collected

We adhere strictly to the principle of data minimization, collecting only the information strictly necessary for the proper technical operation of our applications and to deliver a high-quality digital user experience.

A. Skin Viewer (skin.html)

The Skin Viewer page (skin.html) enables interactive visualization in a completely isolated and secure manner:

  • Search public skins by Minecraft player nickname;
  • Interact with 3D skin previews in real time;
  • Select local skin files (.png) directly from your device for in-browser previewing;
  • Select local cape files (.png) directly from your device for in-browser previewing;
  • Restore the default character skin and cape;
  • Automatically fetch skins and capes from third-party public Minecraft APIs (when available).

Strict Local Privacy Guarantee: All skin and cape files selected using the upload feature are processed exclusively on the client side, directly inside your web browser's memory. We state categorically that these files are not sent to our servers, are not stored in any database, are not shared with any partners, and are not published anywhere.

B. Dynamic Favicon

To enhance interactive usability, the site may dynamically update the favicon (the browser tab icon) during navigation (e.g., animated blinking loop or rendering the 3D skin head preview on demand). This customization occurs purely locally on the client side and involves no collection, transmission, or processing of personal data.

C. Voluntarily Provided Data

Information actively provided by you when using our features:

  • Contact Forms or Email: If you send us a direct email at contact2@erikraft.com or use official contact forms, we collect your name, email address, and message contents strictly to respond to your inquiry adequately.
  • Donations and Support: When generating voluntary PIX QR Codes or Ko-fi donations, basic transactional details required for payment processing are processed via secure third-party financial infrastructure. Sensitive financial details (such as bank account passwords or credit card numbers) are never seen or stored by us directly.

D. Automatically Collected Technical Data

In accordance with Article 15 of Law No. 12,965/2014, standard technical details are logged automatically for security, legal auditing, and fraud prevention purposes:

  • Access Logs: IP address (Internet Protocol), timestamp, time zone, and logical access ports;
  • Device & Browser Technical Details: User-agent string, operating system version, browser language, screen resolution, and requested pages.

6. Cookies and Local Storage Mechanisms

Cookies are small text files stored on your device that retain browsing preferences to improve general site usability.

The ErikrafT portal employs modern browser storage and caching mechanisms to ensure proper application functionality, optimize network performance, and deliver seamless application updates. When strictly necessary, the following local storage tools are used:

  • localStorage: Used to store local static configuration choices, persist temporary cache data, and manage user interface state;
  • sessionStorage: Used to maintain browser session state during a single visit;
  • Cache Storage: Used by the Service Worker to cache static application assets (HTML, CSS, JS, images, fonts);
  • Service Worker: A background script running in the browser to accelerate page loads, enable offline access, and manage version updates cleanly.

Strict Technical Purpose Commitment: We declare that cookies, localStorage, sessionStorage, Cache Storage, and Service Workers are used exclusively for technical performance improvement, bandwidth optimization, local user preferences, and seamless automatic portal updates. The ErikrafT portal DOES NOT use these tools for advertising tracking, marketing profiling, behavioral targeted advertising, or selling user data.

First-Party and Third-Party Cookies: ErikrafT does not set tracking cookies. However, certain integrated third-party tools may place cookies under their own privacy policies:

  • Google Analytics (G-68ZD5MLVQ3): Used in an aggregated and anonymized format to measure overall traffic, visit statistics, and page performance;
  • Embedded Third-Party Components: Social media embeds (such as Discord, YouTube, GitHub, Ko-fi) may place cookies according to their independent privacy policies when rendered in your browser.

Managing Cookies: You can disable, block, or clear cookies at any time through your web browser settings (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge). Disabling all cookies may affect certain interactive third-party features.

7. Third-Party Public API Services

To enrich site functionality, our website connects directly to several external public API services, including:

  • YouTube: To fetch and display real-time subscriber counts via the YouTube Data API v3;
  • Discord: To fetch and display total community members and online count via the Discord Invite API;
  • minotar.net: Third-party service used to fetch public Minecraft skin textures by player nickname for 3D rendering in the Skin Viewer (skin.html). Note that ErikrafT does not directly query Mojang/Microsoft internal APIs for skin assets;
  • capes.dev: Public API queried dynamically (when available) to locate player capes across Minecraft, LabyMod, MinecraftCapes, and other services;
  • Wolv Personalizados: Official merchandise partner where users are redirected to complete store orders on external infrastructure.

These third-party providers operate their own independent infrastructure, security measures, and privacy policies, over which ErikrafT exercises no technical control or legal authority. We encourage reviewing their respective privacy policies.

8. Hosting and Infrastructure

The official ErikrafT website and all digital tools are hosted on the Vercel cloud platform. As our hosting and Content Delivery Network (CDN) provider, Vercel logs and processes technical request data required to deliver fast, stable, and secure services globally.

This technical data includes:

  • Visitor IP address;
  • Technical connection logs (timestamps and logical ports);
  • User-agent strings and operating system details;
  • Network telemetry and performance metrics.

All processing conducted by Vercel complies with Vercel's privacy policies and terms of service, utilizing global edge networks and distributed cloud servers to optimize content delivery.

9. Data Storage and Retention

Connection access logs are stored under strict confidentiality in secure data center environments for the legally required period of six (6) months pursuant to applicable legislation. Data submitted voluntarily via email or contact channels is retained only as long as necessary to fulfill inquiries, comply with legal duties, or protect legal rights.

10. Data Sharing

We commit publicly to **never sell, commercialize, rent, or transfer your personal data** to third parties for marketing or promotional purposes. Information is shared only in the following specific circumstances:

  • Essential Service Providers (Data Processors): Infrastructure partners helping us operate the website, such as cloud web hosting (Vercel), CDN providers, payment processors (PIX, Ko-fi), and web analytics, under strict confidentiality obligations;
  • Compliance with Legal Duties or Court Orders: To satisfy statutory obligations, subpoenas, or official requests issued by law enforcement or judicial authorities.

11. Information Security & Local Processing

To protect personal data from unauthorized access, loss, or misuse, we employ industry-standard technical and organizational security measures:

  • Transport Layer Security (HTTPS) and 256-bit SSL encryption for all traffic;
  • Network firewalls and protective filtering provided via Vercel cloud infrastructure;
  • Proactive defenses against code injection, DDoS, and unauthorized access attempts;
  • Restricted administrative access strictly limited to authorized personnel with a legitimate need-to-know;
  • Strict Local Processing & Isolation of 3D Motion Sensors: The use of device orientation and motion sensors (DeviceOrientation) in 3D visualizers (e.g. 404 page and Brand page) is requested solely after the user explicitly clicks "Activate 3D Motion". Processing of this motion data occurs 100% locally within the browser (client-side) in real-time to orient the visual camera/model. No motion sensor, accelerometer, or gyroscope data is ever collected, stored, profiled, or transmitted to servers or third parties. Denying permission or lacking motion sensors leaves normal manual 3D mouse and touch interactions fully operational.

12. Data Subject Rights

Under applicable data protection laws (including LGPD and GDPR standards), data subjects enjoy full rights regarding their personal data. You may request free of charge at any time via our official contact channel:

  1. Confirmation of Processing: Confirm whether we process any of your personal data;
  2. Data Access: Receive a legible copy of personal data maintained about you;
  3. Rectification: Request immediate correction of inaccurate or outdated data;
  4. Anonymization, Blocking, or Erasure: For unnecessary, excessive, or non-compliant data;
  5. Data Portability: Request transfer of your data to another service provider where applicable;
  6. Consent Withdrawal: Revoke consent at any time for consent-based processing;
  7. Third-Party Sharing Information: Obtain details regarding public or private entities with whom data has been shared.

13. Legal Bases for Processing

In accordance with data protection regulations, all personal data processing activities are grounded on specific legal bases:

  • Legal or Regulatory Obligation: For compulsory connection log retention (IP address, date, time) mandated by internet regulations;
  • Contract Performance: To process user-requested interactions, orders, or support requests;
  • Consent of the Data Subject: When explicitly provided for specific communication channels;
  • Legitimate Interest: To maintain infrastructure security, prevent cyber fraud, and analyze aggregated performance metrics.

14. Links to Third Parties and External Services

Our portal features direct links to external platforms and social networks (such as YouTube, Discord, GitHub, Twitch, Instagram, Twitter/𝕏, Bluesky, among others). Please note that:

  • Third-party platforms maintain their own independent infrastructure, cookie configurations, and Privacy Policies;
  • ErikrafT exercises no management, audit control, or legal liability over third-party practices;
  • We strongly encourage users to consult the respective Terms of Use and Privacy Policies of external sites before engaging actively.

15. Contact Channel and Data Protection Officer (DPO)

If you have questions about this Privacy Policy, wish to exercise your legal rights under LGPD/GDPR, or request data erasure, please contact our official DPO and legal privacy channel:

Legal & Privacy Email: contact2@erikraft.com

All requests will be handled confidentially, reviewed promptly, and addressed within statutory timelines.

16. Updates and Effective Date

This Privacy Policy may be updated periodically to reflect system enhancements, new ecosystem features, or regulatory updates issued by supervisory authorities.

Whenever substantial changes occur, the revision date at the bottom of this document will be updated. We invite you to check this page regularly to stay informed regarding our data protection standards.

Last updated: August 29, 2026.