Privacy Policy

Note: in case of any interpretation discrepancy, the Portuguese (Brazil) version of this document legally prevails.

Urkut was created to bring back the classic 2000s social network experience. Even with that nostalgic spirit, though, your data is handled to the strictest current security standards and in compliance with the General Data Protection Law (LGPD - Law No. 13.709/2018). We take your privacy with absolute responsibility and transparency.

🌐 Public nature of the platform

Urkut's model is based on profiles and open interactions. This means content such as:

✔ Name and profile picture;
✔ Public scraps;
✔ Community topics and replies;
✔ Information filled in on your profile.

Such content may be visible to other users and, depending on server configuration, may also be indexed by external search engines.

            ⚠️ Security Recommendation: We strongly recommend you don't post sensitive information, such as ID numbers, home address, personal phone number, banking details or any information you wouldn't want to be public knowledge.
        

🔍 Search engine indexing

Content set to public can be found by search engines like Google, Bing and others. Once indexed by third parties, content may remain temporarily cached by those services even after eventual removal from our site.

📦 Stored Data and Purpose (LGPD)

For the platform to function, we only store the basic information provided at sign-up (such as email, name, date of birth and end-to-end encrypted password), plus connection logs (IP, date and time), as required by the Brazilian Internet Civil Framework (Marco Civil da Internet).

🛡️ Privacy Commitment: Urkut does NOT sell, does NOT rent and does NOT transfer your personal data to third parties, data brokers or advertising networks. We don't use hidden tracking systems. Your information exists solely to enable your experience on the network.

💳 Payment Data, Paid Communities and Secure Transactions

Urkut offers optional premium features, including subscriptions for access to paid communities and the purchase of virtual items/currency in experiences and games (e.g., Mini Farm expansions and resources). To enable these features, we use specialized payment providers (gateways) with industry security standards.

🔒 Financial Protection: card data (full number, expiration and CVV) is used only to process payment and is not stored by Urkut. Processing happens through a gateway with tokenization and security controls (e.g., encryption in transit).

What Urkut may store (when applicable) for operations, support, fraud prevention and audit purposes:

Transaction identifiers (order ID, gateway's receipt/charge ID), date/time and status (approved, declined, refunded);
Amount, currency, purchased items (subscription, community, coin/item pack) and digital delivery history;
Non-sensitive data returned by the gateway, such as card brand and/or last 4 digits (when the provider makes it available), and billing tokens for recurring subscriptions;
Minimal registration data required for payment (e.g., name, email and, if needed, ID/tax document and billing address), depending on the chosen method and the provider's legal requirements.

What Urkut does NOT store: full card number, expiration date and security code (CVV). That's the gateway's (and possibly the card issuer's) responsibility.

Purpose and legal basis: this data is used for (i) contract performance (processing subscriptions and digital purchases), (ii) compliance with legal/regulatory obligations, and (iii) legitimate interest in security, fraud prevention and dispute/chargeback resolution — always with data minimization.

Security: transactions are processed by specialized third-party companies (payment gateways) certified to PCI-DSS (Payment Card Industry Data Security Standard). We may also apply fraud prevention mechanisms and additional validations (e.g., 3DS when supported), depending on provider availability and transaction risk.

Sharing: we share with the gateway and anti-fraud partners only the data strictly necessary to process the transaction and reduce risk. We don't sell your data and don't use payment information for advertising.

Retention: transaction records (IDs, amounts and status) may be kept for as long as needed for legal/accounting compliance, fraud prevention and support. Sensitive card data stays exclusively with the gateway, per its own policies.

🍪 Cookies and session

We only use strictly essential cookies to keep your session active, manage security authentication, and let you stay logged in while browsing the platform. These cookies don't track your browsing behavior on other sites and serve no advertising purpose.

🛡️ Your Rights as a Data Subject

In compliance with Art. 18 of the LGPD, you have full control over your data. At any time, you can:

Access, correct or update your incomplete or inaccurate data directly in your dashboard;
Request the portability or blocking of information;
Revoke your consent for use at any time.

🗑️ Account removal

If you wish to end your journey on Urkut, you may request permanent deletion of your account. After deletion, your personal data, photos and posts will be permanently erased from our active database, except for access logs retained as required by the Marco Civil da Internet for legal purposes.

🤝 Our Commitment

Our commitment is to keep an intensely nostalgic environment, while staying solidly aligned with modern software engineering and digital law best practices. The internet has changed — and we understand the vital importance of protecting your data.

By using Urkut, you declare that you have read, understood and agreed to the practices described in this Privacy Policy.