CMCodex

Privacy Policy

This policy explains what data the Codex Mythologia website collects, why, who it is shared with and how you exercise your rights under the Brazilian LGPD and the GDPR.

Last updated: July 28, 2026

1. Controller

Pryvion Studio — data protection contact: pryvionstudio@gmail.com.

2. Data we collect

Anonymous browsing: you can read all site content without an account. In that case we only collect aggregated technical data (page views, country, device type) to measure audience.

Account: when you sign in with Google we receive your email, name and account identifier. We use these to identify your subscription and preferences.

Subscription: we store plan, start date, validity and the payment identifier. Card and Pix data are processed directly by Mercado Pago or Stripe — they never pass through or get stored on our servers.

Scribe (AI): the text you send is transmitted to the model provider to generate the answer. Do not send sensitive personal data to the Scribe.

Favorites: stored in your own browser (localStorage). If you are a signed-in PRO subscriber, the list is also kept in your account so it syncs across devices — it is never shared with third parties.

3. Legal bases

Performance of a contract (subscription and PRO content delivery), legitimate interest (audience measurement and abuse prevention) and consent (non-essential cookies, where applicable).

4. Who we share with

Only providers strictly necessary to run the service: Vercel (hosting), Google Firebase (login and database), Cloudflare R2 (images and audio), Mercado Pago and Stripe (payments) and the AI model provider behind the Scribe.

We do not sell personal data and we do not share your reading list with third parties.

5. Cookies and measurement

We use local storage for preferences (language, favorites) and session cookies to keep you signed in. Audience metrics are collected in aggregate form.

6. Retention

Account and subscription data are kept while the account exists and for the legal period applicable to tax records. You may request deletion at any time.

7. Your rights

Confirmation of processing, access, correction, anonymisation, portability, erasure and withdrawal of consent. To exercise them write to pryvionstudio@gmail.com — we reply within 15 days.

8. Children

The site is not directed to children under 13 and does not knowingly collect data from that age group.

9. Security

HTTPS connections, payment credentials kept off our servers, restricted administrative access and per-IP rate limits on sensitive routes.

10. Changes

Material changes will be announced on this page with a new update date.