Privacy Policy

1. Who we are

Fabled is a platform for Flesh and Blood articles and communities, operated in Brazil. We are the controller of the data described here. Reach us at contato@fabled.com.br.

2. Account data

Your email. To sign in, we send a one-time code to it (we don’t use passwords); if you sign in with Google, Discord or X instead, we receive the name, email and photo that provider shares. We keep your active sessions so you stay signed in.

3. Profile and content

What you choose to add to your profile: display name, @handle, bio, photo, pronouns, date of birth, city, country, social links, favorite card and hero. Age and city only show on your profile if you choose to show them.

What you publish and do on Fabled: articles (with the visibility you pick: public, unlisted or private), posts, comments, likes, communities you follow or create, and reports you send. People you report are not told who reported them.

4. Payments

Article purchases, the Fabled Supporter subscription and community support are processed by Stripe. Card details go straight to Stripe and never touch our servers; we keep what was bought, the amounts and the status of each payment or subscription.

If you receive payments (you sell articles or your community receives support), Stripe collects what it needs to verify your identity and pay you out, such as your name, CPF and bank account. We only receive the status of your payout account and payouts.

5. Usage data

IP address, browser and server logs, for security, rate limits and fraud prevention. To count reads without identifying anyone, we use an identifier derived from the IP that can’t be reversed. Technical errors are sent to Sentry so we can fix them, and Vercel measures site traffic in aggregate, without cookies. To understand how Fabled is used, we record page views, clicks and key actions on the platform (such as publishing, commenting, joining a community or buying) with PostHog, without capturing page text or what you write, and without recording your screen; it uses an identifier stored in your browser and, when you’re signed in, your account’s internal id (never your email). If your browser asks not to be tracked (Do Not Track), we record nothing.

6. Cookies and local storage

Only what’s needed: the session cookie, which keeps you signed in, and the language cookie. Your browser also stores your theme, a copy of your notifications, which articles you’ve read (so the same read isn’t counted twice) and PostHog’s usage statistics identifier. We don’t use advertising or tracking cookies. Stripe’s payment page uses its own cookies, governed by Stripe’s policy.

7. Why we use your data

To run your account, publish what you write, process purchases and payouts and send service emails such as sign-in codes, receipts and subscription notices (performance of contract). To protect the platform against abuse and fraud, handle reports and understand how the site is used (legitimate interest). To meet legal and tax obligations. And to show your age and city on your profile when you choose to (consent).

8. Machine translation

When someone asks to translate a comment, or an article is published (every article is translated into the other languages), the text is sent to Anthropic (Claude models) only to produce the translation, which we store to reuse. Under Anthropic’s commercial terms, content sent through its API is not used to train models.

9. Who we share it with

Only the providers that run Fabled on our behalf: Vercel (website and traffic statistics), Fly.io (servers in São Paulo), Neon (database), Cloudflare (images, DNS and email), Resend (sending email), Stripe (payments), Anthropic (machine translation), Expo (phone notifications, delivered through Apple and Google), Sentry (technical errors) and PostHog (usage statistics), plus Google, Discord or X if you sign in with them. We may also share data when the law or a court order requires it. We don’t sell your data.

10. International transfers

Several of these providers process data outside Brazil, mainly in the United States. In those cases we rely on the safeguards the LGPD provides for, such as data protection contract clauses.

11. How long we keep it

As long as your account exists. When you delete your account, we erase your profile, your articles, posts, comments and likes and the communities you own, and cancel your subscriptions. Articles you delete go offline right away, but a copy is kept for support and moderation until the account is deleted.

Access logs are kept for 6 months, as Brazil’s Marco Civil da Internet requires; payment records stay with Stripe for the period tax law requires; notifications are erased after 90 days. Daily database backups are kept for up to 30 days, so deleted data leaves them within that time.

12. Your rights

Under the LGPD you can confirm whether we process your data, access it, correct it, ask for portability or deletion, learn who we share it with and withdraw consent. You can edit your profile and delete your account anytime in settings; for anything else, write to contato@fabled.com.br. You can also complain to Brazil’s data protection authority (ANPD).

13. Children and teens

Fabled is for people aged 13 and over. Under-18s should use it with their guardians’ knowledge, and only adults (18+) can receive payments.

14. Changes and contact

We’ll announce changes to this policy on the site, and by email when they matter, before they take effect. Questions: contato@fabled.com.br.