Privacy policy
Updated on November 4, 2026
Leonida Atlas is a free, ad-free, fan-made map. We collect the minimum needed for the site to work and never sell or share your data for advertising. This policy follows Brazil’s data protection law (LGPD).
What we collect
Without an account: nothing that identifies you. Progress, filters and preferences stay only in your browser.
With an account: email, password (stored only in encrypted form — not even we can read it), nickname and creation date. Your progress (collected items) is saved to the account so it shows up on any device.
Contributions: title, description, map position, conditions and photos you send, together with your nickname. Photos are re-processed on the server and metadata (EXIF, including GPS location and device model) is removed.
Votes ("found it here"): a random browser identifier, stored only as a scrambled code (hash).
Abuse protection: to limit repeated submissions we use a scrambled code derived from your IP — the IP itself is not stored — and delete these records after about 1 day. Sign-up, sign-in and password recovery use Cloudflare Turnstile to block bots.
Why we use it
To keep your account and progress, show your approved contributions on the map credited to your nickname, moderate submissions and protect the site from spam and attacks.
Your email is only used to confirm the account, recover your password and important account notices. It is never shown on the site.
What is public
Only your nickname and approved contributions (text and photos), shown on the map and in the credits. Pending or rejected contributions, email and progress are never public.
Cookies and browser storage
Only the essentials: a session cookie (to keep you signed in) and a language cookie. Progress, filters and preferences live in your browser’s local storage. No advertising or tracking cookies.
Who processes the data
Supabase (database and accounts, servers in São Paulo, Brazil); Cloudflare (anti-bot check); and the site’s hosting provider — only to provide these services.
Donations (LivePix and Ko-fi) happen on those services’ pages, under their policies. We do not receive payment data.
How long
While your account exists. Photos of rejected contributions are deleted on rejection. Abuse-protection records disappear after about 1 day.
Your rights
You can view and fix your data on the account page, change your nickname and password, and delete your account at any time ("Delete account" button). On deletion: profile, progress and pending or rejected contributions are erased; already approved places stay on the map, but without your nickname and with no link to you.
For other requests (access, portability, questions), contact us: (the contact email will be published here before launch).
Age
GTA is rated for adults (18+). The site is not aimed at children and we do not knowingly collect children’s data. If that happens, let us know and we will delete it.
Changes
If this policy changes, the date at the top is updated. Important changes will be announced on the site.