Rules, Terms and Privacy
Version 5 — last updated 2 October 2026.
Game Rules
These rules exist so the world stays worth playing in. Breaking them can cost you items, gold or the account itself, depending on what happened and how often.
One person, one set of hands
- You may play more than one character, but you may not use software to play for you beyond what the game itself automates. Femur Idle is an idle game — the idling is the game, and scripting the parts that are not idle is cheating.
- You may hold more than one account. What you may not do is use one to feed another: referral rewards, trades and party loot between accounts you control are treated as fraud, not as clever play.
Bugs and exploits
- If you find a bug that gives you gold, items, experience or access you should not have, stop using it and report it. Repeated use of a known bug is treated as theft from every other player.
- Reporting a serious exploit in good faith will never get you punished for having found it.
Trading, currencies and real money
- Trade inside the game. Selling accounts, characters, gold or items outside the official Market is not allowed — it is unprotected for both sides and it is where scams live.
- Non-transferable TC cannot be traded. Some credits carry a release date and are usable in the shop straight away but locked from player-to-player trading until that date passes (see the Terms below). Trying to work around that lock — by selling the account, by informal deals, or by any other route — is a rule break. Coins credited through a PIX contribution do not carry a lock and can be traded right away.
- Your wallet is your account's identity and cannot be changed. Handing it to someone else means handing over the account, and we cannot undo that for you.
Behaviour
- No harassment, hate speech, threats, or sexual content involving minors — the last one is reported to the authorities, not just banned.
- No advertising other games or services in the game chat.
- Do not impersonate staff. Staff will never ask for your password or your seed phrase. Nobody from Femur Idle will ever ask for either.
Enforcement
Punishments range from a warning to a permanent ban, and may include removing items, gold or credits gained through a broken rule. We try to be proportionate and we look at history. If you think a decision was wrong, use the contact channels at the end of this page.
Terms of Service
1. Who we are
Femur Idle is operated by RAFAEL RENTI DA FONSECA, registered under CNPJ 68.385.598/0001-18 ("we", "us"). Contact details are at the end of this page.
2. Who can play
You must be 18 years of age or older to create an account. The game involves digital assets and paid purchases, and we do not knowingly operate accounts for minors.
3. Your account
- You are responsible for keeping your password and your wallet secure. We cannot recover a lost wallet.
- One account may be reached by more than one method (wallet, e-mail and password). They are ways into the same account, not separate accounts.
- We may suspend or close an account that breaks the Game Rules above.
4. Changes to the game
Femur Idle is a live game: features are added, balance is adjusted and problems are fixed as they appear. We avoid destructive changes to player progress. If a reset of any part of it ever becomes unavoidable, we will announce it in advance.
5. Currencies
- USDC — the liquid currency of the ecosystem. Always transferable between players and usable in the Market.
- TC (Token Cash) — the premium currency. It exists in two states:
- Transferable TC — what a PIX contribution credits to your account. Usable in the game shop immediately, and it can be sent to other players, listed on the Market and traded for USDC right away.
- Non-transferable TC — usable in the game shop immediately, but it cannot be sent to other players, listed on the Market or converted to USDC until the release date attached to it. Only credits granted by the team carry a release date; each batch shows its own, and it unlocks on its own when the date passes.
- The exchange rate between TC and USDC is set by players on the Market. We do not guarantee, maintain or underwrite any rate.
6. Supporting the project, PIX and Femur Coins
- What a contribution is. Money sent through this site supports the project and pays its running costs — servers, infrastructure, development, security. It is a voluntary contribution, not the purchase of a product. As a thank-you, once the payment clears we credit Femur Coins (bonus points) to the account you named, for use inside Femur Idle only.
- No refund for a change of mind. Once the payment is confirmed and the coins are credited, the contribution is not refundable because you changed your mind. Two exceptions stand: where the law requires a refund, and where the payment cleared but the coins never arrived — in that case write to us with the receipt and we credit them or return the money.
- TC credited through PIX is transferable right away. Until 18 August 2026 it was held for 8 days. That hold no longer exists: the coins are usable, sendable and tradeable as soon as the payment is confirmed.
- If a payment is reversed. A contribution undone by fraud, by use of someone else’s payment method without authorization, or by a reversal at the payment provider costs the corresponding coins: we remove them from the account and may suspend it. Because the coins circulate from the moment they are credited, we can only recover what is still there — and the difference is a debt of whoever received the money.
- Contributions in cryptocurrency are different. Payments made on the Solana network settle on a public blockchain and cannot be reversed by us. Check the amount and the destination before you sign anything.
- Items, gold, characters, cosmetics and credits are licensed for use inside the game. They are not an investment, they carry no promise of value, and we make no representation that they will be worth anything in the future.
- The Market charges a fee on completed sales. The current rate is shown in the game before you confirm.
- Nothing here is financial advice. We are not a bank, a broker or an exchange.
7. What we do not promise
The game is provided as is. We work to keep it available and correct, but we do not guarantee uninterrupted service, and we are not liable for indirect losses — including the market value of in-game assets or of any token. Nothing in this section limits rights you have under the Consumer Protection Code (CDC) or other mandatory law.
8. Changes
We may update these terms. Material changes will be announced and the version number at the top of this page will change. Continuing to play after a change means you accept it.
Privacy Policy
This policy follows the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).
Controller and Data Protection Officer
- Controller: RAFAEL RENTI DA FONSECA — CNPJ 68.385.598/0001-18.
- Data Protection Officer (Encarregado, LGPD art. 41): Rafael Renti da Fonseca.
- Contact: contact@mail.femuridle.com (preferred) or WhatsApp +55 11 91244-0333.
What we collect, why, and on what legal basis
| Data | Why | Legal basis (LGPD art. 7) |
|---|---|---|
| E-mail, username, password (hashed) | Create and secure your account; account recovery | Performance of a contract (V) |
| Wallet address | Sign-in, purchases and payouts | Performance of a contract (V) |
| Characters, progress, inventory, trades | Run the game | Performance of a contract (V) |
| Chat messages | Player communication; rule enforcement | Performance of a contract (V); legitimate interest (IX) |
| IP address, connection times, device signals | Keep the service running; detect fraud and multi-accounting | Legitimate interest (IX) |
| Payment records (PIX transactions, amounts, dates) | Process contributions, reversals and chargebacks; tax and accounting duties | Performance of a contract (V); legal obligation (II) |
| CPF and mobile number — only if you contribute by PIX | Issue the Pix charge with the payment provider, identify the payer, and prevent fraud and reversals. Stored on your account so you do not have to type them again | Performance of a contract (V); legal obligation (II); fraud prevention (X) |
| Cookies and browsing events on our website — only if you accept them | Measure our ads on Facebook and Instagram and show the game to people who might enjoy it (see Cookies and ads) | Consent (I) |
We do not ask for your legal name, address or documents to play. We never have access to your wallet's private key or seed phrase — connecting a wallet only proves you own it, by signing a message; it does not let us move anything.
We do not sell your data. We do not send your e-mail, password, account or game data to advertising platforms. The only advertising data is the Meta cookie described in Cookies and ads, and only if you accept it.
How long we keep it
- Account and gameplay data: while the account exists, and up to 6 months after you ask for deletion (to complete the removal and settle any dispute in progress).
- Payment and tax records, including the CPF and mobile number used for PIX: for the period required by Brazilian tax law (currently 5 years), even after the account is deleted. This is a legal obligation and cannot be waived by request.
- Connection logs (IP, access times): 6 months, as required by the Marco Civil da Internet (Law 12.965/2014, art. 15).
- Ban records: kept for as long as the ban is in force, so it can be enforced.
Who else processes your data
We use service providers ("operadores") that process data on our behalf and under our instructions:
- Hosting and application infrastructure
- Database and backups
- Transactional e-mail delivery (verification codes, password recovery)
- Anti-bot verification on sign-in and sign-up
- Payment processing for PIX
- Advertising measurement — Meta Platforms (Facebook and Instagram), only if you accept ad cookies
International transfer (LGPD art. 33). Some of these providers store or process data outside Brazil, mainly in the United States and the European Union. We only use providers that commit contractually to a level of protection compatible with the LGPD, and the transfer is necessary to perform the contract with you (art. 33, II "d" and art. 33, V). The ad cookie data received by Meta is processed in the United States on the basis of your specific consent (art. 33, VIII).
Public blockchain. Wallet addresses and on-chain transactions are public by nature. That is not something we publish, and it is not something anyone can un-publish.
Cookies and ads
Essential cookies are always on, because the site does not work without them: your sign-in session, your language, the game version, the invite code you arrived with, and the cookie that remembers your choice below.
Ad cookies (Meta Pixel) are off until you accept them in the banner. If you accept,
Meta (Facebook and Instagram) receives the pages of our website you visit, the fact that you created an
account, your IP address and information about your browser, and stores its own cookies
(_fbp, _fbc). We use this to measure our ads and to show the game to people
who might enjoy it. Meta does not receive your e-mail, password, wallet, characters or
anything you do inside the game, and Meta processes this data under its own privacy policy.
Declining changes nothing in the game. Your choice is kept for 180 days, and you can change it at any time: review my cookie choice. If you withdraw consent, we stop loading the Meta Pixel and delete its cookies from this site.
Security
Passwords are stored hashed (never in plain text). Recovery links and verification codes are stored hashed, expire, and are single-use, with a limited number of attempts. Access to production data is restricted. We keep e-mail addresses out of operational logs.
Children
The game is for adults (18+). If we learn that an account belongs to a minor, we close it and delete the associated data, except what we are legally required to keep.
Your data rights (LGPD art. 18)
You may, at any time and free of charge, ask us to:
- confirm that we process your data, and access it;
- correct incomplete, inaccurate or outdated data;
- anonymise, block or delete data that is unnecessary, excessive or processed unlawfully;
- port your data to another provider, on request;
- delete data processed with your consent;
- be told with whom we have shared your data;
- be told what happens if you refuse consent;
- withdraw consent.
How to ask, and how long we take
- E-mail: contact@mail.femuridle.com — this is the fastest route and the one we recommend, because it leaves a record for both sides.
- WhatsApp: +55 11 91244-0333.
- We answer within 15 days of receiving the request. If a request needs more checking than that, we will say so within the same 15 days and explain why.
- We may ask you to prove you control the account (for example, from its registered e-mail) before acting. This is to stop someone else obtaining or deleting your data.
Security incidents
If a security incident occurs that may cause relevant risk or damage to you, we will notify the ANPD and the affected players, describing what happened, which data was involved, what we have done and what you can do — as required by LGPD art. 48.
Complaints
If you are not satisfied with how we handled your request, you may complain to the Autoridade Nacional de Proteção de Dados (ANPD).
Contact
- Controller / DPO: Rafael Renti da Fonseca — CNPJ 68.385.598/0001-18
- Privacy and data requests: contact@mail.femuridle.com
- WhatsApp: +55 11 91244-0333
- Support and general questions: our Discord, linked in the game and on the home page.