Privacy Policy

1. Who We Are

Aurecas Desenvolvimento de Games Ltda. is the owner and data controller responsible for the Services.

• Registered address: Rua Coronel Francisco Braz, 185, Sala 304, Pinheirinho, Itajubá – Minas Gerais, 37500-052, Brazil
• CNPJ: 32.927.682/0001-79
• Contact: privacy@aurecas.com

Player support and game-specific questions may also be sent to the contact addresses listed in a given game’s in-app support or store listing (for example, support@aurecas.com or gaming@aurecas.com); those inboxes route into the same privacy program described here.

2. Your Consent

By downloading, installing, or using any Aurecas game or Service, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use our Services.

3. Scope of This Policy

This Policy applies to every game, app, and website published by Aurecas across all platforms (including Google Play, the Apple App Store, and the web), regardless of genre or studio brand under which a title is marketed. Data practices can vary slightly from game to game depending on the features and third-party services a specific title uses (for example, whether it includes multiplayer chat, push notifications, or particular ad networks) — where that is the case, we describe the range of services we use across our portfolio below, and any given game only uses the subset relevant to its own features.

4. Third-Party Links

Our Services may include links to external websites and applications, including social media pages, publisher pages, and advertiser destinations. Access to and use of those linked platforms are governed by their own privacy policies, not this one. We bear no responsibility for the data practices of any third-party sites or applications.

5. Data We Collect

5.1 Data you provide directly

• Account and player identifiers, such as your Google Play Games or Game Center nickname and user ID.
• Messages and other content you submit while using a Service, including in-game chat logs and player support tickets.
• Information provided in connection with promotions, sweepstakes, competitions, and similar events.
• Payment details collected by our payment service providers (e.g., Google Play Billing, Apple In-App Purchase) when you make a purchase — Aurecas does not directly receive or store full payment card numbers.

5.2 Data we collect automatically

• Information about your account and in-game progress, including game opens, launches, updates, and session duration.
• Mobile device identifiers, such as your device ID or advertising identifier (e.g., Google Advertising ID / IDFA).
• Device information, including device name, operating system, and language settings.
• Approximate location data (region/country level, derived from your IP address via our analytics providers).
• Usage data, such as gameplay activity, in-app purchases, and interactions with other players.
• Cookies and similar trackers, where a Service is delivered through a web browser or webview.

5.3 Data we receive from partners

We work with third-party partners — including analytics providers, advertising networks, and platform providers — to operate, measure, and improve our Services. Depending on the specific game, these partners may share or help us collect:

• Demographic and usage information (via Google Analytics / Google Analytics for Firebase, GameAnalytics, and Unity Analytics).
• Advertising and analytics data used to measure ad performance and deliver ads (via Unity Ads, Google AdMob, and Facebook Audience Network).
• Data needed to run remote configuration and A/B testing of in-game features (via Firebase Remote Config).
• Data needed to deliver push notifications (via Firebase Cloud Messaging / Firebase Notifications).
• Data needed to support in-app referral or social links (via Firebase Dynamic Links).
• Usage data collected by app store platforms as part of distribution and updates (Google Play Store, Apple App Store).

Not every game uses every service listed above — the specific list of third-party services active in a given title depends on its features, and may be disclosed in more detail in that game’s own listing or in-app disclosures.

6. Why We Collect Your Data

6.1 To provide and maintain the Service

As part of delivering our games, we process data to:

• Create accounts and let you play our games and access the Service.
• Operate, host, and maintain the Service (including via Google Play Store and Apple App Store distribution).
• Process purchases and fulfill product or service requests.
• Detect and prevent fraud, cheating, and abuse.
• Identify and resolve errors, crashes, and performance issues.

6.2 To improve the player experience

We have a legitimate interest in collecting and using data to:

• Build and maintain up-to-date player profiles and progress.
• Develop and enhance our games and overall player experience, including through analytics (GameAnalytics, Google Analytics, Unity Analytics) and feature testing (Firebase Remote Config).
• Manage our ongoing relationship with you, including account recovery.
• Enable social and multiplayer features within the Service, including shared links (Firebase Dynamic Links).
• Personalize your experience and content.
• Respond to questions and comments and provide player support.
• Send relevant communications, including updates, security alerts, and support messages, including via push notifications (Firebase Notifications).
• Facilitate communication between players, where a game includes chat or social features.

6.3 Advertising

Where a game is supported by advertising, we and our advertising partners (which may include Unity Ads, Google AdMob, and Facebook Audience Network) may use device and usage data to serve and measure ads within our games and, in some cases, to tailor ads shown on third-party sites and apps. Interest and location data used for advertising is linked to your device or browser, not to your directly identifiable personal identity. We encourage you to review the privacy policies of these advertising partners to understand their own data practices.

7. Opting Out of Interest-Based Advertising

In addition to any opt-out feature offered directly within a specific ad network, you may manage interest-based advertising through:

• Your device’s advertising settings (e.g., “Limit Ad Tracking” / “Opt out of Ads Personalization” in iOS or Android settings).
• Industry opt-out tools such as YourOnlineChoices (EU), the Digital Advertising Alliance’s AppChoices, the Network Advertising Initiative (US), DAAC (Canada), or DDAI (Japan).
• A user-enabled Global Privacy Control (GPC) signal, which we honor for opt-out requests where legally required.

8. Cookies and Trackers

Our websites and certain in-game webviews use cookies and similar trackers to operate the Service and to support the analytics and advertising purposes described above. Where required by applicable law, we will request your consent before setting non-essential cookies or trackers.

9. Children’s Privacy

Our games are generally intended for a general audience and are not specifically directed at children under 13. Because some of our games may nonetheless be played by a mixed-age audience, certain titles apply a neutral age screen to help filter age-inappropriate content, such as limiting personalized advertising, personal data collection, and player-to-player interactions for users who identify as children. We do not knowingly collect more personal data from children than is necessary for these safeguards. Parents or guardians who believe a child has provided us with personal data beyond what is described here may contact us at privacy@aurecas.com to request its removal.

10. Data Sharing and Disclosure

We do not sell your personal data for money. We may share data with:

• Service providers who process data on our behalf, such as analytics providers, advertising networks, cloud hosting providers, and payment processors, under contractual confidentiality and data protection obligations.
• Platform providers (Google Play Store, Apple App Store) as required to distribute and operate the Service.
• Public authorities, where required to comply with a legal obligation, enforce our terms, or protect the rights, property, or safety of Aurecas, our players, or others.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Policy or a materially equivalent one.

Some advertising and analytics partners may independently qualify as “selling” or “sharing” personal information for cross-context behavioral advertising under certain US state laws. See Section 13 for your rights to opt out of this.

11. International Data Transfers

Aurecas is based in Brazil, and our service providers may process data in other countries, including the United States and countries within the European Economic Area. Where we transfer personal data outside of Brazil or the EEA, we rely on legally recognized transfer mechanisms (such as standard contractual clauses, an adequacy decision, or another lawful basis permitted under the LGPD or GDPR) and require our partners to maintain appropriate safeguards.

12. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, including to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose it was collected for; for example, account and progress data is generally retained for as long as your account remains active, while analytics data may be retained in aggregated or pseudonymized form for longer periods. Once the retention period expires, the data is deleted or anonymized.

13. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@aurecas.com.

13.1 If you are in the European Economic Area, UK, or Switzerland (GDPR)

• Withdraw your consent at any time, where processing is based on consent.
• Object to processing carried out on a legal basis other than consent.
• Access your data and obtain a copy of it.
• Request rectification of inaccurate data.
• Request restriction of processing.
• Request erasure of your data.
• Receive your data in a portable format and have it transferred to another controller, where technically feasible.
• Lodge a complaint with your local data protection authority.

13.2 If you are in Brazil (LGPD)

• Confirm whether we are processing your personal data, and access it.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in noncompliance with the LGPD.
• Obtain information about the public and private entities with which we have shared your data.
• Request portability of your data to another provider, subject to our trade secrets.
• Request deletion of data processed with your consent, subject to legal exceptions.
• Revoke your consent at any time.
• Object to processing carried out in noncompliance with the LGPD.
• Request review of decisions based solely on automated processing that affect your interests.
• Lodge a complaint with the ANPD (Brazil’s National Data Protection Authority) or a consumer protection body.

We will respond to simplified confirmation/access requests promptly, and to complete disclosure requests within 15 days, as required by the LGPD.

13.3 If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or Montana (US State Privacy Laws)

To the extent permitted by applicable law, you have:

• The right to know / access the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to request deletion of your personal information.
• The right to obtain a portable copy of your personal information.
• The right to opt out of the sale of your personal information.
• The right to non-discrimination for exercising these rights.

Residents of California additionally have the right to opt out of the sharing of personal information for cross-context behavioral advertising, and the right to limit use of sensitive personal information. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and Montana additionally have the right to opt out of targeted advertising and certain profiling, and rights concerning consent to processing of sensitive personal information. We honor opt-out requests submitted through a recognized Global Privacy Control (GPC) signal.

13.4 How we handle your request

We will verify your identity before responding to a rights request, respond within the timeframe required by applicable law, and explain our reasoning if we need more time or must deny a request. We do not charge a fee to process a request unless it is manifestly unfounded, excessive, or repetitive, or as otherwise permitted by law.

14. Legal Basis for Processing

Where required (such as under the GDPR), we process your personal data on one or more of the following bases: your consent; the necessity of processing to perform our agreement with you (e.g., to operate the game you are playing); compliance with a legal obligation; and our legitimate interests, such as improving and securing the Service, provided those interests do not override your fundamental rights and freedoms.

15. Data Security

We take appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep the data we hold appropriately protected and to only collect what is necessary for the purposes described in this Policy.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our games, or applicable law. Any changes will be posted on this page with a revised “Last updated” date, and where changes are material we will provide additional notice (such as an in-app notice) where required by law. We encourage you to review this Policy periodically. Where a change affects processing based on your consent, we will seek your renewed consent as required by law.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

Your privacy is important to us, and we are happy to help with any questions you may have.