1. Who processes the data
The game RAZRYV, available at razryv.online, is operated by Razryv Games (I.S), registered under CNPJ 69.392.674/0001-85, which is the controller of the personal data described in this notice, for the purposes of the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD).
Contact for the data protection officer and for data-subject requests: contato@razryv.online.
2. What data we collect
We collect only the personal data strictly necessary to operate the game, in line with the necessity principle of the Brazilian General Data Protection Law (LGPD).
- Google account. At login we receive the account identifier, the email, the public name, and the public photo. We do not receive the password, the mailbox, the contacts, or Drive.
- Profile and play. Nickname, avatar chosen in the game, decks, created cards, credits, matches, statistics, ranking, and activity visible in the hub.
- Subscription. Payment is processed by Paddle. RAZRYV receives confirmation of the subscription (transaction identifier, amount, currency, and term). The full card number and Pix details stay with Paddle, not on our servers.
- Technical. IP address, browser and device type, and session and error logs, to keep the login working and to contain abuse; the game screens you open and the source of the link that brought you (for example “reddit”), to understand how the game is used.
- Messages. What you write to contato@razryv.online and the error reports sent from the game.
3. What we use it for
- create and authenticate the account;
- run matches, the store, ranking, cards, and the access subscription;
- charge, confirm, and, when applicable, refund the plan, through Paddle;
- prevent fraud, cheating, and automated use;
- answer support requests and meet a legal obligation;
- fix failures and keep the service available.
The legal bases are performance of the contract (the Terms of Service), legitimate interest in the security and operation of the game, compliance with a legal obligation, and, when required, your consent.
We do not sell personal data and we do not use email for advertising.
4. Who we share it with
The nickname, avatar, results, and ranking are visible to other players. The email is not.
Providers that process data so the game can run:
- Google — account authentication;
- Neon — database and authentication, on infrastructure in the United States;
- Fly.io — hosting of the game server;
- Paddle.com Market Limited — merchant of record for the subscription charge, the receipt, and the refund. Its policy applies to the payment: paddle.com/legal/privacy.
When there is an international transfer, it takes place in order to perform the service, with the safeguards provided by the LGPD.
5. How long we keep it
We keep the account while it exists. After a deletion request, we delete or anonymize personal data, except the minimum needed for security, fraud prevention, accounting, and a legal duty. Payment records remain for the period tax law requires.
6. Cookies
We use strict session cookies and local storage: to keep the login, to remember acceptance of the terms, and to store preferences of the game itself (such as volume). We do not use advertising cookies or third-party tracking cookies for ads.
7. Your rights
You may request confirmation of processing, access, correction, anonymization, portability when applicable, erasure, and information about sharing. You may also withdraw consent and request deletion of the account.
Deletion ends use of the game. Send the request to contato@razryv.online from the account email. We reply within the period set by the LGPD. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).
8. Children and teenagers
RAZRYV is rated for ages 7 and up. We do not direct advertising at any player, do not track behavior for advertising, and do not ask players for photos, location, contacts or any information beyond the sign-in account described in section 2. For children (under 12, under LGPD art. 14), the account must be created and managed by a parent or legal guardian, who consents to the processing and may request access, correction or deletion at any time at contato@razryv.online. We do not sell or use data of minors for advertising. If we learn of a child’s account created without a guardian, it will be deleted.
9. Security
Account access is authenticated by Google; RAZRYV neither receives nor stores that account’s password. We adopt reasonable technical and organizational measures to protect personal data, including session controls and encryption in transit (HTTPS). No security measure is absolutely infallible; in the event of an incident that may entail relevant risk or harm to data subjects, we will notify the National Data Protection Authority (ANPD) and the affected data subjects, as required by the LGPD.
10. Updates
The current version of this notice is the one published at razryv.online/privacy. Material changes take effect on the date shown at the top of the page.