Privacy Policy

Last updated: 12 October 2026.

This policy explains which data the game Manteiguinha e as Pipoquinhas ("the game") processes, why, for how long, and how you can control it.

1. Who processes your data

The game is maintained by Jeferson Cruz, an individual ("we"), who is responsible for processing the data (controller, under Brazil's General Data Protection Law, LGPD). We do not publish a CPF, CNPJ or address: the way to reach us is the email below.

Data protection officer (encarregado): we are a small-business processing agent (Resolution CD/ANPD No. 2/2022, art. 2, I, which includes individuals) and, for that reason, are exempt from appointing one (art. 11). Instead, we keep a communication channel with data subjects, the email contato@manteiguinha.com.br, which we read and answer.

Privacy contact: contato@manteiguinha.com.br

2. Summary

There is no sign-up. We do not ask for your name, email, phone number or password.
Game account. In the Android and iPhone apps, the game automatically recognizes your game account (Google Play Games on Android, Game Center on iPhone) to save and restore your progress. You can unlink that account at any time in Settings.
Ads. There is the ad you choose to watch in exchange for a reward and, in the apps, one ad between levels when you complete levels 5, 10, 15 and so on for the first time. Ads are always non-personalized.
We do not sell data to anyone.
You can delete your data inside the game and turn off usage analytics. For people the store reports as under 18, usage analytics is turned off.

3. Data we process and why

Data	Purpose	Legal basis (LGPD)
Progress, stars, settings and butter (lives), kept on the device	Make the game work	Performance of a contract (LGPD art. 7, V).
Cloud copy of the save, linked to a random identifier created on the device	Keep your progress when you change devices or reinstall	Performance of a contract
Your player identifier in the game account (Google Play Games or Game Center), received from Google or Apple, linked to the game's random identifier	Restore your progress on another device, and send achievements and scores when they exist	Performance of a contract.
Save backups, made before your progress is switched to another account	Avoid losing progress by mistake	Performance of a contract
Duel: your time and number of moves on each level	Build the "ghosts" other players race against	Performance of a contract
Season: your score for the week	Build the ranking	Performance of a contract
Purchases: the purchase identifier and the confirmation returned by the store (product, date, status)	Grant and restore the purchased benefit	Performance of a contract.
Usage analytics: events such as "level started" and "hint used", with a random identifier, the play session, the app version, the platform and the device language	Understand where the game is hard or confusing and improve it	Legitimate interest (art. 7, IX), with an option to turn it off; off for people the store reports as under 18 (section 9).
Error reports: the error message, where it happened, the game version and basic device data	Fix crashes	Legitimate interest (turned off together with usage analytics).
Feedback: the message you write and, if you want, a nickname	Read and answer your suggestion	Consent (you choose to send it)
Advertising identifiers and technical data to show and measure ads (see section 8)	Show the ad, limit frequency and prevent fraud	Legitimate interest, with reduced impact because ads are not personalized.
Connection data (IP address, date and time), received by any server on the internet	Security and abuse prevention	Legitimate interest.

The game's random identifier does not contain your name or any other data about you. Still, because it is persistent, we treat it here as personal data. We do not collect precise location, contacts, photos or the microphone. In feedback, avoid writing personal data.

For each purpose based on legitimate interest (non-personalized ads, usage analytics and error reports) we carried out and keep a balancing test, in the format of the ANPD 2024 Guide. You may object to this processing (section 15).

4. Game account (Google Play Games and Game Center)

In the apps, the game uses the game account on your device. On Android, it is Google Play Games. On iPhone, it is Game Center. That account was created outside the game, by Google or Apple, and the game does not ask for a password.

When you open the game, it receives from the platform an identifier of your game profile and links it to the cloud save. This is how you recover your progress when you change devices. From the game profile we keep only that identifier, the date the link was made and the date of last use. We do not keep your game account's display name, photo or email.

What stays with Google and Apple. Your game profile, achievements and leaderboards belong to Google or Apple and follow their policies. We cannot delete that data. On Android, you manage it in your Play Games profile or your Google Account. On iPhone, in the Game Center settings and your Apple account.

How to unlink. In Settings, tap "Unlink". The game keeps working with the progress on the device. To turn it back on, tap "Link again", in the same place.

5. Cloud save and recovery code

The game can generate a recovery code to restore your progress on another device. Keep it somewhere safe: anyone who has the code can restore that save. We will never ask for that code by email, and you should never send the password of any account to anyone.

6. Duel and Season

In the Duel, your time may appear to other players as a ghost identified by an automatically generated nickname, never by your name. The Season ranking shows only position and points. Nobody sees who you are.

7. Purchases

Purchases are made through your device's store (Google Play or App Store). We do not receive or keep card or payment data. To grant the benefit, we confirm the purchase with Google or Apple. You can restore a purchase with the "Restore purchases" button in the store, using the same store account.

8. Ads

The game shows the ad you choose to watch in exchange for a reward. In the Android and iPhone apps, there is also an ad between levels: it appears when you complete levels 5, 10, 15 and so on for the first time, on the victory screen and before the "Next level" button. Replaying a level you already completed shows no ad. We never show an ad at the start of a level or right after another ad. Popcorn Pass owners do not see the ad between levels.

Ads are served by Google (AdMob in the apps; AdSense in the browser version, when available) and are always non-personalized, in every country: we ask Google not to use your data to choose ads for you.

Even so, to show and measure ads, Google may process:

on Android: the device's advertising identifier (AD_ID), for measurement, frequency limits and fraud prevention, never for personalization. You can reset or disable it in the device settings (Google > Ads);
on iPhone: no advertising identifier. The app does not request access to the IDFA and does not track you across apps or websites;
technical device data (model, system version, language, network) and approximate location inferred from the IP address;
ad interactions (display, click, completion).

Google processes this data under the Google Privacy Policy and the AdMob data policy.

9. Usage analytics and error reports

You can turn off usage analytics in Settings > Usage analytics. When you turn it off, the event queue and the analytics identifier are deleted from the device, and sending error reports also stops.

Usage analytics is on by default. When your device's store tells the game that the player is under 18, usage analytics is turned off (and, with it, sending error reports), and the game does not show the notice that your streak (days in a row) is at risk. If the store does not report the age, analytics stays on and you can turn it off whenever you want. We use the age information only for this.

Error reports are kept for 90 days.

10. Who we share with

Database provider: stores the cloud save, the Duel and Season data, purchase records and usage analytics events, on servers in Brazil. It acts as a processor.
Google and Apple: provide the game account and confirm purchases made in their stores. They process your data under their own policies.
Google: delivers and measures non-personalized ads.
Game server provider: hosts the game's server, which is in the European Union (France), and receives the game account login, purchase confirmations, usage analytics events, error reports and feedback messages. The cloud save, the Duel and the Season go straight from your device to the database in Brazil. It acts as a processor.

These providers process the data only for the purposes above. We may also share data when the law or an order from an authority requires it. We do not sell data.

11. Availability

The game is offered in almost the whole world. It is not offered in the European Union and the European Economic Area, the United Kingdom, Switzerland, mainland China and Japan. We do not offer the game in the app stores of those places, and people who are there should not use the game, including the browser version.

12. International transfer

The database is in Brazil. The game's server, hosted by a provider in the European Union, is in the European Union. For that reason, the data your device sends to that server (game account login, purchase confirmations, usage analytics events, error reports and feedback) is transferred to the European Union. The Brazilian National Data Protection Authority (ANPD) recognized that the European Union provides an adequate level of data protection (Resolution CD/ANPD No. 32/2026); for that reason, this transfer is based on art. 33, I, of the LGPD. Google and Apple may also process data outside Brazil, under those providers' policies and contracts.

13. How long we keep data

Data	Period
Cloud save, Duel and Season	Until you delete it, or up to 24 months without playing (the cleanup runs once a day on the server)
Game account link	Until you unlink or delete your data, or up to 24 months without playing (the cleanup runs once a day).
Save backups	The 5 most recent. Each backup is deleted after 24 months, or sooner when you delete your data. Unlinking does not delete the backups unless you choose to delete them too.
Usage analytics	13 months (395 days). Anonymous events, not linked to your profile.
Error reports	90 days.
Feedback	12 months (365 days). Anonymous, not linked to your profile.
Purchase record	While the benefit exists. When you delete your data, the purchase record stops existing on our server; the official receipt stays with the store (Google or Apple), which is the seller.
Connection data	Up to 6 months, in technical security logs (a reference period taken from art. 15 of Brazil's Marco Civil da Internet).
Advertising identifiers	Handled by Google (AdMob), under its policy. They are not kept on our server.

14. Deleting your data

Delete all digital data (inside the game). In Settings, the game asks for confirmation and, after our server confirms, deletes:

on our server: the cloud save and backups (including those from other installs linked to the same game account), the link to the game account, the Duel times, the Season score, the purchase confirmation kept on our server and the game's anonymous user;
on your device: the save, the backups, the game identifiers and the analytics queue. The device is left like a new installation;
on Android, the copy of your progress in your game account's Saved Games (if the account isn't connected at that moment, it is deleted the next time it connects, and until then the game doesn't use it).

After that, the game stops contacting our servers from this device until you turn the cloud back on. These keep working: ads, remote configuration and clock checks (which do not use any identifier of yours), feedback you send, and buying or restoring purchases through the store button.

What the button does not delete:

your profile, achievements and leaderboards in Play Games or Game Center, which Google and Apple keep. You delete them in your Play Games profile or Google Account (Android), and in the Game Center settings (iPhone);
usage analytics events already sent: they are anonymous and not linked to your profile, so the button cannot reach them; they expire after 395 days;
feedback already sent: also anonymous and not linked to your profile; it expires after 365 days;
recovery code attempts, which expire on their own;
technical logs kept by our infrastructure providers;
data kept by advertising SDKs under Google's responsibility;
the official purchase receipt, which stays with Google or Apple, the store that sells (the purchase record on our server is deleted).

Only unlink the game account. In Settings. It removes the link immediately and keeps everything else.

Request by email. If you cannot use the game, write to contato@manteiguinha.com.br. We treat the request as a request to delete data that is unnecessary, excessive or processed in breach of the law, or processed with your consent (art. 18, IV and VI, of the LGPD) and, when the processing is based on legitimate interest, as an objection (art. 18, § 2). We reply within 15 days, counted from when we receive the email. Because there is no sign-up, we may ask for the recovery code or other proof that the save is yours.

15. Your rights

Under art. 18 of the LGPD you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law, portability, information about who we share it with, deletion of data processed with your consent, and revocation of consent. You may also object to processing based on legitimate interest (art. 18, § 2). We reply to requests within 15 days.

You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

16. Children and teenagers

The game is meant for players aged 13 and over and is not directed at children under that age. We do not intentionally collect data from children under 13. If you know of such a case, contact us and we will remove the data.

Because teenagers aged 13 to 17 may play, we process their data in their best interest (art. 14 of the LGPD) and follow the ECA Digital (Law 15.211/2025):

the game has no loot box (items or random advantages obtained by paying) and no chat between players;
ads are always non-personalized, and we do not build behavioral profiles to target advertising;
when your device's store tells the game that the player is under 18, usage analytics is turned off and the game does not show the streak-at-risk notice (section 9). We use that information only for this;
parents and guardians can use the device's own controls (such as Google Family Link and iPhone Screen Time) and block or require approval for purchases in the store.

The game's age rating is in the Terms of Use.

17. Security

Communication between the game and our servers and providers is encrypted. Access to data is restricted by access rules and protected credentials, and each player can only read and change their own data.

18. Changes to this policy

When this policy changes, we update this page and the date at the top. If the change is significant, we also tell you inside the game.

19. Contact

Questions or requests about privacy: contato@manteiguinha.com.br