Cinzerra privacy policy

Updated October 27, 2026. This policy describes data handling in Cinzerra: The Forge of Ruins, an Android and iOS game maintained by I2 WEB DESENVOLVIMENTO E GESTAO DE SISTEMAS LTDA, Brazilian company registration (CNPJ) 35.487.865/0001-09. Privacy and support contact: [email protected].

Controller and data protection contact

The controller of the data processed in Cinzerra is I2 WEB DESENVOLVIMENTO E GESTAO DE SISTEMAS LTDA, Brazilian company registration (CNPJ) 35.487.865/0001-09, which is responsible for the game. The data protection officer channel required by article 41 of Brazil's General Data Protection Law (LGPD) is [email protected].

Adult audience

Cinzerra is intended for people aged 18 or older. If you identify an account belonging to a minor, contact support so we can review and handle the deletion request. Do not send identity documents or passwords in your initial message.

Information used by the game

• Google sign-in: we use Google sign-in on Android and iOS to obtain an authentication credential. We use authentication identifiers and your verified email address to check access authorization, link your account, and recover progress on other devices. The credential may contain basic profile information provided by Google. The Google Sign-In iOS SDK may process the IP address to estimate the device's general location for fraud prevention, as described in the provider's documentation. This does not request GPS access through the game. We do not receive your Google password.
• Data handled by Google as the iOS sign-in provider: the sign-in experience may also process name, email, phone number, user and device identifiers, approximate location, usage information and other data declared by the provider. Some processing takes place on Google's own pages, such as a phone number entered for two-step sign-in verification. The provider declares this data linked to identity for authentication, security and functionality; identifiers and certain usage information and other data are also used for analytics. Its privacy manifest declares no advertising tracking. The game does not request address-book, phone or GPS access for this sign-in. Google's processing is also subject to its privacy policy.
• Apple sign-in on iOS: when enabled, we use the Apple account identifier and the verified email or private relay address supplied by Apple. Linking to existing Google progress requires explicit confirmation of both sign-ins; matching emails do not merge accounts automatically. A private refresh credential is kept on the server to maintain access and request revocation when the account is deleted. We do not receive your Apple password or require your name.
• Progress: we store your formation, heroes, equipment, resources, expeditions, achievements, synchronized game preferences, and arena results to operate the game and preserve your journey.
• Arena: when you participate, your nickname, arena identifier, formation, and statistics appear in public standings that third parties may view. Histories and replays include information about both participants and may be accessed by the duel's participants.
• Community safety: we record your acceptance of the public-nickname rules and its date/version, your blocked arena identifiers, reports with a predefined reason, report status and dates, and administrative nickname-hiding decisions. These records are private and used to enforce the rules, handle reports, honor display preferences, and prevent misuse of the reporting system. Reports contain no new free-text field. Blocking hides the player in supported game views and restricts replay access; it does not make previously public data secret or guarantee different matchmaking.
• Activity and sessions: we record game actions, the screen or section in use, foreground presence, session starts and ends, action counts, and approximate usage duration. These records are linked to your account and reviewed in the administrative panel to monitor game operation, provide support, investigate problems, and prevent abuse.
• Sparks purchases: available optional purchases are processed by Google Play on Android and the App Store on iOS. The game sends the pack identifier and technical transaction proof to the server for verification with the relevant store. We store purchase and order identifiers, a pseudonymous account binding, pack and quantity, test or production environment, payment and delivery status, dates, and refund or balance adjustments. These records enable one-time delivery, interrupted-purchase recovery, refund reconciliation and fraud prevention. We do not receive or store card numbers, security codes or payment passwords; the store handles that information.
• Operation and security: we maintain account authorization, ban, and other administrative action records. Infrastructure services process IP addresses and technical connection and operation data as needed to provide and protect those services.
• Play Integrity: when enabled, Android requests an integrity proof from Google and sends it to the server to check its binding to a game session or action. We keep only result categories linked to the account and action for security diagnostics and fraud prevention. The transient proof is not kept in the history; a missing or inconclusive signal does not establish abuse. This processing requires service configuration to be enabled.
• Support: if you contact us, we use your message and email address to respond and verify account ownership. Do not send passwords, sign-in codes, or private keys.

Reading in-game announcements

To show which announcements you have read and calculate the unread count, we record the announcement identifier, its revision, and the reading date, linked to your account. These records are private and retained to preserve reading status between sessions. They are removed when the account is deleted.

Storage on your device

The app keeps a local credential to resume your account. Google sign-in may renew access for a previously authorized account or present the account selector again. For Apple sign-in, the device-session secret remains in this device’s Keychain, accessible while unlocked and not synchronized across devices. It is not handed to JavaScript; restoration uses the game’s private HTTPS route. The device grant expires within 30 days and may require sign-in again. The Apple refresh credential stays private on the server, separate from public assets, for continuity and revocation. Language, audio, motion and tutorial preferences remain on the device. Purchase proofs remain in memory during verification; the stores allow pending transactions to be recovered after interruptions. Signing out clears the local session and attempts to invalidate this device grant without revoking other devices. Clearing local data does not delete server progress or purchase records.

Purposes and services involved

We use this information to authenticate players, save progress, synchronize devices, run battles, monitor operation and usage, verify and deliver purchases, reconcile refunds, prevent abuse and provide support. Infrastructure uses Google for identity and Android purchases; Apple for identity, device Keychain, iOS purchases and authorization verification/revocation; Clockwork Labs for SpacetimeDB Maincloud and SpacetimeAuth; and Cloudflare for the domain, HTTPS, information pages and hosted files. These providers may process information in other countries as part of their services.

We do not sell your data. This version has no advertising. Activity and session records are used to operate the game and are not used for advertising.

Legal bases

• Performance of a contract (LGPD, art. 7, V): sign-in, account, progress, arena, cross-device sync and purchase delivery, which are needed to provide the game you use.
• Legitimate interest (art. 7, IX): security, fraud and abuse prevention, nickname moderation, troubleshooting and activity records used to operate the game, respecting your rights and expectations.
• Legal or regulatory obligation (art. 7, II) and regular exercise of rights (art. 7, VI): retention of purchase, refund and moderation records when the law requires it or for possible disputes.

Optional friends and private messages

Social participation requires a separate in-game acceptance. We record that acceptance, its version/date, a random public social identifier, invitation preferences, friendship requests and accepted relationships, blocks and mutes. Your public Arena nickname is shown when available; otherwise a generated nickname is used. We do not show your Google/Apple identity or email to other players.

Only accepted friends can exchange text messages, limited to 300 characters. Text is stored on our server so the two participants can read it across devices. This is not end-to-end encrypted messaging. Messages become unavailable after seven days and are deleted in bounded cleanup batches. No images, attachments, voice or global chat are supported. Do not send personal information.

A report retains only the selected message, its predefined reason, involved public social identifiers and review status for up to 90 days; evidence is then deleted in cleanup batches. Authorized administrators can review that evidence, remove the selected message and suspend or restore social interactions. Account deletion removes associated live social records and evidence; recovery copies are handled through the deletion procedure. Disabling social interactions hides your profile and stops invitations/chat without deleting game progress; existing friendship preferences are retained until account deletion. Contact support to appeal a moderation decision.

Retention and security

Progress and account bindings are retained so you can continue playing. There is no automatic deletion for inactivity. Recent arena histories and activity, session, and audit records have record-count limits; accumulated metrics, nickname reservations, season data, and imported replays have no automatic removal deadline. Deletion of this data depends on handling the account holder's request.

Purchase, delivery, refund, and balance adjustment records are not automatically deleted. They remain linked to the account to verify delivery, prevent duplicate credit, and handle recovery, refunds, support, and fraud prevention. Technical proofs and purchase bindings are private on the server; other players cannot view them. Their retention and possible deletion are considered when handling an account holder's request, with information about the reason and applicable retention criterion when a record must be kept.

We use encrypted connections and server authorization controls for each account. Administrative exports and private migration or recovery copies may also contain game data. Deletion handling must identify these copies and references to the account in shared records; deleted data must not be reintroduced during a restore.

Access, correction, and deletion

In versions offering Settings → Account → Delete my account, you can initiate deletion inside the game, read the warnings and explicitly confirm the permanent action. The result reports completion in the live database or a failure; this is not merely deactivation. For information, correction, deletion without app access or follow-up on private copies, email [email protected] using your sign-in account email, including an Apple private relay address if used. We verify ownership without requesting passwords or tokens. See the deletion procedure.

Email requests and handling of private copies are manual. Deletion covers access bindings, progress, activity and sessions, Arena profile, social data and associated references; minimal purchase and security records may remain under the criteria below. If Apple is linked, we remove device grants from the live database and request revocation from Apple; temporary failures are retried through a private queue until confirmation. The queue retains only the credential needed and a pseudonymous identifier to finish revocation. Before confirming the complete scope, we report covered copies, exceptions, reasons and retention criteria. Signing out, uninstalling or revoking Google or Apple access does not delete server progress. Data deletion does not replace the relevant store’s refund process.

Your rights

Under article 18 of the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing and deletion of your data, and you may complain to Brazil's National Data Protection Authority (ANPD). Use the contact above.

After deletion, we retain private suppression records derived from the account email and identifiers to prevent registration again and the reintroduction of deleted data during restoration. These records are pseudonymous: they can be linked to the account by checking the same identifiers and are not anonymous data. Minimal purchase and audit records may also remain when needed to prevent fraud, reconcile refunds, or meet a legal obligation. Our response identifies the information retained, its purpose, and the applicable retention criterion.

Updates and contact

Material changes to data handling will be reflected in this policy. Questions about the game or your data may be sent to the contact above.