Privacy Policy

Who is responsible

Churrasco Wars is made and operated by Caio Carvalho, an independent developer, reachable at caitripping@gmail.com. That address is also the data-protection contact for any question, access or deletion request. The formal controller entity and postal address are being confirmed and will be published here before the game is listed on a public app store.

What we collect

• Account: when you sign in with Google, we receive your Google account e-mail and display name through Supabase Auth. We do not receive your password.
• Gameplay: level progress, stars, scores, XP, cosmetics you own or equip, friends, challenges and duel results — stored so your game continues on any device.
• Display name (public): the name you choose in Settings is stored on your player row and is shown publicly on the leaderboard, which anyone can read without signing in. If you set no name, or the name is rejected by our name rules, the board shows a neutral handle instead (for example Churrasqueiro #A1B2). Do not use your real name if you do not want it seen.
• Friend invites — someone else's e-mail: when you invite a friend you type their e-mail address, and we store it on the invitation so the invite can be matched when that person signs in. This means we can hold the e-mail address of a person who has never used Churrasco Wars. We use it for nothing except matching that one invitation. If your address was typed into an invite and you want it removed, e-mail us and we will delete the invitation.
• Safety records: if you block or report another player, we store that block and that report (who, whom, the reason and when) so the block keeps working and the report can be reviewed. Other players can also block or report you: those records name you and carry the reason they chose from a fixed list, they are kept for as long as the block has to keep working, they are deleted when your account is deleted, and they are not part of your own data export because they would identify the person who filed them.
• Technical diagnostics — the web version only: when you play in a browser, a lightweight in-game recorder sends performance events (frame timing, load times, errors, scene names) to our own backend so we can fix freezes and crashes. It is keyed to a random session id, carries no e-mail address, no message content and no contacts. The Android and iOS builds send no diagnostics at all — the recorder is disabled off the web.
• Purchases: if you buy a cosmetic, payment is processed by Stripe Checkout on Stripe’s pages. We never see or store your card number; we receive only a payment confirmation and the item purchased.

What we do not do

• No advertising SDKs, no ad tracking, no analytics SDKs, no selling or sharing of personal data with data brokers.
• No tracking of you across other companies’ apps or websites.
• No access to your contacts, photos, microphone or location.

Where it lives

Account and gameplay data are stored in our Supabase project; web diagnostics in our own Google Cloud backend; payments with Stripe. All transfers are encrypted (HTTPS).

Your rights

• See your data (access): the app-store builds of the game include a “My data” control in Settings that copies the data we hold on you, as JSON, straight to your clipboard, with other players’ identifiers and any third-party e-mail addresses masked. Two limits are deliberate and you should know about both: your most recent 500 level attempts are included rather than the whole play history — e-mail us if you want the full history; and reports or blocks that other players filed about you are not included, because they would identify the person who filed them — e-mail us if you want to know what they contain. If you play in a browser, ask us by e-mail and we will send you the same export.
• Delete your data: see the section below and the Support page.
• Correct or object: e-mail us from the address you sign in with.

Deletion & how long we keep things

• While your account exists we keep your account and gameplay data so your progress is there when you return. We do not run an automatic expiry clock on it.
• Deletion inside the game — the app-store builds carry a deletion control in Settings, and it is the complete route. It erases every row we hold on you — progress, profile and name, economy, cosmetics, streak, friends, challenges, invitations, blocks and reports — and the sign-in identity itself, so the Google address behind the account goes with it. It is immediate and it cannot be undone.
• Deletion by e-mail — write to caitripping@gmail.com from the Google address you signed in with and we do exactly the same thing by hand. We process it within 30 days, and it is irreversible. This is the route to use if you play in a browser, or if you cannot sign in.
• What survives a deletion, and why: matches you played against another person are kept but anonymised — your seat in that match is emptied, so the other player keeps their own record of a game they really played and nothing in it points back to you. Records of payments are held by Stripe as the payment processor; Stripe keeps them under its own accounting and tax obligations and we cannot delete them on your behalf. Our own copy of the purchase row is deleted with the rest.
• Web diagnostics are tied to a random session id rather than your account, so they are not part of an account deletion; they are kept only as long as they are useful for fixing crashes.

Children

Churrasco Wars is a casual cooking game with no chat and no real-money wagering. Purchases are limited to cosmetic items. If you believe a child under 13 has created an account, contact us and we will remove it.

Changes

We will post any change to this policy on this page with a new date.