How your data is handled

The controller is the individual responsible for the independent digital project Sky World, reachable at fpimenta13@gmail.com. The project does not yet have an incorporated legal entity or registered company name. This notice describes processing in the game and account areas under Brazil's General Data Protection Law (LGPD).

1. Data processed

We process account identifiers (UUID, email and sign-in provider), nickname, settings, progress, points, MMR, minimal match history, temporary match commands and events, security logs, support data and limited technical information about the browser and game version.

2. Purposes and legal bases

We use data to create and authenticate accounts, run and reconnect matches, calculate progression, prevent fraud, protect the platform, provide support, comply with legal obligations and exercise rights. Legal bases may include performance of a contract, consent where required, legitimate interests subject to a necessity assessment, legal compliance and the regular exercise of rights.

3. Automated decisions

Server rules automatically calculate results, rankings and progression. Security measures may also restrict suspicious actions. You may request information and review of a decision affecting your interests through the privacy contact channel.

4. Processors and sharing

Supabase provides authentication and database services; Railway hosts the application; Cloudflare Turnstile helps combat abuse; GitHub runs operational workflows and stores pseudonymous deletion tombstones in the private repository. Each provider receives only what is necessary for its role. We do not sell personal data.

5. International transfers

Some processors may process data outside Brazil. In these cases, we use the available contractual, technical and organizational mechanisms and limit sharing to what is necessary to provide and protect the service.

6. Retention

Detailed match diagnostics are deleted within seven days; support attachments, when submitted, expire within thirty days. Account data remains while the account is active. After deletion, private data and direct identifiers are erased; minimal results, integrity records and statistics may remain anonymized. Legal obligations or the defense of rights may justify limited additional retention.

7. Cookies and local storage

We use cookies or browser storage necessary for sessions, protection of the sign-in flow, preferences, match recovery and application stability. This version does not describe a behavioral advertising purpose.

8. Data subject rights

You may request confirmation and access, correction, anonymization, restriction or deletion where applicable, portability as regulated, information about sharing, review of automated decisions, objection and withdrawal of consent. You may also complain to Brazil's National Data Protection Authority.

9. How to exercise your rights

Send your request to fpimenta13@gmail.com. We may request proportionate identity confirmation to avoid disclosing or deleting another person's data. We will respond within the deadlines and formats required by applicable law.

10. Security and incidents

We use protected authentication, captcha, administrative second-factor verification, least privileges, backup encryption, authoritative validation and monitoring. If a relevant incident occurs, we will carry out containment, investigation and the communications required by Brazil's LGPD and ANPD.

11. Children and adolescents

The service is not intended to deliberately collect children's data without a guardian's involvement. If you identify an account being used without appropriate authorization, contact us for review and action.

12. Updates to this notice

Material changes create a new version and may require confirmation before continuing in authenticated areas. The date of the current version appears at the beginning of this Policy.