Delyra Privacy Policy

This policy explains what personal data the game Delyra (the “Game”) processes, why, who we share it with, how long we keep it and how you can exercise your rights. It is also available em português. If the versions differ, the Portuguese version prevails, unless the law of your country requires otherwise.

#Summary in plain words

• You can play without an account. Your progress is saved on your own device.
• The Game is free and funded by ads from Google AdMob, which uses device identifiers to show and measure ads.
• We use Google Firebase to understand how the Game is played (for example, which levels are too hard), to receive crash reports and to adjust settings without releasing a new version.
• Cloud save is optional. If you sign in with your Google account, we keep a copy of your progress linked to an account identifier. You can sign out or delete your account at any time, inside the Game, in Settings.
• We do not sell your data. We do not ask for your precise location and do not access your contacts, photos, files, camera or microphone.

#1. Who we are (controller)

• Company: GamaVirtual Internet Ltda (“GamaJogos”, “we”, “us”)
• Brazilian company number (CNPJ): 10.442.661/0001-20
• Address: Rua Carajás, nº 374, Vila Tupi, Várzea Paulista/SP, CEP 13.225-030, Brazil
• Privacy e-mail: contato@gamajogos.com.br
• Data protection officer (“Encarregado”, Brazil LGPD art. 41): Nefi Gama, at the same e-mail

#2. What data we process, why, and on what legal basis

#2.1 For everyone who plays the app

#2.2 Only if you choose “Save to cloud” (sign in with Google)

The Guardian record contains no name or e-mail. So that the number can be calculated, any signed-in player can count these records and could technically read the list of UIDs and dates; a UID alone does not identify you. Firebase Authentication also logs the IP address and technical device data at sign-in, for security and abuse prevention.

#2.3 Google Play Games (optional)

If you use Google Play Games, the Game may sign in automatically with your Play Games profile, receives your player ID and player name and sends the achievements you unlocked. On the device, the Game keeps only the list of achievements already sent for each player ID, so it does not send them twice. Play Games is a Google service governed by the Google Privacy Policy; you manage your profile (visibility and deletion) in the Google Play Games settings.

#2.4 Data that stays on your device

• Reminders: local notifications scheduled on your device (daily challenge and come-back reminders), only if you allow them. No data is sent for them. Turn them off in Settings → Daily reminder or in Android notification settings.
• Guardian Card and sharing: the image and text are created on your device and leave it only if you choose to share them through the Android share menu. The shared link opens the Game’s Google Play page with a campaign code that only tells which kind of share an install came from; it does not identify you or the recipient. We receive no copy of what you share.
• Android backup: if Google backup is on, Android may include Game data in your backup and in transfers to a new device, according to your Google account settings.

#2.5 Web version and this website

The web version of the game at gamajogos.com.br has no sign-in, real ads, Google Analytics or Crashlytics: progress stays only in your browser’s local storage. These pages use no cookies or trackers, and fonts are served from our own server. Like any website, the hosting server logs technical data for each visit (IP address, date and time, requested page and browser), which we keep for 6 months for security and to comply with article 15 of the Brazilian Internet Civil Framework (Law 12,965/2014).

#2.6 What we do not collect

Precise (GPS) location, contacts, photos, videos, files, camera, microphone, messages, payment data, health data or browsing history. The Game has no real-money purchases, chat or player-to-player interaction.

#3. Who we share data with

We do not sell or rent personal data. Data is processed by:

#4. International data transfers

GamaJogos is based in Brazil. Google processes data mainly in the United States and in other countries where it has infrastructure. Cloud saves are stored in the southamerica-east1 (São Paulo) Google Cloud region. Your data may therefore be transferred outside your country.

For transfers from Brazil, we rely on the contractual clauses and safeguards in Google’s data processing terms (LGPD art. 33; ANPD Resolution 19/2024). Rules for other countries are in section 10.

#5. How long we keep data

#6. Children and teenagers

Delyra is rated for all ages, but it is designed for players aged 13 and over and is not directed at children. We do not knowingly collect personal data from children under 13 (or under the minimum age required in your country). Ads are limited to content rated for a general audience.

In Brazil, in line with the Digital Statute of Children and Adolescents (Law 15,211/2025):

When Google Play indicates that the user is under 18, or when the age is unknown, the Game requests non-personalised ads only, with no profiling.

To do this, the Game queries Google Play Age Signals, which provides only an age range (for example, "18 or older") and whether the account is supervised by a parent — never the date of birth. This information stays on your device, is used only to choose between personalised and non-personalised ads, and is not sent to us. Accounts of users under 18 receive only non-personalised ads in any country.

If you are a parent or guardian and believe a child has given us personal data, write to contato@gamajogos.com.br and we will delete it.

#7. Your rights and how to exercise them

Depending on the law that applies to you (the Brazilian LGPD and, where relevant, the laws in section 10), you may ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
• portability (a readable copy of your save);
• deletion of data processed with your consent;
• information on who we share data with and on the possibility of not consenting, and its consequences;
• withdrawal of consent and objection to processing based on legitimate interest;
• review of automated decisions. The Game makes no automated decisions with legal or similarly significant effects on you.

#Directly in the Game

On the home screen, tap the gear icon (Settings). The Privacy section has this policy, the terms of use and:

• “Ad privacy options”: review or withdraw your consent at any time. Shown where your country’s law requires it (EEA, UK and Switzerland).
• “Delete account and cloud data” (shown while you are signed in to the cloud): immediately deletes your Firebase Authentication account, your cloud save and your Guardian record. Progress on the device stays until you remove it with “Erase progress”.

Also in Settings:

• “Daily reminder”: turns reminders on or off.
• “Sign out” (under Save to cloud): disconnects the cloud on this device.
• “Erase progress”: resets levels, stars and crystals on this device. If you are signed in, the cloud save is reset too (the account and its data remain).

#Without the Game installed

Follow the instructions at gamajogos.com.br/delyra/excluir-conta or write to contato@gamajogos.com.br with the subject “Delyra privacy” and the Google account e-mail you used in the Game. We reply within 15 days and complete deletions within 30 days (or sooner if your law requires). We may ask for information to confirm the request is yours.

#Personalised ads outside the EEA

In Android Settings → Google → Ads (or Privacy → Ads) you can delete or reset your advertising ID.

#Complaints

You may complain to the Brazilian National Data Protection Authority (ANPD) or to the data protection authority of your country (see section 10). Please contact us first: we can usually solve it quickly.

#8. Security

All communication with the services above is encrypted in transit (HTTPS/TLS). The cloud database has access rules that let each player read and write only their own save and create only their own Guardian record. No system is 100% secure. If a security incident may cause relevant risk or harm, we will notify you and the authorities within the deadlines of the applicable law.

#9. Changes to this policy

We may update this policy when the Game changes or when the law requires it. The date at the top shows the current version. For material changes (for example, a new type of data or a new purpose), we will notify you in the Game before they take effect and, where required, ask for new consent.

#10. Country-specific information

This section applies only to residents of the countries indicated.

#European Union and European Economic Area (GDPR)

In addition to the rights in section 7, you have the right to restriction of processing. Transfers to the USA rely on the EU-US Data Privacy Framework adequacy decision, in which Google participates, and on the European Commission’s Standard Contractual Clauses included in Google’s terms. You may lodge a complaint with the data protection authority of your country (list of authorities).

#United Kingdom (UK GDPR)

Transfers to the USA rely on the UK Extension to the Data Privacy Framework and on the International Data Transfer Agreement or Addendum to the Standard Contractual Clauses. You may complain to the Information Commissioner’s Office (ICO).

#Switzerland (FADP)

Transfers to the USA rely on the Swiss-US Data Privacy Framework and on standard contractual clauses. You may complain to the Federal Data Protection and Information Commissioner (FDPIC).

#Japan (APPI and Telecommunications Business Act)

Data is provided to a third party in the USA (Google LLC). Information on the US data protection system is available on the website of the Personal Information Protection Commission (PPC). Google takes measures equivalent to those required by the APPI.
External transmission of user information (Telecommunications Business Act): the Game includes modules that send information from your device to third parties.

#South Korea (PIPA)

International transfer of personal information:

You can refuse these transfers by not signing in with Google and refusing ad personalisation; cloud features and some ads will then not be available. You may also turn to the Personal Information Dispute Mediation Committee and the KISA Privacy Infringement Report Center (118).

#Taiwan (PDPA)

The information required by article 8 of the Personal Data Protection Act (controller, purposes, data categories, period, area and recipients of use, and your rights) is in sections 1 to 7. You may choose not to provide optional data (for example, by not signing in with Google); the related feature will then not be available.

#11. Contact

GamaVirtual Internet Ltda · CNPJ 10.442.661/0001-20
Rua Carajás, nº 374, Vila Tupi, Várzea Paulista/SP, CEP 13.225-030, Brazil
E-mail: contato@gamajogos.com.br

See also: Delete account · Terms of use.