Privacy policy

Last updated on October 21, 2026.

Who handles your data

Gambitagem is responsible for the processing of the personal data described here, the controller, under the Brazilian General Data Protection Law (LGPD). This policy covers the site and the app.

This is a courtesy translation: if it differs from the original, the Portuguese version prevails.

The idea is simple: keep only what the game needs, sell nobody's data and never show your e-mail to another player.

What data we keep

What you give us:

• Sign up: username, e-mail and password. The password is kept as a hash, a scrambled form that not even the team can read.
• Preferences: board theme, piece set, sound, move confirmation, fast moves, language and time zone (which the browser tells us when you sign up).
• Notes: what you write in the notes tab of a game. Only you read them; never your opponent or whoever watches.
• Game chat: the messages you exchange with your opponent in a game. They are kept with it, for the two of you to read; whoever watches doesn't see them, and the team only reads them to handle a report.
• Messages to the team: what you write in the feedback, with the screen you sent it from, and the reports you make.

What comes from use:

• Play: your games, with moves, times and results, your ratings, the tournaments you took part in, the tactics puzzles you tried and the game reviews.
• Relations: friendships, friend requests and the accounts you blocked.
• Activity: a record of the actions you take in the app, such as creating a game or joining a tournament, the date of your last visit and the days you used the app. We don't record every page you open.
• Device notifications: if you turn notifications on, we keep the address your browser gives us to receive them.
• Technical records: IP address, date, time and requested page, in the server logs.

We don't ask for full name, ID document, phone, address or payment details.

What we use it for

• Making the service work: creating your account, keeping and showing your games, calculating the rating, finding opponents and organizing tournaments. The basis is the performance of the contract with you.
• Talking to you: the password recovery e-mail, the notices inside the app and, if you turn them on, the device notifications. The basis is the performance of the contract and, for device notifications, your consent.
• Keeping the game clean and safe: limiting sign-in attempts, analyzing games, handling reports and suspending accounts. The basis is legitimate interest.
• Understanding how the product is used, with usage numbers per feature, to improve it. The basis is legitimate interest.
• Complying with the law, such as keeping the access records required by the Brazilian Internet Civil Framework (Marco Civil da Internet). The basis is legal obligation.

We don't use your data for advertising. Engine analysis of games is only a clue, and any suspension is decided by a person.

What others see

Other accounts see your username, your ratings, your game numbers and your games, and can watch a game of yours in progress. Your e-mail never shows to another account.

After you try a tactics puzzle, your friends see which square of the puzzle trail you are on.

Whoever you block can't find your profile or your games.

The Gambitagem team sees the data of your account, including the e-mail, to give support and moderate. What the team does in the administration is recorded.

Who we share with

We don't sell or rent personal data. It only leaves Gambitagem to those who help us run the service, and only what is needed:

• hosting and infrastructure, where the site and the database live;
• Cloudflare, which protects the site against attacks and through which every access passes, with the IP address and the requested page;
• e-mail delivery, which receives your address to deliver messages such as the password recovery one;
• the notification services of your browser, from Google, Mozilla, Apple or Microsoft, which deliver the notifications to the device if you turn them on.
• Google Analytics, only on the public pages of the site: it receives the pages visited, the browser and the approximate region, so we know how the site is used. It doesn't enter the app.

These providers may keep data outside Brazil. We may also hand data to an authority when the law or a court order requires it.

Cookies and browser storage

We use only what the service needs to work:

• a session cookie, which keeps you inside your account;
• a "remember me" cookie, if you tick that option when signing in;
• your language, and your choice of light or dark theme, kept in the browser itself.

On the public site, Google Analytics keeps measurement cookies (the `_ga` ones) to tell visits apart; the banner shown there says so. You can block them in your browser settings, and nothing changes in what you can do. We don't use advertising cookies.

How long we keep it

The account data stays while the account exists. When you delete the account, the sign-up data, the ratings, the friendships and blocks, the activity record, the tournament entries, the puzzle attempts, the notes, the chat messages and the notification addresses go with it.

Some things stay, with no link to your account: the games, which remain in the opponent's history without your name, and the feedback messages and reports you sent. The record of what the team did may keep the username of an account that was the target of a measure, such as a suspension.

The technical server records are kept for as long as the law requires, currently six months.

Your rights

Under the LGPD, you can:

• know whether we process data about you and access it;
• correct data: username, e-mail and password change in My account, inside the app;
• delete the account and the data tied to it, also in My account;
• take your data: every finished game can be downloaded as PGN;
• turn off device notifications at any time, in the preferences;
• know who the data is shared with and object to a processing.

What you can't do by yourself inside the app, ask through the contact at the end of this document. You can also complain to the Brazilian National Data Protection Authority (ANPD).

Security

The password is kept as a hash, the connection to the site is encrypted, sign-in attempts are limited and the team's access to data is restricted and recorded. No system is foolproof: if there is an incident that may put you at risk, we will let you know, as the law requires.

Children and teenagers

The service is for those aged 13 or older. We don't knowingly create accounts for anyone younger, and any that is found is deleted. Those between 13 and 17 use the service with the permission of their parents or guardians.

Changes to this policy

This policy may change. The date of the last change is at the top of this page, and a relevant change is announced inside the app before it takes effect.

Contact

To ask about this document or exercise your rights, write to contato@gambitagem.com.br.

Those with an account also talk to the team through the Feedback button, at the bottom of any screen of the app. The reply arrives through the notifications bell.

Read the Terms of use as well.