What we store
Account: username, password and recovery code (stored only as argon2id hashes, never in plain text), date of birth (only to check the minimum age; never shown) and country.
Game: battles, scores, aura, streaks, items, AuraCoin balance and transaction history.
Security: login attempts with IP (against brute force and to block banned users), reports and moderation incidents (category and confidence; no images).
Support: your tickets and messages, until the team closes the ticket.
Payments: the order (amount, pack or plan, status). Card details stay with SumUp, never with us.
Camera and microphone
Battle video and audio go straight between the two players through LiveKit and are not recorded. One frame per second from your camera is analyzed by moderation and discarded immediately.
Cookies
We only use necessary cookies: the session (to keep you signed in) and the language. Rewarded ads are from Google; for accounts under 18, ad requests are flagged as from a minor.
Who we share with
Providers that make the app work: Supabase (database), LiveKit (video), SumUp (payments), Google (rewarded ads) and the website host. Each one only gets what its part needs.
Your rights
You can ask for a copy of your data, a correction or account deletion through Support. We reply within the deadlines of the GDPR and Brazil's LGPD.
How long
We keep data while the account exists. Security and payment records may be kept for as long as the law requires.