Privacy policy

Effective October 14, 2026.

1. Who looks after the data

The controller, under Brazil's General Data Protection Law (LGPD), is Marcos Rosado, an individual based in Brazil who develops Maracutaia. This policy covers the Android app (dev.marcosrosado.maracutaia), the desktop version and this website.

Questions and requests: contato@marcosrosado.dev.

2. What the game does not collect

We don't ask for sign-up, name, email, phone number or age. The game doesn't use location, contacts, photos, camera, microphone, or any advertising or device identifier. There are no ads, purchases, analytics tools, automatic crash reports or third-party libraries that collect data. On Android, the only permission requested is internet access.

3. Playing against bots

A game against bots runs entirely on your device: nothing leaves it.

4. Playing online

To play online, the game talks to our server. This is what goes through it:

Nickname

You choose it; it doesn't have to be your name, and we suggest it isn't. It is shown to everyone in the room and to spectators; if you create a public room, it also appears in the room list.

Kept: only in the server's memory while the room exists (an idle room closes after 30 minutes). Never written to disk.

IP address

Needed for the connection and to limit abuse (connections, rooms created and code attempts per address).

Kept: in memory while you are connected. Technical logs don't show the IP: they show a scrambled code that doesn't reveal the address and changes every time the server restarts.

Device system

The system name (for example, "Android" or "Windows"), used for the phone rules (tables of up to 5 players) and to understand problem reports.

Kept: in the connection's memory; only stored along with a report you send.

Reconnection code

A random code that puts you back in your seat if the connection drops. It identifies neither you nor your device.

Kept: on your device and in the room's memory.

Chat

Table messages and whispers between two players. Spectators can read the table and the whispers. On phones, chat is limited to ready-made phrases.

Kept: the server does not store chat. The history lives in the room's memory and is gone when the room closes.

Game replay

Every online game is recorded so you can watch it again and so we can fix bugs: settings, moves, characters, whether each seat was a person or a bot, result, dates and game version. The replay does not contain nickname, IP or chat. Anyone with the game's code can download the replay.

Kept: deleted automatically after 180 days. A game that received a problem report or ended with a game error is not deleted automatically: it is kept to analyze the bug.

Problem report

Only when you press "Report a problem": the text you write (up to 500 characters), the device system, the game version, the turn and the seat. The game itself asks you not to write personal data in that text.

Kept: with the game's replay, which in that case is not deleted automatically.

Game statistics

One anonymous line per game (result, number of people and bots, bot levels, length, winners), used to balance the game. It has no nickname, IP, room or chat.

Server technical logs

Operational and error messages, without a plain IP, nickname or chat. They are overwritten automatically, on a rotating basis.

5. Local network (desktop only)

The desktop version can play over the local network, without our server. The host announces the room on the network with their own nickname, and the data stays on the host's computer. Local network connections are not encrypted. The Android app has no local network mode.

6. What stays on your device

Settings (language, volume and the last nickname used), the reconnection code, the history of your last 300 online games, replays you download, and local game and error logs (rotated out). None of it is sent automatically. To erase everything, clear the app's data or uninstall the game.

7. Why we may process this data

• To do what you asked for, playing online: nickname, IP, device system, reconnection code and chat (LGPD, art. 7, V).
• Legitimate interest, to protect the server from abuse, fix bugs and balance the game: per-IP limits, replays, reports and statistics (LGPD, art. 7, IX).

8. Who we share it with

We don't sell data or use it for advertising.

• Hosting: the server runs on Amazon Web Services (AWS), in the São Paulo region; online game data stays in Brazil.
• Stores: Google Play and itch.io distribute the game and have their own policies for what they collect in the store.
• Authorities: only when the law requires it.

9. Children and teenagers

Maracutaia is made for ages 12 and up and is not directed at children. The game doesn't ask for age or identity, has no account and, on phones, has no free chat. We recommend a nickname that doesn't reveal who you are. If you are responsible for a child and think they sent personal data in a problem report, write to the contact above.

10. Your rights

Under the LGPD (art. 18), you can ask for confirmation that we process your data, access, correction, deletion and information about sharing, and you can complain to Brazil's National Data Protection Authority (ANPD). Since the server keeps nothing that links the data to a person, to find a replay or report please send the game's code (it's in the game's history) and the date. We reply within 15 days.

11. Security

Online play and this website use encrypted connections (TLS). On the server, replays and reports are kept in a restricted folder, and administration only gets in with a key.

12. This website

No cookies, no analytics tools, no third-party fonts, scripts or images, and no access log.

13. Changes

When this policy changes, the date at the top changes with it. Changes that affect what is collected are announced on this page before they take effect.

This is a translation; if it differs from the Portuguese version, the Portuguese version prevails.