Privacy policy

Version 3, November 12, 2026. Applies to the game "Pipeiros" (store name "Pipeiros: Pipa Online") on Android, iOS and the web. The Portuguese version (politica-de-privacidade.md) is the reference; this is a translation for the stores' English listings. Version 1 (November 8, 2026) had no online mode; version 2 (November 11, 2026) had no cloud-saved progress.

Summary

• The game asks for no name, email, phone number or GPS location, and has no chat, voice or free text.
• Your progress (coins, kites, options) stays on your device. On Android, if you use Google Play Games, it is also saved on the game's server so it comes back on another phone. See Cloud-saved progress.
• We keep only your age band (under 13, 13 to 17, or 18 and over), on your device. Your date of birth is not stored.
• In online mode, the game's server in Brazil keeps a random account code (no name or email), the nickname picked from the game's word lists, the age band, points and today's rewards, who you blocked, and reports. See Online.
• In the app, ads appear only when you choose to watch one to earn a reward. They are served by Google AdMob.
• Ads are never personalized for anyone under 18. For adults they are not personalized either, unless the person turns the option on.
• Purchases go through Google Play or the App Store. The game never sees card or payment details.
• We do not sell anyone's data. Nothing from online mode is used for advertising.

Who is responsible

The controller under Brazil's General Data Protection Law (LGPD) is William Duarte Rodrigues (Hammock Games), individual.

Privacy contact: support@hammock.games. We answer within 15 days.

What stays on your device only

• game progress: coins, kites and lines, decorations, missions, level, statistics and options (with Play Games linked, a copy goes to the server: see Cloud-saved progress);
• age band, the day you answered and where the answer came from (the game's question or the device's store);
• your choice about personalized ads;
• parental controls: daily time limit, purchase lock, the online switches (play online, emotes, friends' rooms) and today's play time;
• when you earned ad rewards in the last two days (to enforce daily limits);
• IDs of purchases already delivered (so the same purchase is never delivered twice);
• for online mode: the random account code, the nickname, the data-saver option, the preferred map, your block list and how many reports you sent today. Muting is not stored: it lasts until you close the game.

To delete all of this, uninstall the app or clear its data in the device settings. On the web, clear the site data. Online data kept on the server is deleted with the button in the Privacy screen (see Your rights).

What leaves the device, and to whom

Online (playing in the same sky with other people)

Online mode connects the game to the game's own server, on a rented machine in São Paulo, Brazil (Hostinger). The hosting company only runs the machine; the controller decides about the data.

To play online, the game creates a random account code on the device. It contains no name, email, phone number or device identifier. The server keeps only a cryptographic digest of it (the code cannot be recovered from the digest), to recognize the same account without knowing who the person is.

What goes to the server, why, and for how long:

• Digest of the account code: recognizing the account. Until you delete your online data, or 12 months without playing online.
• Nickname (built from the game's word lists plus a number drawn by the server; nothing is typed), age band, flight assist level, kite and decorations (catalog codes only): showing you in the room and separating rooms by age. While the account exists. The age band is used only for the age rules.
• Hidden skill rating, rounds played and today's rewards: balanced rooms, beginners' rooms and the daily reward cap. While the account exists.
• Blocks: not putting you in the same room as people you blocked. While the account exists.
• Reports (who reported, who was reported, the reason picked from a list, the room and time) and the last 10 minutes of the room (cuts, emotes, joins and leaves, and who was nearby): moderation. Up to 6 months after the report is resolved, or longer if an authority requests it.
• Who you played with in the last 24 hours (each player's room code and account): so you can still report or block someone after leaving the room or losing the connection. Kept only in server memory, for 24 hours.
• Penalties (account, reason and period): enforcing them and allowing appeals. The penalty period plus 6 months; for bans, while they last.
• Access log (account code, IP address, date and time of joining and leaving): required by Brazil's Internet Civil Framework (Law 12,965/2014, art. 15) and used for security. Kept separately and confidentially for 7 days, and disclosed to third parties only by court order.
• IP address for abuse limits (new accounts, connections, friends' rooms and reports per address): kept only in server memory, scrambled, gone within 24 hours.
• Per-round statistics (cuts, points, active time): fighting cheating and balancing the game. 30 days; after that, only aggregated numbers with no link to an account.

Online mode never collects: name, email, phone number, address, location, device or advertising identifier, contacts, photos, voice or text written by you.

What other players see: your nickname, kite and decorations, flight assist level, points and, when enabled, the emotes and preset phrases you send. Nobody sees your age, your code or any other data. People you block are not told; reported players are not told who reported them.

The other kite flyers who fill the rooms ("neighbors", such as Tico and Dona Cida) are game characters controlled by the computer, always labeled as neighbors.

No online data goes to Google AdMob, RevenueCat or any advertising.

Cloud-saved progress (Google Play Games, Android only)

If you use Google Play Games on your phone, the game links your progress to it, so it comes back when you change phones or reinstall. If you don't use Play Games, or don't link it, you play the same way and progress stays on the device. When you are already signed in to Play Games, linking happens by itself when the game opens; otherwise only if you tap "Salvar progresso" (save progress).

• What the game receives from Google: a one-time access code, which the game's server exchanges with Google to learn your Play Games player ID (an identifier of your Play Games account for this game only). The game does not receive your name, email, photo, friends list or any other Google account data.
• What the game's server keeps: the player ID, linked to the random account code (the same as online mode); a copy of your progress (coins, kites and lines, decorations, missions, level, statistics, options, championship ladder, loose-kite hunt records and whether the tutorial was done) with the date it was saved; and a random purchases ID (see Purchases). Purpose: storing and returning your progress. Until you delete your online data, or 12 months without using the game.
• Other phones on the same account: signing in to Play Games with the same account on another phone makes that phone use the same game account. The account's penalties and reports apply on both.

Google handles your Play Games account data under its own policy: https://policies.google.com/privacy

Rewarded ads (app only)

When you tap a button to watch an ad, the app requests it from Google AdMob (Google LLC and affiliates). According to Google's documentation, to serve the ad, measure it and prevent fraud, the AdMob SDK collects: IP address (from which approximate location is derived), device and app information, ad interactions, and SDK diagnostics.

How the game handles each age band:

• under 13, or age not given: requests are tagged as child-directed, with no advertising ID, no personalization and only general-audience ads;
• 13 to 17: no personalization, tagged as under the age of consent;
• 18 and over: no personalization unless you turn it on in the Privacy screen. When on, Google may use the device's advertising ID (Android) to choose ads.

The game does not ask for iPhone App Tracking Transparency permission and does not track you across other apps or websites. Where the law requires (EEA, UK and other regions), Google shows a consent form before the first ad; you can review it in the Privacy screen.

Google's privacy policy: https://policies.google.com/privacy

Purchases (app only)

Real-money purchases are made through Google Play (Android) or the App Store (iPhone), which handle payment; the game receives no card or bank details. To validate purchases and allow "Restore purchases" on another device, the game uses RevenueCat, Inc., which receives the purchase receipt, product, date, store country, device and app information, and a random anonymous ID created for this app. With cloud-saved progress, that ID is your game account's purchases ID (also random), so purchases come back by themselves on the other phone.

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

On the web

The web version shows no ads and sells nothing. The hosting server may log IP address and access time, like any website (Hostinger). Online mode on the web works as in the app.

What the game does not use

No third-party analytics, social networks, chat, camera, microphone, contacts or GPS location. If that changes, this policy changes first.

Children and teenagers

The game is for all ages and follows Brazil's Digital Statute of Children and Adolescents (Law 15,211/2025), the ECA, Law 14,852/2024 (video game legal framework) and the LGPD: most protective settings by default (no age answer means child settings), no personalized ads or profiling for anyone under 18, no loot boxes, in-game parental controls (daily time limit, purchase lock and online switches), adult confirmation for children's purchases in addition to store controls, and only the age band is stored.

Online:

• there is no chat, voice, free text, private messaging, friends list or profile; nicknames come from the game's lists;
• in public rooms, anyone under 13 (or whose age is unknown) only meets other children;
• emotes and preset phrases are off by default for anyone under 18 until a parent turns them on; friends' rooms are off for under-13s until a parent turns them on; parents can also turn online mode off entirely;
• before their first online game, players under 18 see a short safety screen;
• players can report (with fixed reasons), block and mute in the game; reporters see the outcome;
• safety reports are reviewed within 24 hours and others within 7 days; signs of child exploitation or abuse are preserved and reported to the authorities.

Legal bases (LGPD)

• Progress, age and parental controls: stored on the device only, to run the game as configured.
• Cloud-saved progress: performance of the service of storing and returning your progress (art. 7, V), which you can turn off by deleting your online data.
• Online: performance of the service you request by going online (art. 7, V); security, anti-abuse, anti-cheat and moderation under legitimate interest (art. 7, IX), always in the best interest of children and adolescents (art. 14; ANPD Statement CD/ANPD No. 1/2023); access log as a legal obligation (art. 7, II; Internet Civil Framework, art. 15).
• Purchases: performance of the purchase contract (art. 7, V) and legal/tax obligations (art. 7, II).
• Non-personalized ads and fraud prevention: legitimate interest (art. 7, IX), always in the best interest of children and adolescents (art. 14; ANPD Statement CD/ANPD No. 1/2023).
• Personalized ads (adults only): consent (art. 7, I), which you can turn on and off in the Privacy screen.

International transfers

The online server (which also keeps cloud-saved progress) is in Brazil. Google, Apple and RevenueCat process data on servers outside Brazil, mainly in the United States, under the safeguards in their contracts (LGPD, art. 33).

Retention

On the device: until you delete the app or its data. On the online server: the periods in the Online section. At Google and RevenueCat: as described in their policies; purchase records may be kept for the period required by tax law.

Your rights

Under the LGPD (art. 18) you may request confirmation, access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdrawal of consent. Since almost everything stays on your device, deleting the app deletes it. Online data on the server is deleted with the "Apagar meus dados do online" (delete my online data) button in the Privacy screen: the server deletes the account, the Play Games link and the cloud-saved progress, and the device forgets the code (progress on the device stays); only a penalty still in force and the access log for the legal period remain. If a report about the account is under review, the data is kept until the review ends, to protect children and comply with the law (LGPD, art. 16, I; Digital ECA, art. 27), and the game asks again afterwards. Deleting does not reset today's reward cap. Because the online account has no name or email, the request must come from the device itself: by email we cannot tell whose account it is. For requests about purchases, ads or online mode, write to support@hammock.games. Parents and guardians may make requests on behalf of children and teenagers. You may also complain to Brazil's data protection authority (ANPD): https://www.gov.br/anpd

Security

Data that leaves the device is encrypted in transit (HTTPS/TLS) by the Google and RevenueCat SDKs and by the online connection. On the online server the account code is kept only as a cryptographic digest, operational logs contain no IP or code, the access log is kept separately and confidentially, and backups are encrypted.

Changes

New versions ship inside the app and at https://hammock.games/pipeiros/privacy, dated at the top. Important changes are shown in the game before they take effect.