Who we are
viagem is a free cooperative game that runs in the browser, at viagem.cyou, made by an independent developer. This page explains what data the game uses, why, and what you can do about it, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, for players in Europe, the General Data Protection Regulation (GDPR).
What we do not ask for
The game has no sign-up. We do not ask for an e-mail address, password, phone number, ID document or payment details, and we do not sell anyone's data.
What stays on your device
To remember your choices, the game stores in the browser's local storage (localStorage), under keys starting with viagem::
- the character, the colour and the adventure name you chose;
- the sound, music and vibration settings, the camera zoom, the power-saving mode and the number of bots in solo play;
- the tips you have already seen and whether you agree to appear in the match's “embarrassing moments”;
- if you were removed from a room, a temporary note that keeps you from going back to it until the time runs out.
While the tab is open, the game also uses sessionStorage (cleared when the tab closes) to keep your seat in the room if the connection drops or the page reloads during an update.
This data stays on your device and is not sent to us. You can delete it whenever you want by clearing the site's data in your browser settings. The game also caches images and sounds (service worker) so it loads faster; this cache contains no data about you.
What goes through the room server
When you join a match, your adventure name, your character and your in-game actions go to the room server (hosted on Cloudflare) and are shown to the other players in the same room. Only while the room exists, the server keeps each player's name and character, an encrypted access code (so you can get back to your seat) and the match progress. Each room is deleted entirely within about 50 minutes of being created; we keep no history of your matches and no accounts.
To prevent abuse, the IP address is used on the spot to limit how many rooms can be created per minute; the game does not store it. The server's technical connection logs (when a connection opens and closes, latency, amount of data) contain no name or IP.
Hosting and technical logs
The site is hosted on GitHub Pages and the room server on Cloudflare. Like any website, these services receive technical connection data (IP address, browser, date and time) to deliver the pages and protect themselves from abuse, under the privacy policies of GitHub and Cloudflare.
Google cookies and ads
The game is funded by ads from Google AdSense (H5 Games Ads), which appear only between matches, never during play. For this:
- Google and its partners use cookies and similar identifiers to show ads, limit how many times you see the same ad, measure results and prevent fraud.
- Google may show personalised ads based on your visits to this and other websites. See how Google uses information from sites that use its services.
- You can turn off personalised ads in Google's Ad Settings, or those of other companies at aboutads.info. Ads keep appearing, but without personalisation.
- Visitors from the European Union, the European Economic Area, the United Kingdom or Switzerland see a consent message from Google (a certified consent management platform) before any ad cookie. To change your choice later, use the privacy and cookies link that this message leaves on the page, or clear the site's cookies in your browser to see the message again.
We block gambling, casino and other sensitive ad categories. If you use an ad blocker, the game works normally.
Why we use this data
We use the game data to make the match work (performance of the service you asked for). Ads rely on our legitimate interest in keeping the game free and, where the law requires it (as in Europe, under the GDPR, and for personalised-ad cookies), on your consent, which you can withdraw at any time.
Children and teenagers
The game is a cartoon and asks for no personal data. It is not directed at children under 13 and we do not knowingly collect children's data; if a parent or guardian believes a child has sent us data, contact us and we will delete it. We block inappropriate ad categories.
Your rights
Under the LGPD (and, in Europe, the GDPR) you can ask for confirmation that we process your data, access, correction, anonymisation or deletion, portability, information about whom we share it with, objection and withdrawal of consent. Since almost everything stays on your own device, in most cases clearing the site's data in your browser is enough; a room's data disappears on its own when the room is deleted. For any other request, including deletion, use the contact below. You can also complain to Brazil's National Data Protection Authority (ANPD) or to the data protection authority of your country.
Contact
Questions or requests about privacy: write to contact@cabraiz.com or open a conversation at github.com/Cabraiz/viagem/issues.
Changes
If this policy changes, the date at the top of the page changes with it.