Privacy Policy

Last updated: October 21, 2026

This policy explains what personal data GamerFlix collects, why, for how long, and what your rights are, under Brazil's General Data Protection Law (Lei 13.709/2018, LGPD).

This is a translation of the Portuguese policy, which prevails if the two differ.

1. Who the controller is

The controller of your data is MONK GAMES TECNOLOGIA LTDA, CNPJ 69.882.142/0001-26. For anything about privacy, write to privacidade@gamerflix.com.br.

2. What data we collect

• Waitlist: your email, the game you're interested in, and the date and time you gave and confirmed your consent. If you came from one of our ads, we also keep which campaign, which comes in the ad's own link (no cookies), so we know which ads work.
• Visits from ads: we count, per day, how many visits, demos, demo answers, accounts created and confirmed, first drills and signups came from each ad and from what kind of browser (the Instagram app, the Facebook app, a phone or a computer). These are only totals: none of it identifies you, and we use no cookies for it.
• Account: email, password (we keep only an encrypted version, never the password itself), date of birth, nickname (optional), whether you agreed to receive news, and when you accepted this policy. If you created the account from one of our ads, we also keep which campaign, which comes in the ad's own link (no cookies), so we know which ads work.
• Steam or Google login, if you choose it: from Steam we receive your SteamID and your profile's public name and picture; from Google, your name, email and picture. We never receive your password for those services.
• Premium subscription, if you subscribe: the plan, the subscription's status, until when it's valid and the payment identifiers at Asaas. The payer's name and CPF and the payment details (card, Pix or boleto) go straight to Asaas: we don't keep the CPF or the card details.
• Training: every answer you give to a drill, the score, how long you took to answer, and the rating and season points calculated from them.
• Players under 18: the guardian's email and the date they authorized the account.
• Two-step verification, if you turn it on: your authenticator app's key and the recovery codes.
• Technical logs: the IP address, date, time and browser of each access, kept for a few days by our server and by Amazon Web Services, for security and abuse prevention.

We only use cookies the site needs to work (keeping you logged in and protecting forms). We use no advertising or tracking cookies.

3. What we use it for, and the legal basis

• Telling you about GamerFlix's launch and important news: based on your consent (art. 7, I), which you confirm through the link we email you.
• Creating and keeping your account, login and password recovery: to provide the service you asked for (art. 7, V).
• Date of birth and the guardian's authorization: to comply with the law on children and teenagers (ECA Digital, Lei 15.211/2025, and art. 14 of the LGPD) (art. 7, II).
• GamerFlix news and a birthday message: only if you tick that you want them, and never for players under 18 (art. 7, I). Untick it whenever you want, on your account page.
• Treino's rating, rank and season: calculated for every player with an account, to provide the service (art. 7, V).
• Appearing on the leaderboard by your nickname: only if you choose to, and never for players under 18 (consent, art. 7, I). Account holders see your nickname, rating, rank and season points; your name, email and answers never appear. Players who don't appear are shown as "Hidden player". Change this whenever you want, on the leaderboard or your account page; we may change or hide an offensive nickname.
• Charging and keeping a Premium subscription: to perform the contract (art. 7, V); payment records are kept for the period tax law requires (art. 7, II).
• Site security and abuse prevention: based on legitimate interest (art. 7, IX).

We don't sell your data and don't use it for advertising.

4. Who we share it with

We use Amazon Web Services to host the site and send emails, as a data processor. The servers are in São Paulo, Brazil; backups are in the United States. This international transfer follows AWS's contractual safeguards (art. 33 of the LGPD).

Some game images load directly from Valve's servers (Steam). To show them, your browser connects to those servers, which receive your IP address and browser details, as with any visit to a website. We send Valve none of your data.

If you subscribe to Premium, Asaas, our payment processor, issues and collects the charge. It receives the payer's name and CPF, the account's email (or the guardian's, for an account of someone under 18) and the payment details, and also processes them to meet its own legal obligations as a payment institution.

If you log in with Steam or Google, those services confirm your identity to us. What they do with your data follows their own privacy policies.

5. How long we keep it

• Unconfirmed signups are deleted automatically after 30 days.
• Confirmed signups are kept until you leave the list or we close the waitlist.
• Account data is kept while the account exists. When you delete the account we erase everything at once, except the payment records (below); backups roll over and are gone within 35 days.
• Subscription and payment records are kept for five years, as tax law requires, even after the account is deleted, with no link to it.
• If the guardian doesn't authorize a minor's account, it's deleted at once.
• Technical logs are deleted within a few days.

6. Your rights

You can ask at any time for: confirmation of and access to your data, correction, deletion, portability, information about who we share it with, and to withdraw your consent (art. 18 of the LGPD).

Every waitlist email has a link to leave the list, which deletes your data at once. On your account page you correct your data, stop receiving news and delete the account yourself, at once. For anything else, write to privacidade@gamerflix.com.br; we reply within 15 days. You can also complain to Brazil's National Data Protection Authority (ANPD).

7. Children and teenagers

• You must be at least 13 to create an account.
• From 13 to 17, the account can only train after the guardian authorizes it, through the link we send to their email. If they don't authorize it, the account is deleted with all its data.
• Players under 18 receive no news or marketing emails, and never appear by name on the leaderboard.
• The waitlist is for people 18 or older, or with their legal guardian's authorization.

If you're the guardian of a minor and want their data deleted, write to privacidade@gamerflix.com.br.

8. Security

The site uses an encrypted connection (HTTPS), access to the data is restricted, the admin panel requires two-step verification, and backups are encrypted.

9. Changes to this policy

If this policy changes, we update the date at the top of this page. Important changes are announced by email to account holders and people on the list.