Privacy Policy

1. Who we are and what this covers

Batata is a social gaming platform, on the web at batata.world and as an app for phones. This policy explains what personal data Batata collects when you use it, why, who sees it, how long we keep it and what you can do about it. It applies to the website, the app and the games inside them. Batata is for players aged 13 and over.

We keep this short and honest. If a sentence here is unclear, write to hello@batata.world and we will explain it.

2. What we collect

• Account data: your email address or phone number, your handle and display name, your birthday (to check your age), your country, your profile picture if you add one, your language, and the record of the terms you agreed to and when.
• Sign-in through Google or Apple: the address and name the provider gives us when you choose to sign in that way. We do not get your password.
• Play data: which games you play, your scores and bests, your likes, saves, follows, challenges and the category preferences you pick. This is what ranks your feed and fills the leaderboards.
• What you write and send: comments, chat messages, voice notes, photos, videos and GIFs you send, and your reports about other content. Messages are stored so your conversations work on every device; we do not scan private messages for advertising or ranking. A report brings a specific message to a person on our team.
• Usage events: which games you viewed and played and for how long, what you liked or saved, which screen was open when something went wrong, the country and city the network resolved and the kind of device and app version, used to rank your feed and fix what breaks. No message content and no precise location. Where the law asks for it, nothing is recorded until you say yes.
• Technical data: the network address of your requests, your device model and operating system, the browser or app version, and the language your device reports.
• Security records: sign-in attempts and codes with the network address, kept to spot abuse.
• Closed tests: if you are invited to test a game, the feedback and survey answers you give.
• Support: what you write to us and our replies.

3. Why we use it

• To run Batata: sign you in, keep your scores, show your profile, deliver your messages, rank your feed and run leaderboards and challenges.
• To keep people safe: review reports, enforce the Community Guidelines, stop cheating, detect abuse and protect accounts.
• To understand and improve the platform: which games work, where players get stuck, what breaks. Usage analytics are on only with your consent where the law requires it, and can be switched off anywhere in the Privacy centre in Settings.
• To talk to you: sign-in codes, notifications about your chats and challenges in the language of your account, and service messages. Marketing email only if you separately opted in, and you can opt out at any time.
• To meet our legal obligations and to establish, exercise or defend legal claims.

4. The legal grounds

Where data protection law asks for a legal basis, ours are: performing our agreement with you (running the service you signed up for); our legitimate interests in keeping Batata safe, secure and working, balanced against your rights; your consent, where we ask for it (usage analytics in some regions, marketing email, notifications on your phone), which you can withdraw at any time; and our legal obligations.

5. Who can see what

• Your profile (display name, handle, picture, games played, scores, rank, followers and following) is visible to other players, and to visitors of the website. Setting your account to private limits it to players you accept.
• Your scores appear on leaderboards with your handle.
• Your comments are visible to everyone who sees the game.
• Your messages, voice notes, photos and videos are visible only to the people in that chat.
• A player you block cannot message you, follow you or see your comments; you do not see theirs.

6. Who we share it with

We do not sell your personal data and we show no advertising. We share data only with the services that help us run Batata, each bound to use it only for that:

• the cloud providers that host our servers, database and media;
• the email service that delivers your sign-in codes and service messages;
• Apple and Google, to deliver push notifications to your phone and, if you choose them, to sign you in;
• GIPHY, when you search for a GIF in a chat: your search words go to GIPHY to find the GIF;
• authorities and others, when the law requires it or to protect the safety of a person;
• a company that takes over Batata, in which case this policy still applies and we tell you.

7. Games and your data

Every game on Batata is made by Batata, and every game runs in an isolated sandbox that cannot read your account, your cookies, your messages or anything on your device. A game is told only the language and layout direction of the platform, and it keeps its own progress in a small save that belongs to your account. Scores go from the game to our servers, where they are checked.

8. Cookies and storage on your device

Batata sets one cookie, the one that keeps you signed in, and a second one if you choose a language for a device. There is no advertising cookie, no analytics cookie and no script from another company. The website and the app keep a small local store of your own settings on your device. The Cookie Policy lists exactly what is stored and how to control it.

9. How long we keep it

• Your account and what you made (profile, messages, comments, scores, saves): while the account exists, then thirty days.
• Usage events tied to your account: until the account is deleted, when they are cut loose from any identity and kept only as counts. Events from visitors without an account carry a random identifier that is never linked to a person.
• Security records (sign-in attempts with the network address): twelve months.
• Consent records: as long as the account exists, so we can show what you agreed to and when.
• Moderation records for content that was reported: as long as needed to act on repeat abuse.
• Support correspondence: as long as needed to resolve the matter and to show what was agreed.

10. Your rights and choices

• See and download a copy of your data from the Privacy centre in Settings.
• Correct your profile, your language and your preferences in Settings at any time.
• Delete your account from Settings on the website or in the app; Delete your account says what happens. Deletion takes effect at once and your data is erased after thirty days unless you sign in again in that time.
• Switch usage analytics on or off in the Privacy centre, and opt out of marketing email with the link in any such email.
• Where the law gives you the right, ask us to correct, restrict or hand over your data, object to a use based on our legitimate interests, or withdraw a consent. Write to hello@batata.world; we answer within a month. If you are not satisfied you can complain to the data protection authority where you live.

11. Children

Batata is not for children under 13, and we do not knowingly collect data from them. Where the law where you live sets a higher age for consenting to a service like this, that age applies. If you believe a child under the minimum age has an account, write to hello@batata.world and we will remove it.

12. Security

Your session is an opaque token stored only in hashed form on our servers. Sign-in codes expire quickly. Media in chats is served only to the members of the chat. Access to production data is limited to the people who need it to run the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities as the law requires.

13. Where your data lives

Our servers and the services in section 6 may be located in a country other than yours, including the United States. Where the law requires safeguards for such a transfer, we rely on the provider's standard contractual clauses or an equivalent mechanism.

14. Changes to this policy

We update this policy when what we collect or how we use it changes. Each version carries a date. For a change that matters to you we give notice in the app or by email, and the next time you sign in we ask you to accept the new version.

15. Contact

Questions, requests and complaints about your data go to hello@batata.world.