Privacy Policy
Last updated: April 2026
1. Data Collected
Mini Game Factory does not set any first-party cookies for regular visitors. Language preference is stored in the browser's localStorage — not in cookies. For traffic analysis, we use Vercel Analytics, which also does not use cookies and does not collect personally identifiable data. During gameplay, we record the game identifier, session duration, score, and whether the session was completed — no personal data is collected in this process. The game request form collects the suggested game name, description, and browser language — without any personally identifiable data. IP addresses are temporarily processed in memory for rate limiting purposes and are never stored. The only exception is cookies set by Stripe when processing donations: when you initiate a payment, the Stripe SDK automatically sets two fraud-prevention cookies — a machine identifier (valid for 1 year) and a session identifier (valid for 30 minutes). These cookies are set by Stripe, not by Mini Game Factory, and are used solely to ensure transaction security.
2. Donations & Payments
Payment data is processed entirely by Stripe (Stripe, Inc., USA). Mini Game Factory does not store card or banking information. Donation data (amount, payment method, and optional donor message) is recorded solely for internal financial control and compliance with legal obligations.
3. Game Requests
The game request form may contain an optional message. This information is stored in a secure database and used exclusively to prioritize new game development. No personally identifiable information is required.
4. Legal Basis for Processing
Data processing by Mini Game Factory is based on the following legal grounds under the LGPD (Brazilian Data Protection Law — Lei nº 13.709/2018): (a) Consent — Stripe payment cookies, when accepted by the user; (b) Legitimate interest — aggregated traffic analysis via Vercel Analytics; (c) Contract performance — donation records and payment processing; (d) Legal obligation — retention of financial records.
5. Retention Periods
Language preference (localStorage): retained until the user clears browser storage. Game requests: up to 2 years after receipt or until a deletion request is made. Donation records: 5 years, as required by Brazilian tax law (Lei nº 9.532/1997). Stripe-processed data: per Stripe's retention policy (generally 7 years for financial records).
6. International Transfers
Mini Game Factory uses infrastructure services based in the United States: Vercel, Inc. (hosting and analytics) and Stripe, Inc. (payment processing). These transfers are carried out under standard contractual clauses and privacy policies compatible with international data protection standards.
7. Sub-Processors
The following third parties may process data on behalf of Mini Game Factory: Vercel, Inc. (hosting, CDN and analytics — minigamefactory.com); Stripe, Inc. (payment processing — stripe.com); Neon / Vercel Postgres (cloud database — neon.tech). All sub-processors operate with security measures meeting international standards.
8. Children's Data
Mini Game Factory is designed for a general audience and does not intentionally collect personal data from children under 13 without parental or guardian consent. If you believe a child's data has been inadvertently collected, please contact us so we can remove it immediately.
9. Security Incident Notification
In the event of a security incident that may affect personal data, Mini Game Factory will notify the relevant data protection authority and affected individuals within a reasonable timeframe, as required by the LGPD (Art. 48). The notification will include the nature of the affected data, the measures taken, and contact information for further inquiries.
10. Data Protection Officer (DPO)
The Data Protection Officer is responsible for receiving communications from data subjects and the data protection authority, as well as guiding the company's data protection practices. DPO contact: privacidade@minigamefactory.com.
11. Your Rights (LGPD)
Under the LGPD (Art. 18), you have the right to: (a) confirmation that your data is being processed; (b) access to your data; (c) correction of incomplete, inaccurate, or outdated data; (d) anonymization, blocking, or deletion of unnecessary data; (e) data portability; (f) deletion of data processed with your consent; (g) information about sharing with third parties; (h) withdrawal of consent; (i) objection to processing in cases of non-compliance with the LGPD.
12. How to Exercise Your Rights
To exercise any of your rights, send an email to privacidade@minigamefactory.com stating your name, the right you wish to exercise, and a brief description of your request. Since we do not collect personally identifiable data in our normal operations, we will respond confirming this or guiding you on next steps. We will respond within 15 calendar days, as required by the LGPD.
Contact: contato@minigamefactory.com | DPO: privacidade@minigamefactory.com