PRIVACY POLICY

When you register to play: your name and team name.

When you finish a game: either your Classic lineup, trivia score, simulated record and grade, or your Practice score, makes, misses, streak and NBA comparison, linked to your registration.

When you use the contact page: your name, email address and message.

For abuse prevention, a keyed HMAC pseudonym derived from your IP address is kept for up to 24 hours to enforce rate limits. The server-only key and raw address are not stored in the game database.

Vercel Web Analytics records cookieless, aggregated page and device information, including a redacted page path, referrer, country or region, browser and device type. Our game events contain only mode, score or grade, sharing method and outcome, with no name, run identifier or answers.

During a game, the server keeps an expiring authoritative game session for up to 30 minutes in Classic or 10 minutes in Practice. It contains your player name, game progress and a pseudonymous game capability.

In your browser, session storage holds your name, team, signed registration capability and completed result until the tab is closed. Local storage keeps only your Practice personal best until you clear site data. A functional cookie remembers your language.

We collect no payment data or precise location, and we run no advertising trackers.

To run the event leaderboard and show your name and result on it.

To answer messages you send us through the contact page.

To keep the game fair and working (basic operation and integrity).

We process the limited, non-sensitive data needed to operate the game and public leaderboard, prevent abuse and respond to messages based on our legitimate interest (LGPD art. 7, IX), after considering necessity, reasonable expectations and safeguards.

The required registration checkbox records that you saw this notice. It is an acknowledgement, not the legal basis for processing, and you may exercise the rights below at any time.

The app is hosted by Vercel and stores game data with Supabase. These providers may process data outside Brazil under the applicable international-transfer safeguards in the LGPD (arts. 33-36).

Access to the database is restricted to the game's server - there is no public access to your data.

Registration and game data are kept for the duration of the event or season and up to 12 months afterwards, after which they are deleted or anonymized.

Contact messages are kept until your request is resolved and for no longer than 12 months.

The leaderboard publicly shows your player name, team name and score summary. A detailed Classic lineup or Practice recap becomes public only after you select Share; anyone with that independent link can view it.

We never sell your data. It is shared only with Vercel and Supabase as needed to host, measure, secure and operate the game.

Under LGPD art. 18 you may, at any time: confirm that we process your data, access it, correct it, request its anonymization or deletion, request portability, and object when the legal requirements for processing are not met.

To request deletion or exercise any of these rights, send us a message through the contact page - we'll respond as quickly as we can.

We use one functional language cookie, temporary session storage for gameplay, and local storage for your Practice personal best. We use no advertising cookies.

If an event includes children or teenagers, the organizer must approve participation and apply an appropriate legal basis and safeguards. Their best interests always take priority, and a parent or legal guardian must provide any consent required for a child.

We may update this policy from time to time. The date at the top always reflects the latest version.