Privacy policy
This policy explains what data the game Tefra (Android and iOS) and the website tefra.criarflix.com.br process, why, who it is shared with, how long it is kept and how you can exercise your rights. It describes the game as it works today. When a new feature changes how data is processed (for example, Google or Apple sign-in, purchases or chat), this page will be updated beforehand.
1. Who is responsible
CRIARFLIX develops and operates Tefra and is the controller of the data processed in the game and on this website. For any question or request about your data, write to ricardo@criarflix.com.br.
2. What data we process
| Data | Source | Example |
|---|---|---|
| Guest account | Created automatically the first time the game opens | A random account identifier and session key, stored on your device and on the server. We do not ask for your name, email, phone number or ID. |
| Game data | What you do in the game | Villages, buildings, resources, troops, marches, battle reports, hero (commander name, appearance, level, equipment), region and map position, in-game coins and orders sent. |
| Public names | You choose them | Your commander name and village names are shown to other players on the map and in reports. Do not use your full name or personal details in these fields. |
| Technical data | Device and connection | IP address, date and time of requests, app version, operating system and server error logs. |
| Advertising data | Ad SDK (only if you watch ads) | Device advertising identifier, model, operating system, language, IP and interactions with the ad. See section 3. |
| Local preferences | Game settings | Volume, graphics quality and the last village you opened, stored only on your device. |
| Contact | When you write to us | Your email address and whatever you send in your message. |
The game does not access your contacts, photos, camera, microphone or precise location. The website uses no cookies of its own, no analytics and no forms; it only keeps your language choice in your browser's local storage.
3. Ads
Tefra only shows rewarded ads: videos you choose to watch to shorten a construction, adventure, forging or hero recovery. No ad appears unless you tap the button.
Ads are served through the Unity LevelPlay mediation platform (Unity Technologies), which runs an auction among partner ad networks such as Unity Ads. The list of networks may change over time. These companies receive the advertising data listed above to choose and display the ad, measure it, prevent fraud and, where allowed, personalise advertising. They also act as controllers under their own policies.
You can reset or limit your advertising identifier in your device settings: on Android under Settings › Privacy › Ads; on iPhone the game asks for your permission (App Tracking Transparency) before using the identifier, and you can change it under Settings › Privacy & Security › Tracking. Declining does not stop you from playing or watching ads; they are simply less personalised.
4. Why we use data and on what basis
- Running the game: saving your progress, resolving buildings, marches and battles, showing the map and reports (performance of the service you requested).
- Security and anti-cheating: limiting abuse, investigating errors and protecting accounts and the server (legitimate interest).
- Rewarded ads: showing the ad you asked for, granting the bonus and preventing fraud (performance of the service and legitimate interest; personalisation according to your device choice and any consent required by law).
- Support: answering your messages and privacy requests.
- Legal obligations: complying with the law and orders from authorities.
We do not sell personal data and we do not use it for purposes other than those described here.
5. Who we share data with
- Oracle Cloud: hosts the game server and this website.
- Unity Technologies (LevelPlay) and partner ad networks: only when you watch an ad, as described in section 3.
- Google and Apple: distribute the game through their stores and process your store account data under their own policies. When in-game purchases exist, payment will be handled by the store; we only receive the purchase confirmation.
- Other players: see your commander name, the names and positions of your villages and the results of battles involving them.
- Authorities: when required by law or a valid order.
External service policies: Unity · Google · Apple · Oracle.
6. How long we keep data
- Account and progress: for as long as the account exists. The world is persistent, so your village is kept even if you stop playing for a while, until you ask for deletion.
- Battle reports: deleted automatically after 30 days. Finished marches: after 7 days. Log of orders sent (used to avoid applying the same order twice): after 30 days.
- Server and website technical logs: kept as long as needed for diagnostics and security; there is currently no fixed automatic deletion period, and they are removed during maintenance.
- Support messages: for the duration of the request and as required by law.
- Data on your device: kept until you uninstall the game or clear the app's data.
To delete your account and progress, see Delete account and data.
7. Your rights
Under Brazil's General Data Protection Law (LGPD) and, where applicable, other privacy laws such as the GDPR, you may request: confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about who we share it with, withdrawal of consent and objection to processing. Write to ricardo@criarflix.com.br; we may ask for information to confirm the account is yours. You may also complain to Brazil's data protection authority (ANPD) or to the authority in your country.
8. Children
Tefra is not directed at children under 13 and does not knowingly collect data from children. Teenagers should play with their parents' or guardians' guidance and within the store's age rating. If you are a parent or guardian and believe a child has sent us data, contact us so we can delete it.
9. Security and international transfers
Communication between the game and the server is encrypted (HTTPS). Access to the infrastructure is restricted, database passwords are kept outside the code and every request to the server is authenticated by the account session. No system is entirely immune to failures; if an incident affects you, we will notify you as required by law.
The providers listed may process data outside Brazil. In those cases, transfers follow the mechanisms provided for in the LGPD.
10. Changes and contact
When this policy changes, the date at the top will be updated and, if the change is significant, we will let you know in the game. Questions: ricardo@criarflix.com.br.