This policy explains what data Boardrift uses, why, and how you control each item. We follow Brazil’s General Data Protection Law (LGPD, Law 13,709/2018) and the Digital Statute of Children and Adolescents (Law 15,211/2025).
1. Who is responsible
MAFFRA ENTERTAINMENT LTDA (CNPJ 69.676.776/0001-22), headquartered in Goiânia, Goiás, Brazil, is the data controller. The data protection officer (DPO) is José Borges Guimarães Maffra, reachable at [email protected].
2. What data we use
Boardrift is online and requires an account. We process:
- Account: email, password (stored only as a cryptographic hash; we cannot see it), account identifier, the age range you provided, and the date and version of the Terms and of this Policy you accepted.
- Profile and progress: nickname, level, XP, coins, gems, carrots, items, pets, records, missions, ranking, leagues and seasons.
- Purchases: product, date, store and purchase receipt (never card details) and the coin and gem history.
- Session and device: session access tokens, game version and the technical device data needed for the game to work.
- Security: records of each run sent to the server (distance, time, coins, tricks), runs flagged as suspicious for review, and the IP address, used to limit attempts and block abuse.
- Chat: the preset phrases sent, reactions, reports, blocks and moderation actions. Since the chat only has preset phrases, it does not receive text written by the player.
We do not ask for your name, phone number, address, photos or location, and we do not sell anyone’s data.
3. What we use it for
- To create and maintain the account and save progress on the server.
- To process and restore purchases and keep the coin and gem history.
- To keep the game fair: check runs, detect cheating and review suspicious accounts.
- To protect the service against abuse and attacks (attempt limits per IP).
- To moderate the chat, the ranking and nicknames.
- To handle support and privacy requests.
4. Legal bases
Performance of the contract with you (account, progress, purchases, ranking), legitimate interest (security, fraud prevention and moderation) and compliance with legal obligations (LGPD, arts. 7 and 14). When the law requires consent, it will be requested beforehand, and you can withdraw it at any time.
5. Who we share it with
| Service | Purpose |
|---|---|
| Supabase (servers in São Paulo, Brazil) | account, database, progress, purchases, ranking and chat |
| Cloudflare | boardrift.com.br website, game download and protection against attacks |
| Apple / Google | processing purchases in the mobile versions, when available |
These providers process data only to deliver the service, under contractual safeguards. When data is processed outside Brazil, the transfer follows art. 33 of the LGPD.
6. Children and teenagers
Boardrift is rated 10+. The age range provided on the account is used to apply protections: players under 16 do not announce achievements in the chat, and no player receives personalized advertising. Everyone’s chat uses only preset phrases, with no private messages. Purchases by minors depend on the authorization of their guardians, who can also request access to or deletion of the data through the contact email.
7. How long we keep it
We keep the data for as long as the account exists. When you delete the account, we erase the account, progress, wallet, pets, runs and chat history. What may remain, not linked to you, is the technical purchase receipt for the period required by law, and moderation and security records for as long as needed to protect the community. IP attempt-limit records are erased within a few days.
8. Security
Connections are encrypted (HTTPS), each player can only read their own data on the server, balances are only changed by the server and passwords are not stored in plain text. If an incident occurs that may cause relevant risk, we will notify those affected and the ANPD.
9. Your rights
- Access and download your data: at boardrift.com.br/conta → Account and privacy → Download my data.
- Delete the account: in the game (Settings → Account → Delete account) or at boardrift.com.br/conta. Deletion is immediate.
- Correct your nickname and password at any time.
- Request confirmation of processing, correction, portability, anonymization, blocking, information about sharing and withdrawal of consent (LGPD, art. 18) through [email protected]. We reply within 15 days.
- File a complaint with Brazil’s National Data Protection Authority (ANPD), at gov.br/anpd.
10. Cookies on the website
The boardrift.com.br website only uses essential storage (the account session and your choices). Visit statistics stay off unless you allow them in the cookie notice.
11. Changes to this policy
Important changes will be announced in the game and on the website before they take effect, and the game will ask for a new acceptance.
Contact
Questions, requests about your data or reports: