Brainrot Mayhem Privacy Policy
This policy explains what data the Android game Brainrot Mayhem (package
br.com.whalecoderz.brainrotmayhem) handles, why, who it is shared with and how
you can exercise your rights. It follows Brazil's General Data Protection Law (LGPD, Law
13,709/2018), the EU General Data Protection Regulation (GDPR), the US Children's Online
Privacy Protection Act (COPPA) and Google Play's policies. If this English version and the
Portuguese version differ, the Portuguese version prevails.
1. Who is responsible
The data controller is Gustavo G. Fucilini, the developer who publishes the game as WhaleCoderz, based in Brazil. For any privacy matter, including the requests in section 8, write to whalecoderz@gmail.com. This address is the contact channel for data subjects and serves as the data protection officer contact (LGPD art. 41).
2. Data that stays on your device
The game profile is saved in a file in the app's internal storage and is not sent to us. It contains a nickname generated by the game (for example, "Cozinheiro 1234"), coins and Cannoli (in-game currencies with no cash value), characters, upgrades, achievements, missions, records and settings (music and sound volume, controls, screen shake, damage numbers). Uninstalling the game deletes this file.
If Android Backup is turned on on your device, Android may copy this file to your Google Account under Google's terms. You control this in Settings > Google > Backup.
3. Data handled by third-party services
All services below are provided by Google. They receive data directly from the device and also handle it under the Google Privacy Policy and How Google uses information from sites or apps that use its services.
3.1 Google Firebase Crashlytics (crash reports)
When the game crashes, it sends a report with: the error stack trace and message, device model and manufacturer, Android version, game version, memory and disk space, screen orientation, whether the device is rooted, a Crashlytics installation identifier, the Firebase installation identifier and the game context at that moment (open screen, map and minute of the run). We use this only to find and fix bugs.
3.2 Google Analytics for Firebase (usage statistics)
The game logs gameplay events: run start and end, map, character and modes chosen, result, duration, level, kills, coins, Cannoli earned and spent, upgrades bought with in-game coins, build items, fusions, second chances, achievements, Macchinetta use, rewarded ads watched and performance (frames per second and hitches). Analytics also collects on its own: an app instance identifier, device model, Android and game version, language, approximate country and region (derived from the IP address, which Analytics masks), first open date, sessions, screen views and engagement time. We use this to balance difficulty, improve performance and learn whether players enjoy the game. We do not use this data to identify you.
3.3 Google AdMob and Google User Messaging Platform (ads)
The game only shows rewarded ads, and only when you tap a button to watch one (for example, to get a second chance). There are no banners and no ads that appear on their own. AdMob collects: the Android advertising ID, the app set ID and, where applicable, identifiers related to accounts signed in on the device; the IP address, which gives a rough idea of the region; interactions (game launch, taps, video views) and performance data (launch time, hangs, energy use). Google uses this data to serve and measure ads, for statistics and to prevent fraud, and may use it for personalized ads where the law allows.
- In the European Economic Area, the United Kingdom and Switzerland, the game asks for your consent first through Google's User Messaging Platform (UMP). You can change your choice at any time in SETTINGS > Privacy inside the game.
- In any country, you can delete or reset your advertising ID in Android Settings > Privacy > Ads. Without it, ads are no longer personalized.
3.4 Google Play Games Services (cloud save)
If you sign in to Play Games, the game stores a copy of your profile (section 2) in Google Play Saved Games, so you can restore your progress on a new phone or play on more than one device. The game may receive your Play Games player ID and player name from Google: they stay on the device, and the game does not send them to us or to third parties. The game does not receive your email address. Play Games itself collects usage and diagnostics data to improve the service, under Google's policy. You can play without signing in, and you can delete the game's saved data in the Play Games app settings or in your Google Account.
3.5 Purchases
The game currently sells nothing. If in-app purchases are added, they will be processed by Google Play: we never receive card or payment details, and this policy will be updated first.
4. Purposes and legal bases
| Purpose | Data | Legal basis (LGPD / GDPR) |
|---|---|---|
| Run the game and keep your progress | On-device profile; Play Games, if you sign in | Performance of the service you asked for (art. 7, V / art. 6(1)(b)) |
| Fix crashes and hitches | Crashlytics | Legitimate interest (art. 7, IX / art. 6(1)(f)) |
| Statistics to balance and improve the game | Analytics | Legitimate interest; in the EEA, UK and Switzerland, consent (art. 6(1)(a)) |
| Rewarded ads and ad fraud prevention | AdMob | Legitimate interest for non-personalized ads; consent where the law requires it, and for personalized ads in the EEA, UK and Switzerland |
We do not sell or rent personal data, do not combine it with other sources to identify you and do not make automated decisions that produce legal effects about you.
5. Children and teenagers
Brainrot Mayhem is intended for people aged 13 and over and is not directed to children. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe a child used the game and had data collected, write to whalecoderz@gmail.com: we will delete what is within our reach and ask the services in section 3 to delete it.
For teenagers, we handle data in their best interest (LGPD art. 14): the game has no chat, shows no player's data to other players, asks for no contact details and sends no notifications. We recommend that players under 18 use the game with guidance from a parent or guardian.
6. International transfers
Google services may process data on servers outside Brazil, including in the United States. These transfers rely on the safeguards Google adopts, such as standard contractual clauses (LGPD art. 33 and GDPR art. 46).
7. How long we keep data
- On-device profile: until you uninstall the game or clear the app's data.
- Crashlytics crash reports: 90 days, then deletion starts.
- Analytics data tied to the device identifier: 14 months, then deleted automatically. Aggregated reports, which identify no one, remain.
- AdMob data: for the periods Google sets in its own policy.
- Play Games saved games: until you delete them or delete your Google Account.
8. Your rights
You have the right to confirm whether we process your data, access it, correct it, ask for anonymization, blocking or deletion, portability, information about sharing, withdraw consent and object to processing (LGPD art. 18; GDPR arts. 15 to 21). To do so:
- Delete the on-device profile: uninstall the game or clear the app's data in Android.
- Ads: in the EEA, the UK and Switzerland, SETTINGS > Privacy in the game; in any country, the advertising ID in Android.
- Play Games: delete the game's data in the Play Games app or your Google Account.
- Any other request: write to whalecoderz@gmail.com. We reply within 15 days. Since there are no accounts, we may ask for details that help us find the data (for example, the device model and roughly when you played).
You can also complain to Brazil's National Data Protection Authority (ANPD) or to the data protection authority in your country.
9. Security
Data sent to Google services travels encrypted (HTTPS). The profile is stored in the app's private storage, which other apps cannot read. No system is completely secure, but we limit what we collect to what the purposes above need.
10. Changes to this policy
If we change this policy, we will publish the new version on this page with its update date. If the change is significant (for example, a new type of data or a new service), we will also announce it inside the game.
11. Contact
Gustavo G. Fucilini (WhaleCoderz) — whalecoderz@gmail.com