Privacy policy

Last updated: 28 October 2026

This policy explains what data the game Capitanias Online processes, why, and your rights, under Brazil's General Data Protection Law (LGPD, Law 13,709/2018). The data controller is NardusCloud (CNPJ 54.708.521/0001-27). Contact: contato@narduscloud.com.

1. Data we process

• Account: your e-mail address and an account identifier. Your password is registered and checked by Amazon Cognito; we never have access to it.
• Game: your captaincy (buildings, resources, progress, villagers and notables generated by the game) and achievements. Part of this is also saved on your device.
• Conversations with characters: what you type or say to the villagers, Dom Álvaro and the Indigenous characters, and the generated replies.
• Voice: when you use the 🎤 button, speech recognition is performed by your device's system service (Google on Android, Apple on iPhone), which may process the audio under those providers' policies. The game only receives the transcribed text and does not record your audio.
• Mission 2 (Salvador) purchase: a one-time purchase; payment is handled by Google Play or the App Store and we never receive your card details. RevenueCat tells the game whether you made the purchase, using your account identifier and the purchase receipt.
• Ads: in Mission 1 (Olinda), players who have not bought Salvador see a full-screen ad every 15 minutes of play. The ads come from Google AdMob, which uses the device's advertising ID, the IP address and technical data about the device and the ad interaction to show and measure the ad and prevent fraud. We do not send AdMob your e-mail, your account or your game data. You can reset or turn off the advertising ID in Android settings (Google › Ads).
• Error reports: when the game fails, we send the error message, the screen where it happened, the game version, the device model and system, and the account identifier, so we can fix it.
• Technical logs: IP address and date and time of requests to the server, for security.

2. Why we use it

• To run the game and to save and sync your progress across devices.
• To generate the characters' lines, conversations and voices.
• To unlock Mission 2 for those who bought it and to apply the daily limit on conversations with the villagers.
• To show ads in Mission 1 to players who play for free.
• To fix errors, protect the service and prevent abuse.

We do not sell your data. The only ads are the Google AdMob ads described above. The legal bases are the performance of the contract (playing the game), legitimate interest (ads, security and error fixing) and, where applicable, your consent (microphone and, in the European Union and the United Kingdom, personalised ads).

3. Who we share it with

Only with the providers needed to run the game, who process data on our behalf:

• Amazon Web Services: accounts (Cognito), AI-generated character lines (Bedrock) and voices (Polly).
• OpenRouter: fallback AI provider, used when the main one does not respond.
• RevenueCat, Google and Apple: purchases and app stores.
• Google AdMob: the Mission 1 ads (how Google uses data in ads).
• The game server's hosting provider.

To generate a reply we send the AI only your message, who the character is and a summary of the town's situation; we do not send your e-mail address. Some of these providers may process data outside Brazil, with the safeguards required by the LGPD.

4. How long we keep it

• Account and game data: while the account exists. When you delete the account, we erase the server data at once; backups are removed within 30 days.
• Error reports and technical logs: up to 90 days.

5. Your rights

You may request confirmation of and access to your data, correction, portability, deletion and information about sharing, and you may withdraw consent. You can delete your account inside the game (see how). For other requests, write to contato@narduscloud.com. You may also contact Brazil's data protection authority (ANPD).

6. Children and teenagers

The game deals with sensitive historical themes (slavery, violence and conflict) for educational purposes and is recommended for ages 12 and up. It is not directed at children under 13. Minors should play with guidance from a parent or guardian.

7. Security

Communication between the game and the server is encrypted (HTTPS). Access to the data is restricted to the people who operate the service.

8. Changes

If this policy changes, we will update the date at the top and notify you in the game when the change is significant.