Draft pending the owner's legal review. This text has not yet been reviewed by a lawyer and may change before the final version. The Portuguese version prevails in case of conflict.
1. Who looks after your data
The controller of the data processed on this site (bananatd.com) is GHP SOLUTIONS LTDA, Brazilian company registration (CNPJ) 62.208.192/0001-83, Rua Medeiros, 90, Minaslândia, Belo Horizonte – MG, 31812-020, Brazil, developer of the game B.A.N.A.N.A.
Data protection contact (Brazil's LGPD, art. 41, and the GDPR): privacidade@bananatd.com. For anything else: contato@bananatd.com.
2. What we collect
This site was built to collect as little as possible. You can browse every page without telling us anything.
| Data | When | Why | Legal basis | How long |
|---|---|---|---|---|
| Email, page language, date and time of sign-up and a record of your consent | When you sign up for the memos | To tell you about the demo, closed tests and game releases | Consent (GDPR art. 6(1)(a); LGPD art. 7, I) | Until you unsubscribe or ask us to delete it. If the list is shut down, we delete it within 90 days |
| A cryptographic hash of your IP address, never the IP itself | When you submit the form | To limit repeated submissions and stop bots | Legitimate interest in security and abuse prevention (GDPR art. 6(1)(f); LGPD art. 7, IX) | 24 hours |
| Technical access logs (IP, date and time, requested page, browser) | On every visit | To deliver pages, protect the site against attacks and diagnose failures | Legitimate interest and legal obligation (GDPR art. 6(1)(c) and (f); LGPD art. 7, II and IX) | For Cloudflare's retention period, our host, and as long as the law requires |
| Statistical browsing data (pages viewed, clicks, where the visit came from, device type) | Only if you accept Analytics cookies | To understand what works on the site | Consent | Up to 14 months |
| Content of emails you send us | When you write to contato@ or privacidade@ | To answer your request | Legitimate interest or the exercise of your rights | As long as needed to help you and for the legal retention period |
We don't ask for your name, phone number, address or ID, we don't buy lists and we don't sell data.
3. Cookies and browser storage
We use cookies and your browser's local storage in three categories. You choose the optional ones in the notice shown on your first visit, and you can change your mind anytime in Cookie preferences. Nothing optional loads before you agree.
| Name | Category | Purpose | Duration |
|---|---|---|---|
lang (cookie) | Necessary | Remember the language you picked | 1 year |
bananatd-consent (local storage) | Necessary | Store your cookie choice | Until you change it; we ask again after 12 months |
snd, lid (session storage) | Necessary | Remember whether sound is on and animate page changes | Until you close the tab |
_ga, _ga_* (Google Analytics 4) | Analytics | Count visits and clicks statistically | Up to 2 years |
| None at the moment | Marketing | Measure campaigns and show ads for the game on other sites | — |
No marketing tool is installed today. If one is ever added, this list will be updated first, and it will only run with your consent in the Marketing category. Google Analytics uses consent mode: without your consent, Google's script isn't even downloaded.
4. Who we share data with
- Cloudflare, Inc.: hosts the site, the form and the memo database, and protects against attacks. It acts as our processor, following our instructions.
- Google LLC: only if you accept Analytics cookies, it receives the statistical data from Google Analytics 4.
- Authorities: when there is a court order or a legal obligation.
When we start sending the memos by email, the sending service we choose will be listed here before the first email goes out.
5. International transfers
Cloudflare and Google process data on servers outside Brazil and the European Economic Area, including in the United States. These transfers rely on the standard contractual clauses approved by Brazil's ANPD (LGPD art. 33, II, and ANPD Resolution No. 19/2024) and, for people in the European Economic Area, on the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework, in which both companies participate.
6. Your rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access, rectify and erase your data, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time.
Under Brazil's LGPD (art. 18), you may also ask for confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about who we share it with; information about the option not to consent and its consequences; withdrawal of consent; and review of automated decisions (we make none).
7. How to exercise your rights
Write to privacidade@bananatd.com from the email you signed up with and tell us what you need. We may ask for a simple confirmation that the address is yours. We reply within one month under the GDPR and within 15 days under the LGPD. To withdraw cookie consent, use Cookie preferences.
If you're not satisfied, you can complain to the data protection authority in your country or, in Brazil, to the ANPD.
8. Security
The site only works over an encrypted connection (HTTPS). The memo database lives in a restricted-access environment, we don't store your IP in plain text and the form is protected against bots. No system is infallible; if an incident could put you at risk, we will notify the authorities and the people affected, as the law requires.
9. Children and teenagers
The memos are meant for people aged 16 or older. Anyone younger should only sign up with a parent's or guardian's permission. If we find a sign-up made without it, we delete it.
10. Changes to this policy
When this policy changes, the date at the top is updated. Relevant changes, such as a new analytics or marketing tool, appear here before they go live, and when they require new consent, the cookie notice shows up again.