⚠️ Text generated automatically by the studio pipeline from the app's code — pending review by the person responsible.
Cosmic Orbit — Privacy policy
This policy explains what data the app Cosmic Orbit (com.vexplay.cosmic_orbit), published by
Vexplay Studio, collects, why, and how you can exercise your rights under Brazil's LGPD (Law 13,709/2018).
Data collected
| Data | What it is | Purpose | Legal basis |
|---|---|---|---|
| Anonymous account | Random identifier created by Supabase anonymous sign-in (no name, e-mail or phone). | App functionality (leaderboard, deletion request) | Performance of contract — LGPD art. 7, V |
| Anonymous usage telemetry | Random installation ID, session, app events (16 types, e.g. session start/end), numeric event values and app version. Fields sent: app_version, event, install_id, package_name, props, session_id, value. | Improve balance, measure retention and detect failures | Legitimate interest — LGPD art. 7, IX |
| Leaderboard | Nickname you choose (up to 24 characters), score and anonymous account ID — only if you submit a score. | Show the game's public leaderboard | Performance of contract — LGPD art. 7, V |
| Leaderboard reports | Reporter's anonymous account ID, the reported entry and the chosen reason. | Moderate the leaderboard (user-generated content) | Legitimate interest — LGPD art. 7, IX |
| Advertising (Google AdMob) | The Google AdMob SDK may collect the device advertising ID, IP address, device information and ad interactions, according to Google's policies. The app declares the advertising ID permission. | Show ads and measure their performance | Legitimate interest — LGPD art. 7, IX |
| Deletion request | Anonymous account ID and installation ID, when you request deletion in the app. | Fulfil your deletion request | Legal obligation — LGPD art. 7, II |
Stays on your device only (not sent): local preferences (best, difficulty_factor, had_session). Removed when you uninstall the app or use “Delete my data”.
The app does not ask for your name, e-mail, phone, location, contacts, photos or microphone.
Leaderboard rules (user-generated content)
The only interaction between users is the nickname shown on the leaderboard (up to 24 characters): there is no chat and no exchange of messages, images or files. Do not use your real name or personal data. Nicknames with profanity, slurs (Portuguese, English and Spanish), links, e-mails or phone numbers are rejected in the app and on the server. Each entry has a “Report” button; the studio receives the report and can hide the entry.
Sharing and third parties
- Google AdMob — Google privacy policy · how Google uses data from partner apps
- Supabase (banco de dados e login anônimo; servidores nos EUA) — privacy policy
- Google Play (distribuição do app) — Google privacy policy
Some of these services process data outside Brazil (international transfer, LGPD art. 33), under the policies above.
Retention
Data sent is stored while the app is available or until you request deletion. Deletion requests are handled within 15 days.
Security
Communications use HTTPS and database access is restricted by row-level security (RLS) rules.
Children
The app is not directed at children under 13.
Your rights
You may request confirmation, access, correction, anonymisation, portability, information about sharing and deletion of your data (LGPD art. 18). To delete, see Delete my data. For other requests, write to suporte@vexplaystudio.com.br including the IDs shown in the app.
You can also limit the use of the advertising ID in your Android settings.
Controller and contact
Vexplay Studio — suporte@vexplaystudio.com.br
Last updated: 2026-11-11