Privacy
How we handle data on the homepage and in the game.
Updated · Version 2026-10-10.2
Responsibility and scope
Carlo Dapuzzo, based in Brazil, is responsible for decisions about ONZE’s processing of personal data. This policy covers joinonze.com and matchday.joinonze.com. Contact details appear below.
Data we use
The homepage uses your language preference and technical access information. The game processes account or guest identifiers, authentication email, display name, language, decisions, matches, results, history, campaign and follow relationships. It also records usage events and errors for operation, security and improvement.
Purposes and legal grounds
We use necessary data to provide the service you request: authentication, linking results, history, rankings and the League. Security and improvement may rely on legitimate interests, subject to assessment and respect for your rights. Legal obligations and, where required, specific consent may also provide a basis. Acknowledging this policy is not blanket consent.
What others can see
Your display name, public identifier and performance information may appear in profiles, rankings and shared results. Your login email and authentication codes are not part of those public elements. Group members may view and redistribute a result you share.
Providers and international processing
Lovable and Supabase infrastructure support hosting, authentication and storage. Google and Apple are involved when you choose those login methods; the homepage also requests fonts from Google Fonts, exposing technical connection data. Providers may process data outside Brazil, subject to safeguards required by applicable law. The homepage and the app request fonts from Google Fonts, exposing technical connection data.
Cookies and browser storage
We use cookies and browser storage for language, sessions, preferences and continuity. The homepage language preference may last up to one year unless you delete it. Clearing this data may require signing in again or remove preferences and a guest match’s local association.
Retention and security
Data is retained as needed to maintain your account, history and service, meet legal obligations, prevent fraud and exercise rights. Deletion requests are assessed against these needs; backups follow their own cycles. We use access and security controls without promising zero risk or immediate erasure of every copy.
Your rights and younger users
You may request information, access, correction and deletion where applicable, and exercise other relevant rights, including withdrawing consent where it is the basis for processing. Use the contact below; we may verify your identity to protect the account. Children’s and adolescents’ data requires the safeguards and permissions required by law. Tell us about inappropriate use. You may also contact the relevant data protection authority.
Usage measurement with PostHog
ONZE sends selected access, authentication, match, rescue and sharing events to PostHog in the United States. These include pseudonymous visitor or player identifiers, event, time, challenge, attempt and source context. Visitor and account identifiers may be linked after saving progress. These data are not anonymous. The projection sends no email, nickname, login codes, free text or user IP; infrastructure may process IP and technical logs for connection and security. We do not enable automatic click capture, session recording or advertising. This limited measurement assesses operation and journeys under legitimate interests; you can object through the official contact.
Deletion and remaining data
Request deletion in Profile, even before accepting these documents, or write to contact@joinonze.com. An authenticated request receives a reference number and is handled manually by Carlo Dapuzzo; until execution, the account and its data still exist. Handling covers authentication and sessions, profile, connections, links, personal matches and associated analytics, including export queues. Other people's results are not deleted. Copies shared outside ONZE may remain with third parties. Data that must be retained for legal obligations or legal claims are restricted to the justified purpose and period; backups follow the provider's cycles, without a promise of immediate erasure. The operator explains the outcome and any retention when handling the request. We retain minimal pseudonymous identifiers with restricted access to prevent queues or restores from reintroducing removed data. They are not anonymous; their necessity is reviewed after queues are drained and backup cycles pass.
Receipts, communications and retention
We record the account, Terms and Policy versions, date/time, language and acceptance source on the server, without adding IP or device identification to the receipt. Deletion requests are also restricted to the account holder and support. Account and game data remain as needed to provide the service; erasure requests are handled under this policy. Visitor tokens expire within 60 days, but expiry does not automatically erase history. Email is used for authentication and necessary operational communications. Registration includes no mailing list, daily reminder or promotional campaign subscription. Material policy updates will be communicated; acknowledgement is not permission for optional purposes.
ONZE operator: Carlo Dapuzzo
Contact: contact@joinonze.com