Flipple Arcade Privacy Policy

Delvind Tecnologia da Informação LTDA is responsible for the processing described here. This Policy covers the app, website, APIs, communities, chats, videos, streams, payments, support, and moderation.

When you connect a YouTube channel, Flipple Arcade receives OAuth authorization only from the Google Account you choose. We use this access to identify the channel, create and manage broadcasts, read and reply to live chat, and publish videos to the connected channel. Flipple Arcade never receives your Google password.

• Each authorization is linked to the Flipple account that started the flow. We encrypt the refresh token and store the channel identifier, name, image, and granted scopes; temporary access tokens remain only in memory.
• We do not sell, transfer, or use data obtained from Google APIs for advertising, credit profiling, or training generalized models. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.
• You can disconnect YouTube inside Flipple Arcade, which removes the stored connection, and you can also revoke access from your Google Account security page. Access or deletion requests may be sent to contato@delvind.com.

• Registration and profile data, including username, email, birth date, language, country, and settings.
• Security and device data, including IP, technical identifiers, session and push tokens, operating system, access logs, crashes, and anti-fraud signals.
• Content and interaction data, including posts, messages, comments, reports, reactions, metadata, participants, and service history.
• Age and identity signals and, where proportionate and necessary, documents or other data for age assurance, safety, KYC, or legal compliance.
• Payment amounts, status, and transaction identifiers; complete card data is handled by payment providers.

These features create content, upload media, and provide audio or video communication. When active, streams may pass through providers and servers required for real-time delivery. We should not retain routine recordings when unnecessary, but may process metadata, reports, and available evidence for safety and legal compliance.

• System permissions can be revoked in device settings.
• The interface should indicate camera or microphone use.
• Participants may record or redistribute content outside our control.

When Minecraft LAN multiplayer is enabled, Android restricts the tunnel to the Minecraft Bedrock app (package com.mojang.minecraftpe). Only packets required for Minecraft LAN discovery and the multiplayer session are transiently forwarded through Flipple Arcade’s encrypted relay. Web browsing, advertising, and traffic from other apps are not routed through the VPN.

• We may process the minimum technical data needed for connectivity and security, such as user, device, peer, and session identifiers, network addresses, routes, timestamps, connection health, game version, availability, and information about the shared world.
• Game-packet content is not used for advertising, commercial profiling, or data sales, and is not logged or persistently stored by Flipple Arcade.
• Operational metadata, diagnostics, security logs, and abuse-prevention records may be retained only as long as needed to operate, troubleshoot, protect the service, and comply with law.
• Disabling the VPN or revoking authorization in Android settings stops forwarding and remote multiplayer.

We process data to provide the service, protect accounts and users, moderate content, assure age, prevent fraud, process payments, answer rights requests, comply with law, and defend legal claims. Depending on context, grounds include contract performance, legal or regulatory duty, exercise of rights, protection of life, assessed legitimate interests, and consent where required.

We apply safety by design, age-appropriate settings, minimization, and measures against harmful contact. Age assurance must not become mass surveillance and should use only necessary data. Minors’ data is handled with priority to their best interests and applicable Brazilian law.

Data may be shared with infrastructure, media, authentication, email, moderation, payment providers, and authorities when necessary and lawful. We retain it only as needed for purpose, safety, legal duties, and legal claims. Account deletion does not erase records that must be retained for law, fraud, disputes, or incidents. We use technical and organizational safeguards, but no system is invulnerable.

Automated systems and human review may analyze signals, metadata, and reported content to detect abuse and enforce rules. We may act without prior notice in serious or urgent cases. Review may be requested where appropriate without preventing lawful preservation or reporting.

You may request confirmation, access, correction, applicable portability, sharing information, review, objection, and deletion within legal limits. Identity confirmation may be required. Contact contato@delvind.com. Material changes may require renewed consent.

Interactions with content, authors, hashtags and games help rank feeds and suggest people and communities. Views, clicks, likes, comments, reposts, publications and connections can update inferred interests. Interests lets you review and remove items and manage other-language content and suggestions, with up to 20 items per category. The global-content answer and date are saved to the account to respect the choice and 90-day invitation interval, independently of accepting the Terms. Minimization, security, age safeguards and your stated rights apply.

Requested translations may send the necessary text to the platform’s translation services; avoid unnecessary sensitive information. Translations can be inaccurate. Safe emails and recovery-step records protect and restore the account. Policy version and acceptance date document your choice without automatically enabling optional features.

Discussions, comments and hashtags are public and associated with the author’s public identity and publication date. Votes and likes are recorded for functionality and abuse prevention. Do not post email addresses, credentials or third-party personal information in the feed.

Form submissions are private: name, reply email, description, test instructions, licensing/authorship, ZIP files or repository links and review history are available to authorized staff. The form email is not published in the feed. IP-derived identifiers and operational records may support submission limits, security and auditing.

Data is processed to receive and assess proposals, check security and licensing, communicate outcomes by email, record acceptance and prevent abuse under applicable legal bases. AI-assisted review requires access controls, data minimization and confidentiality safeguards; private submissions are not automatically published. Public repository links remain subject to their providers’ policies.

Data is retained as necessary for review, maintenance of integrated contributions, security and legal obligations. Access, correction and deletion requests can be sent to contato@delvind.com and are assessed under applicable rights, record-keeping needs and required license attribution.