1. Who is responsible for your data
PlayerHall is operated by Braza Holding, based in Brazil. Braza Holding is the controller responsible for the PlayerHall processing described here. For privacy questions or requests, use the contact channel on brazaholding.com and identify your message as a PlayerHall privacy request. Do not send passwords, verification links, or access tokens.
This policy applies to the PlayerHall website and app. It explains our processing under Brazil’s Lei Geral de Proteção de Dados (LGPD) and, where applicable, the EU/EEA General Data Protection Regulation (GDPR) and other mandatory privacy laws. It does not replace the privacy notices of platforms you connect or websites you visit.
2. The information we process
We receive information from you, from your use of PlayerHall, and from the public or authorized platform data you ask us to import. You can use manual game logging without connecting a platform. Do not upload sensitive information about yourself or anyone else that is unnecessary for a gaming profile.
- Account information: email address, account identifier, authentication and confirmation records, and the profile details you provide. Our authentication provider handles your password; it is not published on your profile.
- Your contributions: game logs, approximate manual playtime, reviews, ratings, comments, favorites, follows, uploaded profile media, social links, Gaming DNA selections, and showcase choices.
- Connected-account data: provider, username or platform identifier, available games, playtime, achievement or trophy records, unlock dates, completion, awards, verification status, and import status. Where an enabled integration requires an authorization credential or token, that credential is processed for the connection.
- Technical and service records: IP address and request/device details received by hosting and authentication services, security and error logs, sync jobs, notification records, and in-app feed impressions used to operate and personalize the experience.
- Agreement records: the account identifier, accepted Terms version, acknowledged Privacy Policy version, document fingerprints, signup flow, displayed agreement statement, and a server-recorded time.
3. Why we use information and our legal bases
Accepting the Terms or acknowledging this Privacy Policy is not blanket consent to personal-data processing. Essential processing uses the relevant basis listed in this section. We do not make signup conditional on consent to unrelated marketing, advertising, or other optional processing. If we introduce a use that requires consent, we will request it separately before that use. Legitimate interests do not override your fundamental rights.
| Purpose | Information used | Applicable basis |
|---|---|---|
| Provide your account, library, reviews, and requested connections | Account details, contributions, authorized platform data, connection credentials | Performance of the service contract or steps you request before it |
| Secure the service, prevent abuse, moderate reports, and maintain reliability | Account, request, security, error, and report records | Legitimate interests in a safe service, subject to your rights; legal obligations where required |
| Show your profile, social activity, feed, and exports as you request | Your recorded history, visibility settings, interactions, and profile choices | Performance of the requested service; legitimate interests in relevant, functioning features where applicable |
| Respond to privacy requests and maintain necessary agreement evidence | Identity verification, request records, and agreement records | Legal obligations and legitimate interests in establishing and defending legal claims |
| Optional processing that requires consent | Only the data described in the separate request | Your specific, optional consent, which can be withdrawn |
4. Profiles, public content, and sharing
Your profile and contributions can be visible to other users depending on the feature and its visibility settings. Review Settings before posting or sharing. Some uploaded media is served through publicly accessible asset URLs; profile visibility is not a guarantee that someone who already has an image URL cannot open it.
Your email address and agreement record are not public profile fields. Exported images and information you share outside PlayerHall can be copied or retained by recipients. We cannot delete their independent copies. Do not post personal data about another person without an appropriate basis.
5. Service providers and platform connections
We use Supabase for authentication, application data, storage, and server functions, and Vercel for website hosting. The interface requests fonts from Google Fonts and may load game images or catalog information from RAWG, SteamGridDB, Steam content hosts, CheapShark, and other displayed game-data sources. Direct browser requests disclose network information such as your IP address to the destination.
Platform connections can use official platform endpoints, third-party service providers, and unofficial API libraries. Steam and RetroAchievements connections are currently supported. PlayStation, Xbox, and Nintendo connections may be enabled as support is developed. The connection screen determines what is actually available; this policy does not promise that an integration exists or that every platform supplies achievements.
Nintendo support may access Nintendo Switch Online or game-specific services where available. A connection may use an independent authentication or API service that receives account identifiers or authorization tokens. Before enabling a connection that sends those credentials to another operator, we will identify the relevant service, information sent, purpose, and user choice in the connection flow. Accepting this policy alone does not authorize an undisclosed credential transfer.
Providers receive only the information relevant to their role and can have their own terms, privacy policies, locations, and retention rules. Independent platform operators control their own account data. We may also disclose necessary information to authorities when legally required, to advisers handling legal claims under confidentiality, or as part of a lawful business transfer with applicable safeguards. We do not sell your personal information.
6. Browser storage and personalization
The app uses browser storage for your sign-in session, onboarding progress, recent searches, cached game artwork and scores, and recently shown feed content. Feed impressions and interactions can also be stored in the application database to rank content and avoid repetition. Clearing browser storage can sign you out and remove local preferences or caches.
The current app does not include an advertising pixel or a third-party marketing analytics SDK. If non-essential tracking is introduced, we will provide the information and consent controls required by applicable law before it is used. PlayerHall feed ranking and gaming summaries do not make solely automated decisions producing legal or similarly significant effects about you.
7. Retention, disconnection, and deletion
We keep account information, contributions, imported history, and agreement records while your account exists and the information remains relevant to the feature you use. Disconnecting a platform removes the activity imported from that connection; manual game entries remain. You can edit or remove contributions through the available app controls.
Account deletion removes your live application account and its related records, including the signup agreement record. Profile-media deletion is requested as part of the deletion flow. Copies in hosting, authentication, or backup systems may remain until the relevant provider’s retention or rotation period expires. A recipient’s independent copy of shared content is not affected.
Security logs, reports, and request records are kept only for the period needed to investigate an issue, meet an applicable legal retention requirement, or establish and defend a specific claim. Provider retention depends on the configured service and plan. You may ask us about the applicable period or criteria. We do not retain everything indefinitely merely because you checked an agreement box.
8. International processing and security
Braza Holding operates in Brazil and uses services whose infrastructure or support may process information in other countries. Provider regions and subprocessors determine the locations for a particular operation. A restricted transfer must use a mechanism allowed by the applicable law, such as an adequacy decision or applicable contractual safeguards, including EU or Brazilian standard contractual clauses where appropriate. Contact us for information about the recipients, locations, and safeguards relevant to your data.
Agreement to the Terms is not a waiver of international-transfer protections. Before enabling an additional provider or credential-handling intermediary, we must assess its access, security, contractual terms, and transfer arrangements. We use access controls and service safeguards appropriate to the processing, but no online service can guarantee absolute security. We handle and notify qualifying incidents as required by applicable law.
9. Your privacy rights
Depending on the law that applies, you may request confirmation and access, correction, deletion, restriction or blocking, portability, information about recipients, and review of qualifying automated decisions. You may object to processing based on legitimate interests and withdraw optional consent without affecting the lawfulness of earlier processing. Rights can be subject to lawful exceptions; we will explain an applicable refusal.
Use Profile settings to edit information, export available account data, or delete your account. For other requests, contact Braza Holding through brazaholding.com, identify PlayerHall, and describe the request. We may ask for proportionate verification to protect your account. Requests are handled within the period required by applicable law; under GDPR this is normally one month, with a permitted extension for complexity or volume and notice of the extension.
You may complain to Brazil’s Autoridade Nacional de Proteção de Dados (ANPD), or, where GDPR applies, the competent supervisory authority, including one in your habitual residence, workplace, or the place of an alleged infringement. Contacting us does not remove your right to complain or seek a judicial remedy.
10. Age requirements and policy updates
PlayerHall account registration is intended for people aged 18 or older. Do not create an account if you are under 18. If you believe we hold information from an underage account, contact Braza Holding so we can investigate and take appropriate action.
This page identifies its version and effective date. We will explain material changes through an appropriate notice before they take effect where required. A new purpose, a separate consent requirement, or a newly enabled platform connection is not silently authorized by an old acknowledgment. Your signup record identifies the documents presented for that signup; later changes require their own applicable notice or action.