Privacy policy
Updated on November 11, 2026
This policy explains what data the Ninja Studios website (ninjastudios.gg) and games portal (play.ninjastudios.gg) collect, why, who they share it with and what you can do about it. We follow Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
Who we are
The ninjastudios.gg website and the play.ninjastudios.gg portal are run by Ninja Block Studios LTDA, CNPJ 38.131.443/0001-94, a Brazilian company that uses the name Ninja Studios. It is the controller of the data described here, meaning it decides how the data is used.
Data protection contact
We are a small-scale processing agent (a micro or small business under Brazilian law), so we use the exemption from appointing a data protection officer set out in ANPD Resolution CD/ANPD No. 2/2022. We still have a channel for anything about your data: [email protected].
What we process, why and on what legal basis
Summary of what happens to data on the site and the portal:
| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Replying to the campaign form | Name, company (if provided), email and message | Steps prior to a contract, at your request (art. 7, V) |
| Reviewing the game you submit (Publish with us) | Name, email, studio or company (if provided), game title, stage and platforms, links and description | Steps prior to a contract, at your request (art. 7, V) |
| Blocking bots and abuse on the form | Technical browser data (Google reCAPTCHA) and IP address | Legitimate interest in keeping the site secure (art. 7, IX) |
| Delivering the pages and the games | IP address, date and time, requested page and browser type, in the hosting providers' technical logs | Legitimate interest in keeping the site online and secure (art. 7, IX) |
| Remembering your language and your cookie notice answer | Chosen language and "accepted" or "declined", stored in your browser | Legitimate interest, so the site works the way you chose (art. 7, IX) |
| Usage statistics (Google Analytics) | Pages viewed, clicks, game opened and play time, device and browser type, approximate region | Consent, given with the "Accept" button (art. 7, I) |
Data you send us (campaign form)
When you fill in the campaign form, we receive your name, company (if provided), email and message. We only use them to reply and talk about the project. They reach our email (Gmail, by Google) and are never sold or used for any other purpose.
We keep these emails for up to 2 years after the last contact and then delete them, unless they lead to a contract (in that case we keep them for as long as the law requires for contracts).
To prevent abuse, our server counts how many times the same IP address sent the form. This count stays only in the server's memory for 10 minutes and is not stored.
The form uses Google reCAPTCHA to block bots. It only loads when you start filling in the form, and Google may collect technical data from your browser and your IP for this check, under Google's privacy policy.
Data you send us (game submissions)
When you submit a game through the "Publish with us" form, we receive your name, email, studio or company (if provided), game title, development stage, platforms, links to the game, a video and a pitch (if provided) and the description you write. We only use them to review the game and talk to you about it. We do not use them for marketing and we never sell them.
The submission is stored in our CMS, whose database is hosted on Railway, and it reaches our email. Only our team sees it.
We keep a submission for up to 2 years after the last contact and then delete it. If you want us to delete it sooner, write to [email protected], the same data channel as in this policy.
Usage statistics (Google Analytics)
With your permission, we use Google Analytics to know how many people visit the site and the portal, where they come from, which pages they see, which buttons they click and, on the portal, which game was opened and for how long it was played. These numbers are aggregated and help us improve the site.
Nothing is sent to Google Analytics before you click "Accept": without your answer, or if you decline, the Google Analytics script is not even loaded and none of its cookies are stored.
Google Analytics 4 does not store full IP addresses. We keep advertising features and Google Signals turned off, and we do not use this data for ads or to build profiles. Per-visit data is kept in Google Analytics for at most 14 months; after that only totals remain.
You can change your choice anytime through "Cookie preferences" in the footer. If you accepted and later decline, we stop sending data right away and delete the Google Analytics cookies (_ga and _ga_...) from your browser.
Games portal (play.ninjastudios.gg)
The portal's games run inside the page and are served by our hosting providers (Vercel and Cloudflare). You don't need an account, name or email to play.
Your progress (levels, coins, sound settings and the like) is saved only in your browser, in the game's local storage. It is not sent to us. To delete it, clear the site's data in your browser settings.
If you accept statistics, we count which game was opened and for how long it was played. If you don't, none of this is sent.
Cookies and browser storage
This is what the site and the portal store in your browser:
| Name | Purpose | Duration | Whose |
|---|---|---|---|
| idioma (cookie) | Remember the site language (the one you chose or your browser's) | 1 year | Ours |
| ns-consentimento (local storage) | Store your answer to the cookie notice | Until you clear the site's data or change your choice | Ours |
| _ga and _ga_... (cookies) | Google Analytics: tell visitors and visits apart. Only after "Accept"; deleted if you decline later | Up to 2 years | Google (third party), stored on our domain |
| Game saves (local storage) | Progress, coins and settings of each portal game | Until you clear the site's data | Ours, on the games provider's address |
| Google reCAPTCHA cookies | Check that whoever sends the form is not a bot. Only once you start filling in the form | Set by Google | Google (third party) |
The site's videos use YouTube's privacy-enhanced mode (youtube-nocookie.com) and only load the player when you press play. From then on, Google's privacy policy applies.
Who helps us run the site
We use these service providers, which may process data on our behalf:
| Provider | What it does |
|---|---|
| Vercel | Hosts the site and the portal (receives the technical data of each visit) |
| Railway | Runs our server (backend), which receives the form and delivers the site's content |
| Gmail (receives the form emails), reCAPTCHA (bot blocking) and Google Analytics (only with your consent) | |
| Cloudflare | Serves (or will serve) the portal's game files |
| YouTube (Google) | Shows the videos, only when you press play |
These providers' servers may be outside Brazil (for example, in the United States). This international data transfer follows art. 33 of the LGPD, with the data protection safeguards these providers offer in their contracts. We do not sell personal data.
Children and teenagers
We follow Brazil's Digital Statute of Children and Adolescents (ECA Digital, Law 15,211/2025) and the best interest of children and teenagers (LGPD, art. 14). The site and the portal don't ask for a name, email or account to play, and statistics stay off until someone clicks "Accept".
We don't use browsing data for ads or to build profiles, and the portal's games show no ads. The campaign form is meant for companies and should not be filled in by anyone under 18.
If you are responsible for a child or teenager and think they sent us data, write to [email protected] and we will delete it.
Links to other sites
The site links to the Minecraft Marketplace, Fortnite, YouTube, Discord, the app stores and our social networks. These services have their own privacy policies.
Your rights
Under the LGPD (art. 18), you can ask for: confirmation that we process your data; access to it; correction; anonymization, blocking or deletion of anything unnecessary; portability; deletion of data processed with consent; information on who we share it with; and withdrawal of consent. You can also object to a use based on legitimate interest. Just write to [email protected].
We reply within 15 days. We may ask for some information to confirm the request is yours.
If you think we didn't solve it, you can also complain to Brazil's National Data Protection Authority (ANPD), at www.gov.br/anpd.
Changes to this policy
If this policy changes, the date at the top of the page will be updated.