Privacy
Short version: the game runs in your browser. Your settings stay on your device only. We only store something on a server if you create an account — and even then it's just your email, nickname and history. We don't sell your data.
Meia Dúzia is run by nhackt. This page explains, in plain language, what we collect, why, and what you can do about it. Any privacy questions, just write to privacidade@nhackt.app.
Without an account, nothing leaves your device. Your game preferences (theme, sound, the team you built, settings) are kept only in your browser, in localStorage. That never goes to a server and disappears when you clear your browser data. (The old policy said 'nothing goes to a server' — that's only true if you don't create an account; we explain the rest below.)
Accounts are optional. IF you create one — login is via a link sent to your email — we store in Supabase (our database and login provider, which processes this data on our behalf) only what's needed: your email, the nickname you choose, your match history and your achievements. The purpose is simple: let you sign back in without losing your progress. The legal basis is providing the service you asked for (plus your consent when creating the account). Without an account, none of this exists.
Analytics and ads only turn on AFTER you accept in the cookie notice. We use a tool called nhackt-ads to understand how the game is used (for example: 'played a match') and to show ads. This is optional, separate from your account, and based on your consent — and you can refuse or change your mind at any time, just as easily. If you refuse, no analytics or ads are loaded.
We don't sell your data — full stop. We share the minimum, and only with the parties that keep the game running: Supabase (stores your account data) and nhackt-ads (only with your consent). Since some of this infrastructure may sit outside Brazil, there can be an international transfer of data, always with the safeguards Brazilian law (LGPD) requires.
How long we keep things: account data stays while the account exists and is deleted when you delete it; analytics events last only as long as your consent does; and whatever is in localStorage stays until you clear it on your own device. No payments here — the game is free, with no purchases and no cash prizes, so we don't collect card or financial data.
The names of players, national teams and competitions in the game are used in a referential, editorial way — they're content, not personal data collected from third parties, and they don't imply any official affiliation or endorsement.
About minors: Meia Dúzia is not aimed at children, and accounts require an email. If you're underage, use it with the awareness and consent of whoever is responsible for you. About security: login is managed by Supabase and access to data is restricted. If a relevant security incident happens, we'll notify you as the law requires.
Your rights (LGPD): you can confirm whether we process your data, access it, correct it, delete it, take it elsewhere (portability), object to a use, and withdraw consent — all things you can ask for or do yourself. In practice: want to stop analytics and ads? Just refuse (or change your mind) in the cookie notice. Want to erase everything? Delete your account and the associated data goes with it.
To exercise any right or ask a question, reach us at privacidade@nhackt.app. We don't have a formal data protection officer (the law exempts small companies like ours), but that email is the real channel to get things sorted.
Last updated: June 2026