Privacy Policy

Privacy Policy

Last updated: January 1, 2025

1. Introduction

SpriteGG ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy complies with the General Data Protection Regulation (GDPR), Brazil's Lei Geral de Proteção de Dados (LGPD), and applicable privacy laws.

2. Data We Collect

• Account Data: Name, email, username, password (hashed)
• Profile Data: Avatar, bio, creator information
• Transaction Data: Purchase history, download logs, subscription records
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: Pages visited, assets viewed, search queries

3. How We Use Your Data

• Provide and improve our services
• Process transactions and send receipts
• Send service-related communications
• Prevent fraud and ensure security
• Comply with legal obligations
• Personalize your experience

4. Legal Basis for Processing (GDPR)

• Contract: Processing necessary to fulfill your purchases and subscriptions
• Legitimate Interest: Fraud prevention, security, platform improvement
• Consent: Marketing communications (opt-in)
• Legal Obligation: Tax and financial record keeping

5. Cookie Usage

We use essential, functional, and analytics cookies. See our Cookie Policy for details. You can manage cookie preferences through our consent tool.

6. Data Sharing

We share data with: payment processors (Stripe, Mercado Pago, PayPal), analytics providers, email service providers. We never sell your personal data to third parties.

7. Data Retention

Account data is retained while your account is active and for 3 years after deletion. Transaction records are kept for 7 years for tax purposes.

8. Your Rights

Under GDPR/LGPD, you have the right to: access your data, correct inaccurate data, delete your account, port your data, object to processing, and withdraw consent. Submit requests to privacy@spritegg.com.

9. Security

We implement: TLS encryption for data in transit, bcrypt password hashing, role-based access controls, regular security audits, private file storage with signed URLs.

10. International Transfers

Data may be processed in countries outside your jurisdiction. We use standard contractual clauses for GDPR-compliant transfers.

11. Children

Our platform is not intended for users under 13. We do not knowingly collect data from children.

12. Contact

Data Protection Officer: dpo@spritegg.com