This is a translation, provided for convenience. If there is any difference, the Portuguese version prevails.

Privacy Policy — The Court (A Corte)

Effective as of October 13, 2026 (version 1)

1. Who this policy applies to

It applies to the A Corte Android app and to the Court's website (corte.playdude.com.br and the addresses that lead to it). It applies to those who only watch (visitors), to those with a free account (Peasant) and to those who bought a title.

The Court is intended for adults. When you enter, you confirm that you are 18 or older. We only keep the date of this confirmation; we do not ask for ID or date of birth.

2. Your account data

Sign-in is done through Google. From Google we read the account identifier, the first name, the e-mail and whether the e-mail is verified. And we keep only:

• Google account identifier — a fixed number that lets us recognize you at the next sign-in.
• Your name in the Court — your Google account's first name plus a 4-digit code. It is public, unique and does not change.
• Nickname (if you have a title that allows one) and the history of nicknames you have used.
• Dates and preferences — when the account was created, the last access, the chosen language, the age confirmation, the version of the terms you accepted and whether you want to receive notifications.
• Sessions — a record of each device or browser you signed in on (in the browser, a short description like "Chrome · Windows"), so you can disconnect them.

The e-mail is used only at sign-in, in the server's memory, to check whether the account belongs to the PlayDude team. It is not recorded, except for the administrators' own, which stays in the records of moderation actions. The Google account photo is not read.

3. What you post and what others see

• Messages in the Square, halls, groups and private chats, with the date, your interface language and reactions.
• Images you send (see section 4).
• Groups you create or belong to, with name, rules and member list. A group's password is stored only in scrambled form.
• Blocks you make and prestige you give or receive.

Public, to anyone in the Court and, in part, to people without an account: your name in the Court or nickname, your title, your badges with their quantities, your prestige, whether you are online and the Square messages. Kings and Emperors keep appearing on the list for up to 72 hours after leaving, marked as offline. The prestige ranking is an open page on the internet. The amount you paid is never shown.

Private conversations: they are stored on our server and are not end-to-end encrypted. The moderation team can read private messages to investigate reports, scams and abuse. "Delete conversation" hides the conversation only for you: it still exists for the other person and on the server until the period in section 9.

4. Images

• Before sending, the app recreates the image, which removes embedded data (such as the photo's location). The server removes this data again.
• Every image, including those sent in private, goes through an automatic filter before appearing. For that it is sent to Google's image analysis service (Cloud Vision), without identifying who sent it. If the filter does not respond, the image is not published.
• Images in the Square, halls and groups are stored at an address that anyone with the link can open. Private ones only open with a temporary link.
• An image blocked for violence is stored privately, only for moderation, for up to 30 days.
• An image blocked for sexual content is not stored. Only a record remains, for up to 30 days, with the date, the author, the room, the reason and a fingerprint (hash) of the file.
• Sexual content involving minors is removed and may be reported to the authorities.

5. Purchases

• In the app, the purchase is made and charged by Google Play. We keep the receipt Google gives us (a purchase code and the order number), the title purchased and the date.
• On the website, payment is made on the Stripe page. We send Stripe an internal identifier of your account, the title and the amount; we keep the payment code, the title and the date.
• We never receive or store card numbers, Pix data, CPF (Brazilian taxpayer ID) or billing address. That data stays with Google or Stripe, under their policies.
• Refunds, chargebacks and disputes are also recorded, because they remove the badge.

6. Ads (app only)

Those who have not bought a title can, if they want, watch a rewarded ad to earn a message. This ad is served by Google AdMob, which uses the device's advertising ID and technical data (model, system, network) to choose and measure the ad. Where the law requires it, the app asks for your consent before the first ad.

To confirm that the ad was watched, we send AdMob an internal identifier of your account and a single-use code, and keep the confirmation for up to 90 days. The website has no ads. You can reset or delete the advertising ID in Android settings. See how Google uses this data.

7. Notifications

If you allow it, the app notifies you when a private message arrives. For that we keep the device's notification token (from Google's Firebase Cloud Messaging). The notice is neutral: it does not carry the sender's name or the text. It carries an internal conversation identifier, so the app opens the right conversation. You can turn it off in your profile, and the token is deleted when you sign out.

8. Technical data and what stays on the device

• IP address: it is handled by Cloudflare, which hosts the Court, to deliver the service and block attacks. We do not store your IP. We use a scrambled form of it, from which the number cannot be recovered, to limit abuse: it exists only while the connection is open and, for "Connect browser" attempts, for up to 15 minutes.
• Measurement: we count how many times certain actions happen per hour (for example, messages sent), without linking the count to any person. We do not use Google Analytics or any other tracking tool.
• Links: when a message contains a link, only the link address may be sent to the Google Safe Browsing service, to block scams and viruses.
• On your device we keep your session code, the language, the age confirmation and preferences (scrolling and automatic translation). The website does not set cookies of its own; the Google sign-in button may set its own.
• Automatic translation: it is done on your device (by Google ML Kit in the app, or by the browser's translator). The text of messages is not sent to any translation server. Language packs are downloaded from Google.

Android app permissions

The app does not ask for camera, location, microphone, contacts or access to your files. To send an image, you choose it yourself through the system screen.

9. How long we keep data

If any of these periods change, this page is updated.

10. Who we share with

We do not sell or rent your data. It goes through the services below, which work for us or for you:

• Google — sign-in, Google Play (purchases), AdMob (rewarded ad), Firebase Cloud Messaging (notifications), Cloud Vision (image filter), Safe Browsing (links) and ML Kit (on-device translation).
• Stripe — payments made on the website.
• Cloudflare — hosting of the server, the database and the images.

These services may process data outside Brazil. We may also hand data over to authorities when the law requires it, and we report child sexual abuse content to the authorities.

11. Why we process this data

To provide the service you asked for (account, chat, purchased titles), to comply with legal obligations (purchase records), to protect the community and prevent fraud (moderation, limits against abuse) and, in the case of the ad and notifications, with your consent.

12. Your rights and account deletion

You can request at any time: confirmation of and access to your data, correction, deletion of the account and data, portability, information about who we share with and withdrawal of consents. These rights apply under the LGPD (Brazilian Law 13.709/2018) and, where applicable, the GDPR and the CCPA/CPRA.

To delete the account, you have three ways:

• In the app or in the chat in the browser: Profile → "Delete my account".
• Through the page corte.playdude.com.br/corte/excluir-conta, even without the app installed.
• By e-mail to lgpd@playdude.com.br, stating your name in the Court (with the code, like William#4821). We reply within 15 days.

In the first two ways, you sign in again with Google and type your name in the Court to confirm, and the deletion happens immediately. It cannot be undone.

What is deleted: the account, the Google account identifier, the name, nicknames, sessions, notification tokens, blocks, your messages and images, your entire private conversations (also for the other person) and the groups you own.

What remains, not linked to your name: purchase and chargeback records and moderation and report records, for the time described in section 9. If the account was banned, we also keep a scrambled code of it until the ban ends, only to prevent the ban from being circumvented with a new account.

Purchased titles are not refunded upon deletion. If you sign in again with the same Google account, a new account starts.

Without asking for anything, you can already: sign out of this device or all of them, disconnect browsers, remove your nickname, unblock people, turn off notifications and dissolve a group of yours.

If you think your data was handled wrongly, you can also complain to the Brazilian National Data Protection Authority (ANPD).

13. Minors

The Court is not for people under 18 and we do not knowingly collect data from children. If we learn that an account belongs to a minor, it is closed and the data is deleted. Let us know at lgpd@playdude.com.br.

14. Changes to this policy

When this policy changes, the date and version at the top of the page change. If the change is important, the Court asks for a new acceptance before you can speak again.

15. Contact

PlayDude — lgpd@playdude.com.br