[ Legal ]
Last updated: Sep 25, 2026
Privacy Policy
This Privacy Policy explains how Jedizer Tecnologia Ltda, registration CNPJ 41.130.328/0001-00, with its address at Rio do Sul, SC, 89163-518, Brasil ("World Kings", "we", "us"), collects, uses, shares and protects personal data when you use the game available at worldkings.lol and related applications (the "Service"). We are the controller of your personal data.
For any question or request about your data, contact us at privacy@worldkings.lol. This address also reaches our data protection officer (in Brazil, the "Encarregado").
1. Important: what is public
World Kings is a public ranking game. The following information is public by design, can be seen by anyone, may be indexed by search engines and appears in preview images when links are shared:
- your username, display name, photo or logo, bio, country, whether you are a person or a company, and the social links you add;
- the number of visits your link received from the Service;
- the territories where you have a position, your position and title in each one, and your total contributed in each territory and in the world;
- the date you joined and, when you take a throne, the date of the coronation.
Your email address, payment details, preferences and consent records are not public. Do not add to your profile anything you do not want to be public.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | email address, sign-in method, account identifiers | you, Google |
| Google profile | name and profile photo, when you sign in with Google | |
| Public profile | username, display name, photo or logo, bio, country, social links, person or company | you |
| Game activity | contributions, coupon redemptions (which coupon, when and in which city), territories, totals, positions, titles, coronation history | the Service |
| Link visits | when a visitor clicks a player's link: the profile, the territory and the date, plus a one-way code made from the IP address and browser, used only to count each visitor once per day and not linked to any account | the visitor's device |
| Payments | amount, currency, status, date, Stripe identifiers, refunds and disputes | Stripe |
| Consents and preferences | acceptance of the Terms (version and date), confirmation of minimum age, email preferences, language, cookie choices | you |
| Communications | emails we send you, messages and reports you send us | you, the Service |
| Technical data | IP address, device and browser type, pages requested, security and error logs | your device |
| Analytics (only with consent) | pages viewed, events such as searches and checkouts, approximate location, pseudonymous identifiers | Google Analytics |
We do not receive or store your full card number. Card data is collected and processed directly by Stripe.
Coupons. When you finish signing up, we link a welcome coupon to your account. When a coupon is redeemed, we record which coupon was used, when and in which city, as part of the game records.
People online. To show how many people are on the site, each open page sends a random identifier created in the browser every 30 seconds; it is not linked to you, your account or your device, is not stored in your browser, and is deleted from our servers after a few minutes.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, show your public profile, run the rankings and credit redeemed coupons | performance of the contract (Terms of Service) |
| Process contributions, refunds and disputes; send receipts | performance of the contract; legal obligations |
| Send game notices, such as when another player passes you (you can turn them off) | performance of the contract; legitimate interest |
| Keep records of your acceptance of the Terms and of your age confirmation | legal obligations; legitimate interest in proving acceptance |
| Prevent fraud, abuse, money laundering and security incidents; moderate content | legitimate interest; legal obligations |
| Keep tax and accounting records of payments | legal obligations |
| Measure use of the Service with Google Analytics | consent (you can withdraw it at any time in the cookie settings) |
| Send news and offers | consent (you can withdraw it at any time in the settings or in any email) |
| Improve the Service with aggregated statistics | legitimate interest |
When we rely on legitimate interest, we balance it against your rights, and you can object to it by contacting us.
4. Who we share data with
We do not sell your personal data. We share it only with:
- Service providers that process data on our behalf under contracts: Supabase (database, authentication and file storage), Vercel (hosting), Stripe (payments), Resend (email delivery) and Google (sign-in and, with your consent, Google Analytics).
- The public, for the information described in section 1.
- Authorities, when required by law, court order or to protect rights, safety and the integrity of the Service.
- A successor, in case of a merger, acquisition or sale of all or part of the business, under the same protections.
Marketing cookies, if you accept them, may allow Google to use data for advertising measurement. In some places this may be considered "sharing" for advertising purposes. We do this only with your consent, and you can withdraw it at any time.
5. International transfers
Our providers may process data in the United States and in other countries. When data is transferred outside your country, we rely on safeguards recognized by the applicable law, such as standard contractual clauses or adequacy decisions.
6. How long we keep data
- Account and profile: while your account is active. When you delete your account, your profile and positions are removed immediately from the Service, and the remaining account data is deleted within 30 days, except as described below.
- Payment records: kept for the period required by tax, accounting and anti-fraud obligations (usually between 5 and 10 years, depending on the country), without being linked to a public profile.
- Consent records: kept for as long as needed to prove the consent.
- Security logs: usually up to 6 months.
- Link visit records: up to 12 months; the public counter on the profile has no personal data.
- Coupons: the coupon and its redemption record are kept for as long as the campaign and the audit of the coupon require.
- Analytics: according to the retention configured in Google Analytics, of up to 14 months.
- Backups: deleted data may remain in encrypted backups for a limited time until they are overwritten.
7. Your rights
Depending on where you live (for example, under the Brazilian LGPD, the European GDPR, the UK GDPR or US state laws such as the CCPA), you may have the right to:
- know whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- delete your data, or anonymize or block unnecessary data;
- receive your data in a portable format;
- object to processing based on legitimate interest and restrict processing;
- withdraw consent at any time, without affecting processing done before;
- know with whom we share your data;
- not be discriminated against for exercising your rights;
- complain to a data protection authority, such as the ANPD in Brazil or the authority of your country in Europe.
You can edit your profile and delete your account directly in the settings. For other requests, write to privacy@worldkings.lol. We may need to confirm your identity before answering. We answer within the deadlines set by the applicable law.
8. Minimum age
The Service is only for people aged 18 or older. We do not knowingly collect data from minors. If we learn that an account belongs to a minor, we will close it and delete the data, except payment records that we must keep by law.
9. Automated rankings
Positions and titles are calculated automatically from the amounts contributed, according to the rules published in the Terms of Service. These calculations do not produce legal effects on you and do not involve profiling for any other purpose.
10. Security
We use technical and organizational measures to protect your data, including encrypted connections (HTTPS), access control, row-level security in the database, separation of public and private data, and verified webhooks for payments. No system is completely secure, so we also ask you to protect access to your email and sign-in method. If an incident may put your rights at risk, we will notify you and the competent authorities as required by law.
11. Cookies
We use strictly necessary cookies and, only with your consent, analytics and marketing cookies. See the Cookie Policy for details and to change your choices.
12. Changes
We may update this Policy. When the change is material, we will notify you in the Service or by email. The date at the top of this page shows the latest update.
13. Contact
Jedizer Tecnologia Ltda Rio do Sul, SC, 89163-518, Brasil Privacy and data protection: privacy@worldkings.lol