GameBubblePrivacy Policy
This policy explains how GameBubble processes personal data under the EU General Data Protection Regulation (GDPR/RGPD) and Portuguese law (Lei 58/2019).
1. Controller
- Controller: Rodrigo Antunes (PixelPerBits)
- Address: Lisbon, Portugal
- Privacy contact: rodrigoka4@gmail.com
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email, username, password (hashed), date of birth | Create and secure your account, show age-appropriate content | Contract; legal obligation (protection of minors) |
| Profile, games, covers, comments, likes, follows | Run the social features you use | Contract |
| Studio details (name, website, country, contact, NIF) | Studio profiles and verification | Contract |
| ID document photo (only for 18+ verification) | Confirm you are an adult. Deleted as soon as it is reviewed; we keep only the result | Consent; legal obligation |
| Reports, moderation decisions, appeals | Keep the platform safe, handle disputes | Legitimate interest; legal obligation (DSA) |
| Plays, impressions, device and log data | Feed ranking, statistics for creators, security | Legitimate interest |
| Analytics cookies (Google Analytics) | Understand how the service is used | Consent |
| Advertising identifiers (Google AdSense / AdMob) | Show and measure ads, personalised only with consent | Consent |
| Payment data (via Google Play / Stripe) | Process Promoted purchases. We never see your full card number | Contract; legal obligation (invoicing) |
3. Children
The minimum age is 13 (the age of digital consent in Portugal). We don't show content rated above your age, and we don't use personalised advertising for users under 18.
4. Who receives data
Service providers acting on our behalf: Google (Firebase hosting, database and storage; Google Analytics; AdSense/AdMob; Google Play billing), Stripe (web payments). Some may process data outside the EU under the EU-US Data Privacy Framework or Standard Contractual Clauses. We don't sell your data.
5. How long we keep it
- Account data: while your account exists. After you delete your account it is hidden at once and erased after 30 days (you can restore it during that time).
- Comments of deleted accounts stay as "Deleted user" without personal data.
- ID documents for age verification: deleted right after the review.
- Reports, moderation decisions and appeals: 12 months.
- Invoices: as required by tax law.
6. Your rights
You can access, correct, delete and port your data, object to or restrict processing, and withdraw consent at any time. Use Settings → Download my data and Delete my account, or email rodrigoka4@gmail.com. You may complain to the CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).
7. Automated decisions
Automatic checks flag submissions for moderators, but decisions about your content and account are taken by people.
8. Cookies
See the Cookie Policy.