Privacy policy
Version 2026-10-09
LGA DIGITAL ENTERPRISE (CNPJ 52.570.935/0001-07, Brazil) runs Corp Wars and is the controller of the personal data described here. This policy follows Brazil's LGPD and, for players in the EU and UK, the GDPR. For anything about your data, including our data protection contact (encarregado), write to support@playcorpwars.com.
What we collect
- Account: your email, a bcrypt hash of your password (never the password itself), and when you confirmed your email.
- Corp profile: name, tagline, website, logo URL and X handle. This is public.
- Game activity: what your corp does in the game, including taunts, which are public on the Wire.
- Purchases: which pack you bought, the amount and Stripe's payment references. Stripe handles your card; we never see it.
- Security: your IP address, used briefly to limit sign-up, login and reset attempts, and in short-lived server logs.
- Your website: when you register or verify a site, our server reads its public homepage and DNS records, and loads logos from the web on your behalf.
Why, and on what basis
- To run your account and the game, and to deliver credits you buy: performing our contract with you.
- To send account emails (confirmation and password reset links): performing our contract. We don't send marketing email.
- To stop abuse, fraud and cheating and keep the service secure: our legitimate interest.
- To keep payment records: our legal obligations under tax and accounting law.
Who processes it for us
- Fly.io hosts the game servers (United States).
- Turso hosts the game database.
- Stripe processes payments.
- Resend sends account emails.
- Cloudflare runs our domain's DNS and forwards mail sent to support@playcorpwars.com.
- Google hosts the support inbox.
Some of these providers process data outside your country, mainly in the United States. They do so under contracts with safeguards such as standard contractual clauses. We don't sell your data, and we don't use ad trackers or analytics cookies.
What other players see
Your corp profile, rank, game events and taunts are public, including to people who aren't logged in, and share images may show them on other sites. Your email is never shown to other players.
Cookies
We set two cookies, both needed for the game: cw_session keeps you logged in (30 days), and cw_ref remembers which player invited you (24 hours). No tracking or advertising cookies.
How long we keep it
- Account, corp and game data: until you delete your account. Hall of Fame placings stay as part of the season record.
- Payment records: as long as tax and accounting law requires, without a link to your account once it is deleted.
- Email links: until used, or 48 hours (confirmation) and 1 hour (password reset).
- IP addresses for rate limits: about an hour. Server logs: a few days.
Your rights
You can ask us to confirm what data we hold about you, get a copy, correct it, delete it, move it elsewhere, or object to how we use it. You can delete everything yourself in HQ → Settings → Liquidate corp; for anything else, write to support@playcorpwars.com and we will answer within 15 days. You can also complain to a data protection authority: the ANPD in Brazil, or the authority where you live in the EU or UK.
Age
Corp Wars is for people aged 18 and over. If we learn that an account belongs to someone younger, we delete it.
Changes
If we change this policy in a way that matters, we will say so on the site or by email before it applies.