The honest summary. We store the e-mail you signed in with, the name you chose, your progress and your purchase history. From your connection’s IP address we estimate the country, state and city you play from — never from GPS. We do not store card numbers — the payment processor does that. We do not sell your data. Accounts unused for 1 year are deleted (unless you have bought something). You can ask for a copy or for deletion at any time.
This is a translation. The official text of this policy is the Brazilian Portuguese version at game.tioneves.com/privacidade/. If this translation and the Portuguese version ever differ, the Brazilian Portuguese version prevails.
1. Who processes your data
Data controller: G e Soluções e Eventos LTDA, CNPJ 46.647.904/0001-04, Rua Arthur Pelaio, 144 — Vila União — Bandeirantes/PR — CEP 86360-000 — Brasil, represented by Raphael das Neves Ferreira. On Google Play, the apps appear under the developer name Raphael Neves. Data protection officer (Brazilian General Data Protection Law — LGPD, art. 41): Raphael das Neves Ferreira — contato@entexp.com.br. Data requests can also be sent to support@tioneves.com.
This policy applies to the GE Games portal, to the apps listed at the top of this page (Astralia, A Ilha, Forja Abissal, Orivana: Ilhas do Destino, Távola Redonda and ZUG — Meu Doguinho Virtual) and to all games listed in the Terms of Service (in Portuguese).
2. What we collect, why, and on what legal basis
| Data | Where it comes from | What we use it for | Legal basis (LGPD art. 7) |
|---|---|---|---|
| You type it when signing up, or it comes from Google/Facebook sign-in | Identifying the account, password recovery, sending receipts and important notices | Performance of contract | |
| Password (stored as a hash) | You set it | Authenticating access. We never store the password in readable form and cannot read it | Performance of contract |
| Google/Facebook account identifier | Social sign-in provider | Linking the social sign-in to your game account | Performance of contract |
| Public name, nickname, character name, profile picture | You choose them | Showing you in chat, in rankings and to other players | Performance of contract |
| Progress, virtual currency balance, items, rankings | Generated in the game | Saving and syncing your game across devices | Performance of contract |
| Purchase history: pack, amount, currency, date, status, receipt | Generated at purchase and confirmed by the processor | Crediting the currency, issuing receipts, customer support and tax obligations | Performance of contract and legal obligation |
| IP address, date and time of access, device identifier, app version | Automatic | Security, fraud prevention, login attempt limits and diagnostics | Legal obligation (Brazilian Civil Rights Framework for the Internet — Marco Civil, art. 15) and legitimate interest |
| Approximate location (country, state/region and city) | Calculated automatically by our server from the IP address of the connection, using an offline geolocation database (DB-IP). We never use GPS or ask for the device’s location permission | Internal statistics and marketing (knowing which countries and cities our players are in) and fraud prevention | Legitimate interest (art. 7, IX), with the right to object |
| Chat messages and bug reports | You send them | Running the game, moderation and fixing bugs | Performance of contract and legitimate interest |
| Notification (push) token, when you allow it | Device operating system | Notifying you about the game and your account | Consent |
2.1 Approximate location from your IP address
When you open the game, our server looks up the connection’s IP address in a geolocation database that lives on our own server (no external service is called) and records only the result: approximate country, state/region and city. We keep two results per account — the one from sign-up and the one from the most recent access, which is overwritten on each update. We do not store any additional IP address because of this: the IP remains only in the access log described above. IP-based location is approximate (it may point to your internet provider’s city), does not reveal your address and does not use the device’s GPS.
We use this data for internal statistics and marketing — knowing where our players are so we can decide on languages and event times — and to prevent fraud (for example, accounts created in bulk). It is not shared with anyone and is not used for advertising. The legal basis is legitimate interest (LGPD, art. 7, IX): you may object and ask us to delete this data at any time by writing to support@tioneves.com.
IP Geolocation by DB-IP — DB-IP City Lite database, licensed under CC BY 4.0.
2.2 Playing as a guest
You can start playing as a guest without providing an e-mail, a name or any sign-up data: the server creates a random account identifier just to save your progress (the technical data in the table above — access, device and approximate location — also applies to guests).
- On Android (Google Play and the APK from our website), after a level set for each game, the game asks you to link an account (e-mail, Google or Facebook) to keep progressing. Your progress, items and purchases are preserved: the linked account is the same as the guest account.
- On iPhone, the single-player game remains fully open to guests. Only account-based features — chat, friends, appearing on the public leaderboard and gifts between players — ask you to create or link an account.
3. Payment data: who keeps what
Card number, expiry date and CVV never reach our servers. They are typed directly into the payment processor’s environment and stay with it. We only receive the result: payment approved or declined, amount, currency, date, transaction identifier and, at most, the card brand and last four digits, when the processor provides them.
Details on how payments work are in the Secure Purchase Policy (in Portuguese).
4. Who we share data with
- Payment processors — Stripe (credit cards) and, in Brazil, our contracted Pix provider. They receive what is needed to charge and confirm the transaction.
- Social sign-in providers — Google and Facebook, when you choose to sign in with them.
- Infrastructure — server, transactional e-mail and notification providers, engaged as processors and bound to follow this policy.
- Other players — see only what is public in the game: nickname, character name, profile picture, rankings and the messages you send in Global chat. Private ZUG conversations are not public. Your e-mail is never shown to another player.
- Authorities — when there is a court order or a legal obligation.
We do not sell your data, we do not do behavioral advertising and we do not pass our player base to third parties for marketing. Approximate location (country, region and city) stays with us only.
5. International transfers
Some processors (payment processor and social sign-in providers) handle data outside Brazil. The transfer takes place to perform our contract with you and under these providers’ contractual safeguards, as set out in articles 33 et seq. of the LGPD.
6. How long we keep data
- Account and progress: for as long as the account exists.
- Accounts inactive for one year: an account with no access for one year is deleted automatically, by the same routine as “Delete my account”. When the account has a contact (a verified e-mail or allowed notifications), we warn you 30 days and 7 days before; just play again to cancel the deletion. This rule does not apply to accounts that have made a real-money purchase — they are not deleted for inactivity, to guarantee what was bought —, nor to staff accounts and app store review accounts, nor to accounts under an open fraud or abuse investigation.
- Approximate location: the one from sign-up and the one from the most recent access, for as long as the account exists (or until you ask us to delete this data).
- Access log (IP, date and time): at least 6 months, as required by article 15 of the Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet).
- Purchases and receipts: 5 years after the transaction, for tax obligations and for defense in any dispute.
- Record of acceptance of the legal documents (accepted version, date, IP): for as long as the account exists — it is the proof that the contract was accepted. It is deleted together with the account.
- Chat and moderation: up to 12 months.
- After an account is deleted, only the minimum required by law remains, without the data that identifies you in the game.
7. Your rights (LGPD, art. 18)
You may request, free of charge: confirmation that we process your data; access and a copy; correction of incomplete or wrong data; anonymization or deletion of unnecessary data; portability; information on who we share data with; and withdrawal of consent (for example, turning off notifications). You may also object to processing based on legitimate interest, such as IP-based approximate location. Write to support@tioneves.com from the e-mail registered on your account — that is how we confirm the request is yours — and we will reply within 15 days.
Deleting your account erases your progress and your virtual currency balance, and it cannot be undone. Unused virtual currency is not converted into money on voluntary deletion.
8. Security
All traffic of the portal and the games uses HTTPS. Passwords are stored only as a hash. Administrative access is restricted and logged, keys are kept outside the code, and there are attempt limits on the login, sign-up and password recovery routes. No system is 100% secure: in case of an incident with relevant risk, we will notify you and the Brazilian Data Protection Authority (ANPD), as required by article 48 of the LGPD.
9. Cookies and local storage
We use a session cookie to keep you signed in and the browser’s local storage for preferences (language, audio, Forja Abissal local save, Nexara guest profile, referral code). We do not use advertising cookies or cross-site tracking. The Google and Facebook sign-in libraries may set their own cookies when you use those buttons.
10. Children and teenagers
Minimum age is 13. We do not ask for or display sensitive data of minors, and we recommend that parents and guardians supervise the use of chat and purchases. Accounts identified as belonging to children under 13 are closed and deleted.
11. Ownership of the games and trademarks
This policy is about your data. It does not give you any right over the games: exercising your rights as a data subject (access, correction, deletion) gives no right to the code, art, characters, names or trademarks, which remain the property of G e Soluções e Eventos LTDA.
All material in our games belongs to G e Soluções e Eventos LTDA, registered under Brazilian company number (CNPJ) 46.647.904/0001-04: the source code, the art, the soundtrack and sound effects, the characters, the texts, the name of each game and the trademarks — including “GE Games”, “TioNeves”, “ZUG”, “Távola Redonda”, “VÉRTICE”, “Império Palito”, “A Ilha”, “Forja Abissal”, “Astralia”, “Orivana” and “Nexara: Convergência”. Any game, trademark or content published on the portal after this version also belongs to G e Soluções e Eventos LTDA, even if it is not named here.
None of this is licensed to you. Creating an account, playing, taking part in rankings or buying virtual currency gives you a personal, revocable and non-transferable right of use within the game — it does not transfer ownership, does not create co-ownership and does not create any right over the code, art, characters, name or trademark. You may not copy, modify, decompile, reverse engineer, resell, redistribute, stream commercially, use to train artificial intelligence models, register as your own, use in the name of a product, company or channel, or run an unofficial (“pirate”) server of any of our games.
The only exceptions are the ones we declare: some icons come from game-icons.net and some third-party art packs (for example Kenney and Liberated Pixel Cup, used in A Ilha) remain under their authors’ licenses, credited inside the game. This does not change the ownership of everything else.
What you submit — nickname, profile picture, messages and reports — remains yours, under the player-content section of the Terms of Service (in Portuguese). To report misuse of our trademarks or content: contato@entexp.com.br.
12. Changes to this policy
This is version 1.3, dated October 8, 2026. What version 1.3 added:
- approximate location (country, state/region and city) calculated from the IP address with an offline database, without GPS, without storing any additional IP and without sharing (section 2.1);
- automatic deletion of accounts inactive for one year, with prior notices and the exceptions in section 6;
- the guest rules on Android and iPhone (section 2.2);
- A Ilha in the list of apps, and the English and Japanese versions of this policy.
The change is announced here on the portal, with the date and the summary above. Because it relies on legitimate interest and on retention periods, with no new sharing, we do not ask for a new acceptance: the acceptance you already gave remains valid, and you may object to approximate location at any time. Version 1.2 had added the identification of each app, of the developer on Google Play (Raphael Neves) and of the controller’s address. We keep a record of which version each player accepted. Changes that require a new acceptance are announced on the portal and inside the games.
Family and shelter in ZUG (from version 2.28.0)
The server records the identity, name, breed, age, needs, care and adoption of each puppy. Each account can look after up to three animals, one of them as the main one. The feeder is optional and off by default; when authorized for an animal, each automatic meal served costs two in-game coins. Without enough balance, there is no meal and no charge. The authorization and the meal record prevent repeated charges.
A puppy left abandoned for a long time and in critical condition is taken in by the public shelter. Other players can see only the animal’s name, appearance, age, needs and shelter deadline. We do not show the former owner’s name, e-mail, account identifier, purchases, balance or private memories. The former owner can rescue the animal, and other players can adopt it by paying the coin fee shown before confirmation. The animal’s identity and age are preserved, but the owner’s private belongings and data are not transferred.
The shelter period is 360 days of in-game age from entering the shelter. In the current settings, each day of age corresponds to two real hours; the deadline is recorded by the server at entry. If the animal is neither rescued nor adopted by the end of the period, it passes away and stays in the former owner’s memorial. Notifications report sheltering, adoption and passing.
You can report a name on the shelter card itself. The card is hidden for whoever reported it; the team can replace only the publicly displayed name, without deleting the animal. Deleting an account removes its animals and their care data, including those still in the shelter. An animal already adopted by another account stays with its new owner; we remove the personal reference to the deleted owner. The general rules of this policy on security, rights and backups continue to apply.
ZUG conversations and team (2.32.0)
Global chat is public in the neighborhood. Private conversations are optional and available only to the two participating accounts. The server stores text, sender, recipient, sequence, time and read acknowledgement to deliver conversations, recover earlier messages and show unread counts. Real-time wake-ups carry no private text. Drafts stay in app memory and are erased on sign-out or account changes.
Both participants need registered accounts; rules must be accepted before sending. The service filters inappropriate words and limits frequency. Blocking denies access and sending in both directions. Reporting sends the team only the actual message identified by a participant; being a GM or administrator does not allow browsing unreported private conversations. Account deletion removes private conversations, including the other participant's copy. Already reported evidence and minimal security records follow this policy's general retention rules; no additional chat retention period is promised.
The owner manages an operational team exclusively for ZUG. Permissions are revocable and every action is verified and logged with actor, reason, recipient and result. Bounded gifts use mail and one-time claims. The team gains no access to credentials, finances, other services or unreported private messages. ZUG has no guild system.