Privacy Policy

Last updated: 2026-09-23

1. Who we are

Jogali is a platform of free online games that run in your browser. This policy explains what data we process, why, and your rights under Brazil’s LGPD (Law 13,709/2018) and, where applicable, the EU GDPR.

Data controller: the operator of Jogali. Privacy contact: [email protected].

2. What data we use

If you sign in with Google: your name, email, profile photo and Google account identifier. That is all we receive from Google. We never receive or store your password.
Login session: a random code kept in a cookie on your device (our database only stores an irreversible version of it), a broad device category (computer, phone or tablet), a broad browser category, and the dates your account was created and last used.
Preferences: the language you chose.
Profile (optional): a nickname, a phone number (with country code) and a birth year, if you choose to add them in Preferences. You can delete each one at any time.
Ranking: when you are signed in, your best scores in each game and your nickname (or the first name on your Google account) appear in that game’s public ranking. Your email, photo and phone number do not appear.
Approximate country: inferred by our delivery network (Cloudflare) from your connection. We do not store your IP address and we do not ask for your location.
On your device: game progress, high scores, settings and favorites are kept in your browser’s local storage. Apart from scores sent to the ranking, this is not sent to our servers.
Who is online (even without an account): while a Jogali page is open, the browser reports every minute which page or game is open. For this we store a random code created in your browser (not your name, e-mail or IP), the device and browser category, the approximate country and the times. If you are signed in, the report is linked to your account.
Ads: some games show Google AdSense ads (for example an optional video in exchange for extra moves, or an ad between levels). Google may use cookies and device identifiers to serve and measure ads. By default we show non-personalized ads. We do not show ads to administrators or to people with an ad-free plan.

3. Why we use it

Legal bases: providing the service you asked for, our legitimate interest in security and, where indicated, your consent.

To create and maintain your account and let you sign in securely.
To protect the service from abuse (for example, limiting repeated login attempts).
To remember your language and show your name and photo while you are signed in.
To build the game rankings (nickname and score). Your phone number and birth year, if provided, are used for contact, account security and adapting the service to your age; we do not send messages without your consent.
To know how many people are online, in which games, and how many visitors the site gets per day, to look after the service and improve the games. Only the administration sees this, as numbers and lists; the random code does not reveal who you are.

4. Cookies and local storage

We only use what is needed to run the service: the login session cookie, a simple indicator that you are signed in, and a temporary security code used during sign-in. Local storage keeps your language, favorites, game progress and the random visitor code used to count who is online.

Google ads may use advertising cookies. In countries that require consent (such as the European Union) Google shows a notice so you can choose. You can also manage ads at adssettings.google.com. Accounts of people under 18 only get non-personalized ads, and for under 13 we apply child-directed treatment.

5. Who we share it with

We do not sell your data. We rely on providers needed to run the service: Cloudflare (hosting, content delivery, database and security) and Google (Sign in with Google and web fonts). These providers may process data in other countries under the safeguards they offer.

For ads, Google (AdSense) receives technical data from your device and the page; we do not send it your name, email or phone number.

6. How long we keep it

Account data is kept while the account exists. "Online" reports are deleted within 30 days and the daily visitor count within 120 days. Login sessions expire within 30 days (8 hours for administrator accounts). When you delete your account we erase the data linked to it, except what the law requires us to keep.

7. Your rights

You may ask for confirmation that we process your data, access, correction, anonymization or deletion, portability, information about sharing, and withdrawal of consent. You may also complain to your data protection authority (in Brazil, the ANPD).

To exercise any right, write to [email protected]. We are building export and account-deletion buttons into your profile; until then we handle requests by email.

8. Children

You can play without an account. Signing in requires a Google account; children’s accounts are managed by their guardians, and children should sign in only with a guardian’s permission. We do not ask for children’s data beyond sign-in.

9. Security

We use HTTPS, cookies that scripts cannot read, session codes stored only in irreversible form, and rate limiting. No system is 100% secure, but we work to protect your data.

10. Changes to this policy

When Jogali starts collecting something new we will update this page and the date above. Relevant changes will be announced on the site.