Privacy

This Policy explains how Onrizon Social Games ("Onrizon" or "we") processes personal data in Gartic Rush. Onrizon is responsible for decisions regarding this processing. Privacy questions and requests may be sent by email to Gartic Team.

Gartic Rush does not offer registration or account creation. To play, you choose a nickname and an avatar and join a room.

To organize the game, we process your chosen nickname and avatar, the room code, session identifiers, drawings, answers, results, and game events. Nicknames and content may be visible to other participants. Avoid entering information that identifies you or other people.

Internet access involves an IP address and technical connection information, such as the date, time, and browser characteristics. These data are separate from a personal account. Processing necessary during a session does not mean that all content is stored permanently. Retention criteria are described under "Retention and Deletion."

We use Google Analytics to understand our audience, assess performance, and improve Gartic Rush. Depending on the configuration used, the data processed may include the number and duration of visits and sessions, pages and features accessed, interaction events, traffic sources, approximate country or region, language, browser, operating system, device type, and performance information.

Cookies and pseudonymous identifiers may distinguish a browser or session without directly revealing a person's name. These data are not automatically anonymous. IP addresses may also be processed in communications with providers, depending on the service and its configuration; this does not mean they are necessarily retained in analytics reports. Aggregated statistics and individual or pseudonymous data are handled differently.

Google Analytics is provided by Google. Please see the Google Analytics privacy information and Google's Privacy Policy. As Gartic Rush has no accounts, there is no registration email address or account profile to link to the statistics. The data processed depends on the features used, service settings, and applicable privacy choices.

If you contact us, we will receive your email address, your message, and any attachments you choose to send. This information will be used to respond, provide support, review reports, fulfill rights requests, and meet obligations relating to your request. Contacting us does not create an account in the game.

Information may be provided by you during a game or a support interaction, generated automatically during use, received from analytics and advertising providers, or submitted by other participants in a report. Avoid sending documents, sensitive data, or information about others unless necessary. If we need additional information, we will explain why.

We process data for specific purposes and on the legal basis required by applicable law.

• Game Operation and Support: connecting participants, organizing rooms, running games, and responding to service-related requests. Only the data necessary to provide the requested service is used, relying on a contractual legal basis where applicable.
• Analytics and Optional Technologies: measuring audience, performance, and feature usage. When the law requires consent to collect information on a device or use identifiers, that consent must be obtained before the relevant technology is activated.
• Limited Statistics and Service Improvement: where personal data are still involved, legitimate interests may be relied on only after assessing necessity, proportionality, and the impact on your rights. This legal basis does not replace consent required under cookie or electronic privacy rules.
• Security and Abuse Prevention: protecting participants and infrastructure, identifying failures, investigating reports, and preventing fraud or interference with the game. Such processing must be necessary and proportionate and have an appropriate legal basis, including legitimate interests where applicable.
• Obligations and Rights: meeting legal retention duties, responding to valid requests from authorities and data subjects, and retaining information necessary to defend legal rights, subject to the grounds and limits of each applicable law.

Advertising: funding the service, displaying ads, measuring their display, and managing frequency and fraud. Personalization, tracking, or storage on a device requires consent where legally required. Contextual advertising also requires a lawful basis for any data processing; the absence of personalization does not remove this obligation.

Cookies, local storage, and similar technologies may maintain sessions, remember preferences, measure usage, and enable advertising. Only strictly necessary technologies are used for the requested functionality and security. Optional analytics and advertising technologies follow privacy choices and applicable legal requirements.

When consent is requested, the corresponding technologies will be activated only after you make your choice. In these cases, you may accept or reject optional purposes and change or withdraw your consent through the service's privacy controls. Withdrawal does not affect the lawfulness of processing carried out previously.

You may also delete or block cookies in your browser settings. Blocking essential technologies may affect your session; refusing optional analytics or personalized advertising should not prevent access to essential features. Continuing to browse or accepting the Terms of Use does not replace specific consent required by law.

Gartic Rush displays ads served by Onrizon or advertising partners. Depending on the service used and your choices, the data processed may include technical data, browser or device identifiers, approximate location, impressions, clicks, frequency, and interactions with ads. Personalized advertising and cross-site tracking are subject to consent or opt-out mechanisms where required by applicable law.

Contextual or non-personalized ads may be displayed when their implementation respects your choices and legal requirements. Even these ads may involve technical data for delivery, measurement, or fraud prevention. We do not conduct profiling to target commercial advertising at children or adolescents. Services accessed through ads or links have their own policies.

We may share necessary information with hosting, infrastructure, security, analytics, advertising, and support providers. When processing data on our behalf, they must follow our instructions and comply with obligations regarding confidentiality, security, and assistance in exercising rights. Some partners may act as independent controllers for their own purposes, which must be identified and disclosed.

Recipients include Google, the provider of Google Analytics, and providers of hosting, infrastructure protection, support, and advertising. Access must be limited to the data necessary for the relevant activity. Third-party services accessed through ads or links have their own privacy policies and controls.

Information may also be shared to meet legal obligations, comply with valid orders, protect people, and exercise rights, subject to requirements concerning necessity, competent authority, confidentiality, and judicial authorization where required. Statistics will be treated as anonymous only when they do not reasonably allow identification.

We retain information for as long as necessary for the stated purposes, taking into account service operation, pending requests, legal requirements, and the defense of rights. The absence of an account does not mean that all records are deleted immediately:

• Session and Game Data: processed to enable the game to function and retained only for as long as necessary for operation, troubleshooting, security, or compliance with legal obligations. As there is no registered account, retention does not depend on an account closure request.
• Analytics and Advertising: subject to the retention periods configured in the tools, providers' policies, and applicable legal limits. Onrizon seeks to use the shortest possible period consistent with the stated purposes. Effectively anonymous statistics may be retained for historical comparisons.
• Cookies and Device Storage: locally stored information remains for the lifetime of the technology used and may expire at the end of a session or later. You may delete it in your browser settings without affecting records that must be retained separately for legal reasons.
• Contacts, Reports, and Privacy Requests: retained for as long as necessary to handle them and resolve any resulting matters, taking into account the need to demonstrate our response, prevent abuse, meet obligations, and exercise rights.

Once the purpose has ended and there is no basis for further retention, the data will be deleted or effectively anonymized. If a deletion request cannot be fully fulfilled because of a legal obligation or another applicable exception, we will explain why and limit the use of the retained data.

To operate an internationally accessible service, data may be processed outside your country of residence, including in Brazil and in countries where our providers maintain infrastructure, such as the United States. These operations may be necessary for hosting, support, security, analytics, and advertising. A provider's location does not remove the protections required by applicable law.

You may request information about the countries where processing takes place, as well as a copy of the relevant safeguards, through our privacy contact channel, subject to legal confidentiality restrictions.

Onrizon must maintain technical and administrative measures appropriate to the nature of the data and the risks involved, including access controls and measures to protect communications and infrastructure. Access must be limited to people and providers who need it for the stated purposes. No system eliminates all risks, but this does not remove our responsibilities.

Incidents will be assessed and addressed in accordance with applicable laws. Where notification is required, we will notify the competent authorities and affected individuals within the time limits and in the manner required in each jurisdiction.

Your privacy rights may vary depending on the law applicable to the processing of your data. We respect the rights of access, rectification, deletion, portability, restriction of processing, and objection to processing, as well as withdrawal of consent, under the conditions provided by law.

Where applicable, you may also opt out of the use of your data for targeted advertising, sale, or advertising-related sharing, submit requests through an authorized representative, and challenge decisions relating to the exercise of your rights. Recognized privacy preference signals will be respected when required by law.

Requests will be reviewed and answered within the applicable legal time limits. Any limitations, refusals, or extensions will be communicated with an appropriate explanation. You may also lodge a complaint with the data protection authority or another competent body.

Nothing in this Policy limits the rights provided by applicable law. To exercise your rights or obtain guidance, contact us at team@gartic.com; no account is required.

We may update this Policy to reflect changes to the game, providers, or applicable laws. Material changes will be communicated in an accessible manner on the website or in the game, before they take effect where required. New consent will be requested when necessary; continuing to play does not replace a required choice.

Questions, complaints, and requests concerning personal data may be sent by email to Gartic Team. This channel also receives communications for the person responsible for privacy at Onrizon, as well as requests for information about representatives, as required by law.