Privacy Policy
In plain language: what data the COME TO BRASIL site uses, what for, and how you stay in control of it.
Last updated:
On this page
In short
- You don't need an account, or to give us any data, to use this site.
- Visit and interaction measurement, and any optional advertising cookies, start only after you accept. You can change your choice at any time.
- We don't sell your data.
- Any question or request: [email protected].
Who we are
This site belongs to Venn Studios, a game studio based in São Paulo and the host of COME TO BRASIL. Venn Studios is the controller of the personal data processed here, under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
This policy covers this site only. Steam, the streaming platforms and the event partners' sites have their own policies.
Data you send us
We only receive personal data when you choose to send it:
- Newsletter: once sign-ups open, we'll receive your email address, the page language, and where you signed up (which page, or the booth QR code). For now, the form doesn't send or store anything.
- Messages: if you write to [email protected], we use your address and message only to reply.
We don't ask for your name, ID documents, location or payment details, and the site has no accounts or logins.
What stays in your browser
For basic operation, the site stores preferences and offline copies on your device. After you accept analytics, it also stores a random session identifier. Booth QR attribution accompanies Steam links and newsletter sign-ups; optional analytics vendors receive consented events as described below.
- localStorage: the language you picked and your answer to the cookie notice, so we don't ask again on every page.
- sessionStorage, cleared when you close the tab: whether you arrived through the booth QR code, the notices you closed, the state of the home page carousel, and the live-stream demo mode when it's used.
- Cache Storage: copies of the pages and files you've opened, plus the home and booth pages in your language, saved by the site's service worker so they work offline.
- IndexedDB, after consent: a delivery queue for hub events, limited to 1,000 events and 1 MiB per browser. Unsent events expire after 72 hours and are removed on the next visit or queue operation. The queue clears when you withdraw consent. If browser storage is unavailable, events stay only in page memory.
You can delete all of this at any time by clearing this site's data in your browser settings.
Cookies and measurement
With your permission, we use hub analytics for the purposes described below. Measurement starts only after you press “Accept”. If you decline or leave the notice unanswered, no analytics events are recorded.
- Hub analytics: sends consented page visits, clicks, sanitized link destinations, filter selections and action outcomes to our analytics server. It uses a random session identifier stored in sessionStorage after consent. Event records exclude email addresses, form contents, raw search text, clipboard contents, IP addresses and browser user-agent strings. A bounded browser queue retries delivery after navigation or an offline period.
Your choice stays in your browser for up to 6 months, then we ask again. Withdrawing consent stops measurement, clears the local event buffer and analytics session identifier, and disables optional vendor tracking and deletes its cookies from this site.
Live streams, trailers and external links
- Live streams: the Twitch and YouTube players only load when you tap to watch, and the YouTube one uses youtube-nocookie mode. From then on, the platform may set its own cookies and handle your data under its own rules.
- Trailers: game videos come from Steam's servers and only start loading when you press play.
- External links: when you open a page on Steam, a streaming platform or a partner's site, you leave this site and that service's policy applies. Links to Steam carry campaign parameters (utm_…) that show the visit came from this site and, when it applies, from the booth QR code. They help us measure the event and don't identify you.
- Fonts and images: served by this site itself. We don't use Google Fonts or any other external font service.
Who we share data with
- Hosting: the provider that hosts the site receives the technical data of each visit (such as IP address, browser and requested page), needed to deliver the pages and protect the site from abuse.
- Newsletter delivery: once sign-ups open, your email address will be stored by the email service that sends the newsletter on behalf of Venn Studios.
- Hub analytics: Venn Studios stores consented events in a PostgreSQL database operated by its hosting provider. Optional Google Analytics tracking receives a separate copy when configured. The analytics API uses request IP addresses briefly in memory for abuse control; it does not save them in event records.
- External measurement and advertising: when vendor tools are disabled, no events are sent to Google or Meta.
Some of these services may process data outside Brazil, under the LGPD's rules on international transfers.
We don't sell or rent personal data. We would only share it beyond this if a law or court order required it.
Why we process this data
- Consent (LGPD, art. 7, I): for the newsletter and for measurement and advertising cookies. You can withdraw it at any time, without affecting what was done before.
- Legitimate interest (LGPD, art. 7, IX): for the site's basic operation, such as delivering pages, remembering your preferences in your browser, keeping offline copies, replying to your messages and protecting the site from abuse.
How long we keep it
- Newsletter email: until you unsubscribe (every email will have a link for that) or ask us to delete it.
- Messages: as long as needed to reply and resolve your request.
- Browser data: sessionStorage clears when you close the tab; localStorage and offline copies stay until you clear this site's data. Old copies are replaced with each new version of the site.
- Your cookie choice: up to 6 months.
- Hub event records: deleted after 90 days from server receipt by hourly maintenance while the API is running. Browser delivery copies expire after 72 hours and are removed on the next visit or queue operation. Withdrawing consent clears pending local copies and stops collection; it does not automatically delete events already received.
- Technical access logs: as long as needed for the site's security and for as long as the law requires.
Your rights
Under the LGPD (art. 18), you can ask us at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, and deletion of data processed with your consent;
- portability of your data to another provider;
- information on who we share your data with, and on what happens if you don't give consent;
- withdrawal of your consent.
Just write to [email protected] with the subject “Privacy”. We may ask for some information to confirm the request is yours, and we reply within 15 days. To leave the newsletter, use the unsubscribe link in any email.
If you feel we haven't resolved your request, you can also file a complaint with Brazil's National Data Protection Authority (ANPD) (opens in a new tab).
Children and teens
This is a games site for a general audience: it asks for no data to be used and isn't made especially for children. Some games have a minimum age (Asleep: Act 1, for example, is 14+ on Steam), and each game page shows that age when Steam provides it.
Children under 12 should only sign up for the newsletter with a parent's or guardian's consent. If you're a parent or guardian and believe a child has sent us data, write to [email protected] and we'll delete it.
Changes to this policy
We may update this policy when the site changes, for example when the newsletter opens or campaign measurement is turned on. The date at the top of the page shows the latest update. If a change affects your cookie choice, we'll ask you again.
Contact
Venn Studios, São Paulo, Brazil. For anything about privacy: [email protected].