1. Who processes your data
GiftGameCraft turns a person's photo into a video game character, made to order as a gift. The data controller is Lives Voz, CNPJ 07.149.840/0001-84, Rua São Bento do Sapucaí, 145 — São Paulo/SP — CEP 03542-050.
For anything about privacy, write to korra.jogos@gmail.com.
2. What we collect
From the customer (the person buying the gift):
- name and relationship to the person receiving the gift;
- e-mail, when provided — optional, used to let you know the game is ready;
- what you write in the form: nickname, pronoun, tone, three things the person loves, chosen villains, inside joke, life milestones and the final message;
- IP address and timestamp, recorded together with your consent;
- if you create an account: e-mail, name and password (stored only as a hash, never as text).
From the person in the game:
- the photo you upload and what the automatic analysis extracts from it in order to draw the character (hair colour and style, face shape, glasses, skin tone). This analysis is used only for the drawing.
We do not ask for and do not want: identity documents, bank or card details, health data, biometrics for identification, precise location, or any data about children without their guardian's permission.
3. What we use it for
- Creating the game you ordered: the character, the cover, the story and the final message.
- Telling you how your own order is going (transactional e-mail).
- Sending news and offers — only if you tick that box, and you can untick it whenever you want.
- Keeping the history of your orders, if you create an account.
- Security and abuse prevention (usage limits, IP logging on submissions).
We do not sell personal data. We do not use customer photos to train models, and we do not publish them anywhere.
4. Legal basis
- Performance of a contract: the form data and the photo, without which the game cannot exist.
- Consent: using the photo of the person in the game, and sending marketing communications. Both are recorded with date, time, IP and the exact text you read.
- Legitimate interest: service security and abuse prevention.
- Compliance with a legal obligation, where applicable.
Whoever uploads a photo declares they have permission from the person in it. If you appear in a photo someone else uploaded without your permission, write to korra.jogos@gmail.com: we delete the material and the game.
5. Who we share it with
- Hosting: the site and files live on a server we contract.
- Artificial intelligence: the artwork and text may be generated on the owner's own computer (in Brazil, with nothing leaving the machine) or through the Google Gemini API, depending on the option chosen while producing your order. When the cloud is used, the photo and the form data are sent for processing and are not used by us for any other purpose.
- E-mail: a sending provider, when you give us an e-mail address.
There is no selling, renting or trading of data with advertisers.
6. International transfer
When an order is generated by cloud AI, personal data is transferred to servers outside Brazil for the sole purpose of producing the artwork and text of your game. When the order is generated locally, nothing leaves Brazil.
7. How long we keep it
- The copy of the photo used to generate the game is deleted as soon as the game is ready; the photo on the form is automatically deleted within 90 days.
- The game files (character, cover, texts) stay for as long as the game link exists — that is the gift you bought. You can ask for deletion at any time.
- Consent records are kept for as long as they are needed as proof of that consent.
- Account data is kept until you ask us to delete it.
8. The game link is public
The finished game lives at a public address with no password: anyone with the link can play it and see the photo turned into a character, the name and the final message. The address is random and not indexed by search engines, but treat it as a private link — share it only with whoever you want.
9. Your rights
You may ask for: confirmation that we process your data, access to it, correction, anonymisation or deletion, portability, information about who we share it with, and withdrawal of consent at any time.
To exercise any of these, write to korra.jogos@gmail.com. We answer within 15 days. Withdrawing marketing consent is even simpler: untick the box in your account, or follow the unsubscribe instructions in the footer of any e-mail we send.
10. Security
Photos are stored outside the site's public area and are only accessible to authenticated staff. Passwords are stored as hashes (pbkdf2), never as text. The production panel is password protected. No system is perfect: if a relevant incident happens, we notify the people affected and the authority.
11. Cookies
We use only necessary cookies: the one that keeps you signed in and the one that remembers your chosen language. No advertising or cross-site tracking cookies.
12. Children and teenagers
Games featuring a child's or teenager's photo may only be ordered by someone with legal responsibility for them. By uploading the photo you declare you have that permission. If we learn you did not, we delete everything.
13. Changes to this policy
If we change anything relevant, we update the date at the top of this page. The version published here is the one that applies.
14. If you live in the European Union or the United Kingdom
If you are in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR, and the UK GDPR) also applies to what this policy describes. The controller is Lives Voz, CNPJ 07.149.840/0001-84, Rua São Bento do Sapucaí, 145 — São Paulo/SP — CEP 03542-050.
- Making and delivering the game you bought: performance of a contract (GDPR art. 6(1)(b)).
- Sending news by e-mail, only if you ticked the box: consent (art. 6(1)(a)), which you can withdraw at any time.
- Keeping the service secure and preventing fraud: legitimate interest (art. 6(1)(f)).
The photo is used only to draw the character. We don't use it to recognise or identify anyone.
You have the right to access, correct, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent. Write to korra.jogos@gmail.com: we answer within the same time as in section 9.
The business is based in Brazil, and the providers named in this policy (such as Google, which draws the character) may process the data outside the EU and the UK. We only send what is needed to make and deliver the game.
You can also complain to the data protection authority of the country where you live.