Curling Master · by SentiuS Group

Privacy Policy

Last updated: October 2, 2026

This Policy explains how Curling Master, a game operated by SentiuS Group ("we"), processes the personal data of those who use the game ("you"), in line with Brazil's General Data Protection Law (LGPD). By creating an account or using Curling Master, you agree to the practices described here.

1. Who is the controller

The data controller is SentiuS Group, responsible for Curling Master. For any privacy matter or to exercise your rights, contact us at sentiusgroup@sentius.org.

SentiuS Group — CNPJ 63.600.284/0001-77 — D-U-N-S® 57-532-0273.

2. Data we collect

Account data

When you sign up by email or with Google, we process your email and, in the case of Google, your profile picture. We do not import your name from Google: your account starts with a generic name, and the display name is chosen by you on the Profile screen. Authentication is handled by Supabase. We also generate a friend code, a public identifier meant for you to share with people you want to add.

Profile

We process your display name — chosen by you, not imported from another service — your picture and your country flag. Preferences such as stone skin, difficulty, language, audio and aim type are kept on your device, not on our servers.

Country and flag

To show your flag, the game derives a two-letter country code from your device: the code of the SIM card, that of the registered mobile network, or, failing those, the system language. No permission is requested and we do not use GPS or precise location — we do not know where you are, only which country the device is associated with. You can choose your flag manually on the Profile screen, and a manual choice always overrides automatic detection.

Social features

When you use the friends list and online matches, we process your friendships (who you added and who added you), the invites you send and receive, and the date of your last access, used to show your friends that you are online.

Economy and matches

We process your coin wallet and its transaction history (amount, reason and date — check-in, task, wager, prize), your daily check-in and task progress, your ranking (global and weekly) and the history of your online matches: opponent, score, winner and the throws played. Throws are recorded so a match can resume after a connection drop and so results can be checked for consistency.

Pro plan

When you have Pro access, we record the source and date of the grant — the paid subscription or the Founders Campaign — in order to know how long the access lasts.

Purchase data

The Pro subscription is sold and processed by Google Play. Payment data is handled directly by Google: we do not receive or store your card details. What we keep is the subscription record — the purchase identifier provided by Google, the product, the status (active, cancelled or on hold) and the expiry date — used to grant and maintain your Pro access, and so we can help you if a payment is not reflected in the game.

Technical, usage and ad data

To operate and protect the game, we process session identifiers, technical logs and usage counters. The app includes the Google AdMob ads SDK; when ads are active, it collects and shares data with Google, as described in section 11.

3. What other people can see

Part of the game is social and competitive, so some profile information is shown to other players. This is the complete list:

To all players, in the ranking list: your display name, your flag, your rating and up to two badges. There are two kinds of badge: status badges — Founder (for those who joined the launch campaign) and Pro (while the subscription is active), which means the ranking indicates whether you are a subscriber — and achievement badges, which reveal that you reached a milestone in the game, such as a number of wins or matches, a winning streak or a given level. You choose which ones to show, on the Profile screen; the Founder badge, for those who hold it, is always shown. This applies only to players who have played at least one ranked match (those in random online mode).
To your opponent in an online match: your display name and your flag.
To your friends: your display name, your profile picture, your flag and an indication that you were recently online.

Never shown to other players: your email, your coin balance, your wallet history, your task progress, your friends list and your detailed statistics — matches, wins and win rate per game mode are visible only to you, on your Profile screen. Achievement badges only indicate that a milestone was reached, not your actual numbers. If you would rather not appear in the public ranking, simply do not play random online matches — every other mode remains available. You can also change your display name at any time on the Profile screen; it passes through an automatic filter for offensive terms when saved.

4. How we use your data

Authenticate you and maintain your session (including offline versus-computer play after the first sign-in).
Save your profile and progress, and enable online matches, invites and the friends list.
Run the game economy: credit check-ins and tasks, debit and pay out match wagers, and keep the ledger that makes every movement auditable.
Calculate and display the global and weekly ranking.
Enforce usage limits, prevent cheating, result manipulation and multiple accounts, and ensure security.
Process the subscription and unlock the Pro plan's perks.
Show ads, when active, measure their performance and prevent ad fraud.
Comply with legal obligations and respond to authorities.

5. Legal bases (LGPD)

Performance of a contract: to provide the game and the features you use, including the online modes, the coin economy and the ranking.
Consent: for social login and for personalized ads, where applicable.
Legitimate interest: for security, abuse and fraud prevention, and service improvement.
Legal obligation: where required by law.

6. Who we share with

We do not sell your data. We share the minimum necessary with processors that make the game possible:

Processor	Purpose
Supabase	Authentication and database (account, profile, friendships, matches, wallet and ranking) — São Paulo, Brazil region
Google	Google sign-in; Google Play (distribution and purchase billing); ads (Google AdMob), when active — see section 11
Cloudflare	Hosting of support pages (login callback, password reset, these documents)

Each processor handles data under its own policies and only for the purposes above. In addition, part of your profile is shown to other players inside the game, exactly to the extent described in section 3.

7. International transfer

The main database (Supabase) is located in São Paulo, Brazil. Some processors (for example, Google and Cloudflare) may handle data on servers outside Brazil. By using the game, you acknowledge this transfer, which relies on contract performance and the safeguards of each processor.

8. How long we keep it

We keep your data while your account exists and for as long as needed for the purposes of this Policy or legal obligations. When you delete your account, the associated data — profile, friendships, wallet and ledger, check-in and task progress, ranking and matches — is erased or unlinked from your account, except what the law requires us to keep (such as payment/tax records).

9. Your rights and account deletion

Under LGPD article 18, you may request: confirmation and access to your data; correction; anonymization, blocking or deletion; portability; information about sharing; and withdrawal of consent.

You can delete your account at any time — within the app (main menu → your profile picture → Delete account) or by writing to sentiusgroup@sentius.org. Deletion removes your profile, wallet, progress, ranking and matches from our servers. It is permanent: your coin balance and progress cannot be recovered or transferred to another account. The full step-by-step, including what is and is not deleted, is at Delete your account.

10. Security

We apply technical and organizational measures to protect your data, including row-level security (RLS) in the database and token-based authentication. Wallet movements happen only on the server, through controlled routines — the app cannot change your balance. In the app, only the backend's public key is used, and your session is stored on the device itself. No system is fully immune; in the event of a relevant incident, we will act in accordance with the LGPD.

11. Ads

Curling Master uses Google AdMob to show ads in the menus — never during a match. Ads may be switched off for periods of time; while they are, the ads SDK is not started.

When ads are active, Google's SDK collects and shares with Google: the advertising identifier and other device identifiers, approximate location (derived from your IP address, never your precise location), crash and diagnostic logs and your interactions with ads. This data is used to show and measure ads, produce analytics and prevent fraud, under Google's policy.

Where the law requires consent (for example, in the European Economic Area and the United Kingdom), a Google consent form appears before any ad, and you can review your choice at any time in Settings → Ads → Ad privacy options. You can also reset or delete the advertising identifier in your Android settings. The Pro plan removes ads, and no game feature depends on accepting personalized ads.

12. Minors

Curling Master is not directed to people under 13, and we do not knowingly collect data from children. Users aged 13 to 18 must use the game with a legal guardian's consent. If we identify a child's data, it will be deleted.

13. Changes to this Policy

We may update this Policy. The date at the top indicates the current version. Material changes will be communicated through the means available in the game.

14. Contact

Questions, requests or exercising rights: sentiusgroup@sentius.org.