Curling Master · by SentiuS Group
Last updated: August 20, 2026
This Policy explains how Curling Master, a game operated by SentiuS Group ("we"), processes the personal data of those who use the game ("you"), in line with Brazil's General Data Protection Law (LGPD). By creating an account or using Curling Master, you agree to the practices described here.
The data controller is SentiuS Group, responsible for Curling Master. For any privacy matter or to exercise your rights, contact us at sentiusgroup@sentius.org.
SentiuS Group — CNPJ 63.600.284/0001-77 — D-U-N-S® 57-532-0273.
When you sign up by email or with Google, we process your email and, where the provider supplies it, your name and profile picture. Authentication is handled by Supabase. We also generate a friend code, a public identifier meant for you to share with people you want to add.
We process your display name, your picture and your country flag. Preferences such as stone skin, difficulty, language, audio and aim type are kept on your device, not on our servers.
To show your flag, the game derives a two-letter country code from your device: the code of the SIM card, that of the registered mobile network, or, failing those, the system language. No permission is requested and we do not use GPS or precise location — we do not know where you are, only which country the device is associated with. You can choose your flag manually on the Profile screen, and a manual choice always overrides automatic detection.
When you use the friends list and online matches, we process your friendships (who you added and who added you), the invites you send and receive, and the date of your last access, used to show your friends that you are online.
We process your coin wallet and its transaction history (amount, reason and date — check-in, task, wager, prize), your daily check-in and task progress, your ranking (global and weekly) and the history of your online matches: opponent, score, winner and the throws played. Throws are recorded so a match can resume after a connection drop and so results can be checked for consistency.
When you have Pro access, we record the source and date of the grant (for example, the Founders Campaign) in order to know how long the access lasts.
Purchases and the subscription, where offered, are processed by Google Play. Payment data is handled directly by Google; we do not receive or store your card details — only the confirmations and identifiers needed to grant your access.
To operate and protect the game, we process session identifiers, technical logs and usage counters. The game currently shows no ads. Should they be enabled, the ad provider may use your device's advertising identifier (see section 11).
Part of the game is social and competitive, so some profile information is shown to other players. This is the complete list:
We do not sell your data. We share the minimum necessary with processors that make the game possible:
| Processor | Purpose |
|---|---|
| Supabase | Authentication and database (account, profile, friendships, matches, wallet and ranking) — São Paulo, Brazil region |
| Google sign-in; Google Play (distribution and purchase billing); ads (Google AdMob), should they be enabled | |
| Cloudflare | Hosting of support pages (login callback, password reset, these documents) |
Each processor handles data under its own policies and only for the purposes above. In addition, part of your profile is shown to other players inside the game, exactly to the extent described in section 3.
The main database (Supabase) is located in São Paulo, Brazil. Some processors (for example, Google and Cloudflare) may handle data on servers outside Brazil. By using the game, you acknowledge this transfer, which relies on contract performance and the safeguards of each processor.
We keep your data while your account exists and for as long as needed for the purposes of this Policy or legal obligations. When you delete your account, the associated data — profile, friendships, wallet and ledger, check-in and task progress, ranking and matches — is erased or unlinked from your account, except what the law requires us to keep (such as payment/tax records).
Under LGPD article 18, you may request: confirmation and access to your data; correction; anonymization, blocking or deletion; portability; information about sharing; and withdrawal of consent.
We apply technical and organizational measures to protect your data, including row-level security (RLS) in the database and token-based authentication. Wallet movements happen only on the server, through controlled routines — the app cannot change your balance. In the app, only the backend's public key is used, and your session is stored on the device itself. No system is fully immune; in the event of a relevant incident, we will act in accordance with the LGPD.
Curling Master currently shows no ads. Should they be enabled, we will use Google AdMob. Ads may use your device's advertising identifier for measurement and, where applicable, personalization. We will ask for your consent where the law requires, and you can reset or limit the advertising identifier in your Android settings. The Pro plan removes ads. No game feature depends on accepting personalized ads.
Curling Master is not directed to people under 13, and we do not knowingly collect data from children. Users aged 13 to 18 must use the game with a legal guardian's consent. If we identify a child's data, it will be deleted.
We may update this Policy. The date at the top indicates the current version. Material changes will be communicated through the means available in the game.
Questions, requests or exercising rights: sentiusgroup@sentius.org.