This Privacy Policy explains how Raphael Collares Toselli, doing business as Forge World Studios ("Forge World Studios", "we", "us"), processes personal data in connection with the Ghostline game, its online services, and this website.
1. Who is responsible for your data
The data controller is Raphael Collares Toselli, located in Vargem Grande Paulista, São Paulo, Brazil. Privacy questions and requests may be sent to legal@forgeworldstudios.net.
2. Data we process
Depending on the features you use, we may process:
- Account and platform data: internal player identifiers, Steam or Google Play Games account identifiers, display name, account-link information, session timestamps, and hashed access credentials.
- Gameplay and leaderboard data: campaign and contract identifiers, run replays, moves and outcomes, scores calculated by our server, leaderboard position, attestation results, and anti-cheat or validation signals.
- Purchases and access: product, package, entitlement and transaction identifiers, purchase-token hashes, processing or acknowledgement timestamps, and records needed to grant downloadable content.
- Rewarded advertising: challenge and reward identifiers, completion status, AdMob transaction identifiers, and reward-processing timestamps. Google may process device and advertising data under its own policies.
- Community features: content you submit, author name, title, tags, versions, files, reports, blocks, moderation status, acceptance of community terms, and related timestamps.
- Technical and security data: IP address, request metadata, service logs, timestamps, device or platform information, and diagnostic or security events made available by our infrastructure and platform providers.
- Communications: your email address and the content of messages you send us.
3. Why we process data
We use this information to provide and authenticate the game and online services; verify purchases and grant content; validate replays and operate rankings; prevent fraud, abuse and cheating; deliver rewarded-ad benefits; publish and moderate community content; respond to support and legal requests; maintain service security; and comply with applicable law.
4. Legal bases
Under Brazil's General Data Protection Law (LGPD), processing may be based on performance of a contract or requested service, compliance with legal or regulatory obligations, our legitimate interests in operating and securing the service, the regular exercise of rights, and consent where applicable. You may withdraw consent where processing depends on it, without affecting prior lawful processing.
5. Public information
Your chosen display name, validated score and leaderboard position may be visible to other players. Community submissions may display the author name, content and associated metadata you chose to publish. Do not use a public display name or submit content that reveals information you wish to keep private.
6. Who receives data
We may share only the information needed with:
- Valve/Steam for distribution, accounts, purchases and platform features;
- Google services such as Google Play Games, Play Integrity, Google Play Billing, AdMob and the User Messaging Platform for their relevant features;
- hosting, database, object-storage, security and infrastructure providers acting for us;
- professional advisers, authorities or other parties when required by law or necessary to protect rights and service security.
These providers may process information under their own terms and privacy policies. We do not sell personal data.
7. International transfers
Some providers may process data outside Brazil. Where required, we use applicable legal mechanisms and reasonable safeguards for international transfers.
8. Retention
We retain personal data only for as long as needed for the purposes described above, including service operation, entitlement records, fraud prevention, dispute resolution and legal obligations. Community content remains available until removed, moderated, or no longer needed, subject to technical backup cycles and legal retention requirements. Data that no longer needs to identify you may be anonymized.
9. Your choices and rights
Subject to applicable law, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability where available, information about sharing, review of certain automated decisions, or withdrawal of consent. You may also object to processing in the circumstances provided by law.
Send requests to legal@forgeworldstudios.net. We may need to verify your identity and retain limited information where the law or protection of our rights requires it. You may also contact Brazil's National Data Protection Authority (ANPD).
10. Cookies and this website
At publication, this website does not use analytics, advertising cookies or account cookies. Our hosting provider may nevertheless create limited access and security logs. If we add technologies that require notice or consent, we will update this Policy and provide the appropriate controls.
11. Children
Our services are not directed to children under 13. Where local law requires parental or guardian authorization for a minor, the responsible adult must provide it. Contact us if you believe a child provided personal data contrary to applicable law.
12. Security
We use reasonable technical and organizational measures intended to protect information, including limited access, hashed credentials or purchase tokens where appropriate, and server-side validation. No system is completely secure, and we cannot guarantee absolute security.
13. Changes to this Policy
We may update this Policy as the game, our services or the law changes. We will publish the revised version here and update its effective date. Material changes may also be communicated through the game or platform where appropriate.
14. Contact
Raphael Collares Toselli / Forge World Studios
Vargem Grande Paulista, São Paulo, Brazil
legal@forgeworldstudios.net