Privacy Policy

Last updated: September 15, 2026

This policy explains what personal data Oferta Games processes, why, who it is shared with and how you can exercise your rights, under the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD).

1. What data we collect

When you create an account

Email sign-up: name, email and password. The password is stored by the authentication provider only in encrypted form; we never have access to it.
Sign in with Google or Discord: name, email and picture that these services share with your permission.

When you use the site with your account

Profile: display name, profile address (e.g. /your-name), bio, picture, banner, and the images and text you add to blocks.
Favorite games, tracked games, price targets and price drop notifications.
Collections, game reviews and votes on reviews.
Your preferences (theme, platform, stores, filters), stored in your own browser.

When you connect Steam or Xbox (optional)

Steam: your SteamID and, from your public Steam profile, your game library, hours played, achievements and wishlist.
Xbox: your Xbox account ID, game library and achievements, obtained through the OpenXBL service.

When you use Contact us

The type and text of your message, the page you opened the form from and, if you're signed in, the link to your account, used to deliver our reply to your notifications.
Images or videos you attach. They are kept on a private server that only the site's administration can access, and are used only to understand what you reported. Avoid attaching screenshots with personal data that isn't needed.

Technical data

IP address and request data (page accessed, date and time), used for security, abuse prevention and error diagnosis, and kept for a limited period in server logs.
When something breaks on the site, a technical report (error message, page and browser type), not linked to your account, used only to fix the problem.
The site does not use advertising cookies or ad tracking. Your login session is kept in your browser's local storage.
Aggregated traffic statistics (pages viewed, country, device and browser type, referring site) through Vercel Web Analytics, and loading speed measurements through Vercel Speed Insights. Neither uses cookies or identifies you individually. They only tell us which pages are used most and where the site is slow.

2. How we use the data

Purpose	Legal basis (LGPD)
Create and maintain your account, favorites, price tracking and notifications	Performance of a contract (art. 7, V)
Display your public profile and the information you chose to show	Consent (art. 7, I), configurable in Settings > Privacy
Import library, hours and achievements from Steam and Xbox	Consent (art. 7, I); you can disconnect at any time
Reply to Contact us messages and use them to improve the site	Legitimate interest (art. 7, IX)
Security, fraud and abuse prevention, and fixing errors	Legitimate interest (art. 7, IX)

We don't sell your data and don't use it for targeted advertising.

3. What is public

If you turn on your public profile, anyone can see at your profile address the information you leave visible: name, picture, banner, bio, blocks, favorites, collections, library, hours played, achievements and activity. Each item can be hidden in Settings > Privacy, and the whole profile can be made private.

4. Who we share data with

We use service providers (processors) that process data only to make the site work:

Supabase : authentication, account database and image storage (servers in São Paulo, Brazil).
Oracle Cloud : application server and game catalog database (São Paulo, Brazil).
Vercel : site hosting and delivery, and cookie-free traffic statistics (global network, with servers outside Brazil).
Google and Discord : only if you choose to sign in with these accounts.
Valve (Steam) and OpenXBL : only if you connect these accounts, to fetch the data described above.

Prices come from public sources such as IsThereAnyDeal and the stores themselves; these lookups don't send your personal data. When you click a deal, you're taken to the store's site, sometimes through a third-party redirect link that may log the click under that company's policy.

Some of these providers may process data outside Brazil. In those cases, the transfer relies on the safeguards in art. 33 of the LGPD, such as the providers' own contractual clauses.

We may also share data when required by law or by order of a competent authority.

5. How long we keep it

For as long as your account exists.
When you delete your account, the data is erased from the live system right away. Backups are automatically overwritten within 35 days.
When you disconnect Steam or Xbox, the library, hours and achievements imported from that account are removed.
Technical access logs are kept for as long as needed for security and diagnosis.

6. Your rights

You can, at any time:

Access and correct your data in Settings and on your profile;
Delete your account and your data in Settings > Account > Delete account;
Withdraw consent: make your profile private, hide information or disconnect Steam and Xbox, which removes the imported data;
Request confirmation of processing, portability or information about sharing through Contact us or by email at ofertagamescontato@gmail.com;
File a complaint with the Brazilian National Data Protection Authority (ANPD).

7. Security

We use encrypted connections (HTTPS), per-user access control in the database, abuse limits and backups. No system is completely immune to incidents; if a relevant incident involving your data occurs, you and the ANPD will be notified as required by law.

8. Children and teenagers

Oferta Games is not directed at children under 13. If you're responsible for a child who created an account, request deletion in Settings or through Contact us or by the contact email.

9. Changes to this policy

When this policy changes in a relevant way, the date at the top will be updated and, if the change affects how we use data already collected, we'll let you know on the site.