Privacy policy

Updated November 7, 2026.

This is a translation for convenience. If there is any difference, the Portuguese version prevails.

Who looks after your data

Farmteia is a game by Valefy (Valefy Desenvolvimento de Software Não Customizável Ltda., CNPJ 68.040.499/0001-02, Rua Visconde do Rio Branco, 1488, conj. 909, 9º andar, Cond. Universe Life Square, Bloco Com., Centro, Curitiba (PR), CEP 80420-210, Brazil), the party responsible for the data (the controller, as Brazil's General Data Protection Law, the LGPD, calls it).

Valefy is a small-sized processing agent and, under ANPD Resolution CD/ANPD No. 2/2022 (art. 11), is not required to appoint a data protection officer. Instead, the channel for any privacy matter is the email contato@valefy.app, read by the Farmteia team itself.

What we keep

• Your account: your email and the account's internal code (an identifier created by the account system). If you sign in with Google, the account system also receives the name and photo of your Google account, which the game neither uses nor shows. Your password is never stored as you typed it: the account system keeps only a scrambled version (hash).
• Your age: the first time you sign in, the game asks for your month and year of birth. We keep only the age group (13 to 17, or 18 or older) and, for players aged 13 to 17, the month they turn 18, so the group changes by itself. The day of birth is not asked. Anyone who says they are under 13 can't create an account.
• Your farm: your game progress (what you planted, built and raised, your level, the names you gave your character and animals, and your settings), on the game server, in backup copies and on your device.
• Messages to Support: when you send a bug or a question in Settings → Support, we keep what you wrote, the type of message, the date and your account email. Unless you turn them off, it also carries your device details (game version, browser, graphics card, screen size, graphics quality, farm level and region), the game's latest errors and a picture of the game screen at that moment.
• Game diagnostics: to find and fix bugs, the game logs technical events: when the page opens and whether it was a reload, when the game reloads by itself and why, when it runs slowly, errors, differences between the farm on your device and on the server, requests the server refused, the graphics card being lost and the graphics quality the game lowered by itself. Each event carries the game version, the browser, the screen size and the farm level; the opening event also carries the device's memory and number of cores and the farm's region. Diagnostics are pseudonymized: they're linked to the account's internal code, not to your email or name, but the team can link that code to the account when needed (for example, to handle a Support request), so they are still personal data. We don't log what you type or what's on the screen.
• Technical data: your internet address (IP) and browser information that reach the servers when the game opens, and the signals reCAPTCHA uses to tell whether a person is playing. They stay in the servers' technical logs for the periods in "For how long".
• Ads (Android app only): the game keeps nothing about ads. When you tap "Double with an ad", the ad is shown by Google AdMob (see below).
• Doubloon purchases: the pack, the amount, the date and the status of each purchase (open, paid, expired, delivered, refunded), linked to your account.

We don't keep your phone number, address, documents, card details or location. The name, CPF (Brazilian taxpayer ID), email and Pix or card details of buyers stay with Asaas.

What we use it for

• So you can sign in, keep your farm, continue on another device and play with friends: that's the service you asked for when you created the account (LGPD, art. 7, V).
• To know the age group and apply the protections for players aged 13 to 17 (see "Teenagers and minimum age"), as required by Brazil's law on protecting children and teenagers online (LGPD, art. 7, II, and art. 14).
• To answer and solve what you send to Support (LGPD, art. 7, V).
• To deliver the doubloons you bought and meet the tax obligations of the sale (LGPD, art. 7, II and V).
• To find and fix bugs with the diagnostics, and to protect the game and your account from automated use and abuse (legitimate interest, LGPD, art. 7, IX). We use only what's needed for this, pseudonymized as explained above, and you can object by writing to the email above.

We don't use the data the game keeps for advertising, we don't build a profile of you and we don't sell data.

Who the data stays with

The game runs on services that store and process data on our behalf, as processors:

• Google: Firebase Authentication (the account), Cloud Firestore (the ranking, friends, gifts, messages to Support and the purchase records, stored in São Paulo), Cloud Functions (purchases, with technical logs), Firebase Hosting (the website) and reCAPTCHA Enterprise with Firebase App Check (protection against bots).
• Cloudflare: the game server, where your farm is stored and the game rules are checked (Workers and Durable Objects, preferably in South America, with technical logs); the farm's backup copies and the game files (R2); and the diagnostics (Workers Analytics Engine).
• Google AdMob (Android app only): shows the ad you choose to watch to double a reward. For every player, the app asks AdMob for non-personalized ads (your profile or history are not used to choose the ad) rated for teenagers (at most "T"). Even so, to show the ad, count how many times it was shown, measure and prevent fraud, the AdMob SDK receives from the device the Android advertising ID and the app set ID, the IP address (from which an approximate location is derived), interactions with the ad (opening, tapping, watching) and technical and diagnostic data from the SDK (model, system, language, crashes). In Europe, the app asks for your consent first, and you can change it in Settings → Account → Ads. Anywhere, you can reset or limit the advertising ID in your Android settings (Google → Ads). See how Google uses data from partner apps.

International transfer: Firebase Authentication, reCAPTCHA, AdMob and part of Google's and Cloudflare's infrastructure run outside Brazil, mainly in the United States and in other countries where these services operate. The transfer serves the same purposes as this policy (the account, protection against bots, the game server, diagnostics and the app's ad) and follows ANPD Resolution CD/ANPD No. 19/2024: it relies on the ANPD standard contractual clauses that Google and Cloudflare offer in their data processing agreements. To get information about the clauses that apply to your data, write to contato@valefy.app.

Doubloon purchases are paid on the page of Asaas, a payment institution authorized by Brazil's Central Bank, which receives the payment details and handles them under its own privacy policy. From Asaas, the game only receives the notice that the purchase was paid, refunded or disputed.

This site is protected by reCAPTCHA, and Google's Privacy Policy and Terms of Service apply.

We don't share data with anyone else, except by court order or at the request of an authority, as the law provides.

Ranking, visits and friends

The ranking and visits are part of the game: players who are in it show up in the farm ranking, and other players can visit the farm just to look, from the ranking or through an invite link. For that, anyone signed in to a game account can see: the name you gave your character, whether it's José or Rosinha, the level, the region, the profile picture chosen from the game's pictures, whether you're playing now or when you last played, and a copy of the farm (what was planted, built and raised, with the names given to the animals). Your email, your age and your Google account's name and photo never show up, and neither do your doubloon purchases. Pick a name for your character that you don't mind showing.

You choose: in Settings → Account there are switches to show up or not in the ranking and visits, and to show or not when you're playing ("Playing now"). Turned off, your farm leaves the list and the visits, and no one sees when you played. For players aged 13 to 17, they and the interaction between players start turned off (see "Teenagers and minimum age"). Deleting the account removes the farm from the ranking and visits right away. Visitors can report a farm with an offensive name or content: the report keeps only who reported it, which farm and when, and we read it to decide whether the farm leaves the ranking.

Friends: each account has a friend code, which only lets another player send a friend request. The friendship only exists once both accept. The friends list, requests and blocks are seen only by you and, for each friendship or request, by the other person. You can remove a friend or block someone at any time, and deleting the account deletes all of this too.

Gifts and help requests between friends: when you send a gift, help a friend with materials, or ask for help, we keep who sent it, to whom, which game item, how many and when, and the history of the last 30 days. There are no notes or free text. We also keep the time of the last delivery to each friend, so the daily limits apply. Only you and your friend can see it; deleting the account deletes the gifts you received and the ones you sent.

What stays on your device

The game keeps in the browser your progress, your preferences (sound, graphics, tutorials), your account sign-in and, while the tab is open, the game's latest errors and the diagnostic events that haven't reached the server yet. This makes it open faster, keeps you from losing anything when the internet drops and, if you send a report to Support, lets it go along. On a device used by more than one account, the previous account's farm stays stored on it until it's deleted. We don't use advertising or tracking cookies (in the Android app, AdMob uses the identifiers explained above); reCAPTCHA may use Google cookies for protection.

For how long

• Your account, age group and farm: while the account exists. The server keeps a backup copy of the farm every hour, deleted after 30 days (Cloudflare R2).
• Messages to Support: 90 days after they're sent; then they're deleted automatically, along with the picture and the details that went with them.
• Diagnostics: 3 months (Workers Analytics Engine); then they're deleted automatically.
• Reports (who reported, which farm and when): 1 year; then they're deleted automatically.
• Daily limit counters (how many friend requests or Support messages the account sent today): up to 3 days; then they're deleted automatically.
• Servers' technical logs (IP address, browser, the account's internal code and what each request did): on the game server (Cloudflare Workers Logs), up to 7 days; in the purchase functions (Google Cloud Logging), 30 days. Then they're deleted automatically.
• Doubloon purchases (and the records linking the payment to the account): for as long as tax law requires, even after the account is deleted.

When you delete your account, the account, the age group, the farm on the server and its backup copies, the ranking profile, the copy used for visits, your friends, your gifts, the reports you made and the records of unpaid purchases are removed right away (paid purchases are kept for the period tax law requires). The database backups, which are used only to recover data after a failure, are gone within 7 days. Diagnostics and technical logs remain until their periods above are up, linked to the code of an account that no longer exists; messages to Support remain until the 90 days are up, unless you ask us to delete them sooner.

How we protect it

Data always travels encrypted (HTTPS). Each account can only read and write its own data, and the server checks every action in the game. Messages to Support and diagnostics can only be read by the Farmteia team. What goes to diagnostics and to Support is cleaned up to remove emails and access codes before it leaves your device.

Your rights

Under the LGPD (art. 18), you can confirm whether we keep data about you, see what it is, correct it, get a copy, ask for it to be deleted or anonymized, find out who it was shared with, and object to its use based on legitimate interest (such as diagnostics). To do so, write to contato@valefy.app from your account's email: we reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

How to delete your account and data

• In the game: sign in and open Settings → Account → Delete account. The game asks for your password (or Google) again to confirm and right away deletes the account, the farm stored on the server and its copies, the ranking profile, your friends and what was left of the farm on your device.
• By email: if you can't sign in, to delete the messages you sent to Support before the 90 days, or for any other request about your data, write to contato@valefy.app from your account's email. We reply within 15 days.

Teenagers and minimum age

Farmteia is for people aged 13 or older. The first time you sign in, the game asks for your month and year of birth; anyone under 13 can't create an account or play. If we learn that an account belongs to someone under 13, it is deleted; a parent or guardian can ask for this at contato@valefy.app.

For players aged 13 to 17, the game starts in its most protective mode: interaction between players (friends, gifts, help requests, farm visits), the ranking and "Playing now" are turned off, and each has a switch in Settings → Account to turn it on; we recommend doing this together with a parent or guardian. The app's ads are always non-personalized and rated for teenagers. The game has no free chat between players and no paid loot boxes or paid draws. We recommend that the character's name not be your real name. Doubloon purchases by anyone under 18 must be made or authorized by a parent or guardian, who can ask at any time to see or delete the data.

Changes

When this policy changes, the date at the top changes too. If the change is a big one, the game will let you know.