Privacy Policy

At cadaverexquisito.online we are committed to protecting the privacy of our users. This policy describes what data we collect, how we use it, and the rights you have over it.

Data controller

• Controller: Cadáver Exquisito Online
• Email: contacto@cadaverexquisito.online

Applicable regulations

This site complies with the data protection regulations applicable in the countries where it operates, including:

• General Data Protection Regulation (GDPR) — European Union / Spain
• Lei Geral de Proteção de Dados (LGPD) — Brazil
• Law 1581 of 2012 and Decree 1377 of 2013 — Colombia
• Federal Law on Protection of Personal Data (LFPDPPP) — Mexico
• Law 25,326 on Personal Data Protection — Argentina
• Law 29733 on Personal Data Protection — Peru
• California Consumer Privacy Act (CCPA/CPRA) — California, United States
• UK General Data Protection Regulation (UK GDPR) — United Kingdom
• Loi 25 on the protection of personal information — Quebec, Canada

Data we collect

We collect the following data depending on how you use the site:

When you register:

• Email address
• Username (chosen by you)
• Avatar configuration

When you sign in with Google:

• Email address associated with your Google account
• Name provided by Google

When you play:

• Texts you write during games (story fragments)
• Game room chat messages
• Connection status (online/offline)

When you send feedback:

• The content of the feedback message
• Your email address (if you are signed in)

Browsing data (if you accept analytics cookies):

• IP address (anonymized)
• Device type and browser
• Pages visited and session duration

Purpose and legal basis for data processing

• Enable the game to function (create rooms, manage turns, save stories) — Legal basis: contract performance
• Manage your user account (registration, login, profile) — Legal basis: contract performance
• Analyze site usage to improve it — Legal basis: consent (only with your authorization)
• Respond to your feedback messages — Legal basis: legitimate interest

Third-party services

We use the following third-party services that may process personal data:

• Firebase Authentication (Google LLC, United States): User account management and sign-in.
• Cloud Firestore and Realtime Database (Google LLC, South America East region): Storage of game data, profiles, and presence.
• Firebase Cloud Functions (Google LLC, South America East region): Server logic for game actions.
• Firebase App Check (Google LLC): Protection against abusive use of the service.
• Google Analytics 4 (Google LLC, United States): Site usage analysis. Only activated with your explicit consent.
• Netlify (Netlify Inc., United States): Website hosting.

Google LLC participates in the EU-US Data Privacy Framework. For more information on how Google protects your data, visit Google's Privacy Policy.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request the correction of inaccurate data
• Request the deletion of your data
• Object to the processing of your data
• Request the portability of your data
• Revoke your consent at any time

To exercise these rights, contact us at contacto@cadaverexquisito.online. We will respond within a maximum of 30 days.

You also have the right to file a complaint with the data protection authority in your country.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of personal information collected:

• Identifiers (email address, username)
• Internet or electronic network activity (pages visited, session data)
• Inferences drawn from usage patterns (analytics data)

Purposes of collection:

We collect personal information for the purposes described in the "Purpose of data processing" section above. We do not sell personal information and have not done so in the preceding 12 months.

Do Not Sell or Share: We do not sell or share your personal information for cross-context behavioral advertising as defined by CCPA/CPRA.

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of analytics tracking.

Your CCPA rights include:

• The right to know what personal information is collected and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of personal information
• The right to non-discrimination for exercising your rights

To exercise these rights, contact us at contacto@cadaverexquisito.online.

Data retention

We retain your data as long as you maintain an active account on the site. If you delete your account, your personal data will be deleted within 30 days. Stories created during games may be preserved anonymously.

Inactive game rooms are automatically deleted periodically.

Analytics data is retained for 14 months according to Google Analytics configuration.

Consent cookies expire after 6 months, at which point we will ask for your preference again.

Security

Communication with the site is protected via HTTPS. Data is stored on Google Cloud Platform servers with industry-standard security measures. We do not store passwords: authentication is managed by Firebase Authentication.

Minors

This site is not intended for children under 14 years of age. If you are under 14, you need the consent of your parents or legal guardians to use the site.

Changes to this policy

We may update this policy to reflect changes in the service or applicable legislation. We will post any changes on this page with the corresponding update date.

Last updated: March 28, 2026.