Privacy Policy

This Privacy Policy explains what data Coliseum (operated by Crenas, at crenas.site) collects, how we use it, and your rights. We aim to collect only what we need to run the Service. Questions: contato@crenas.site.

When you create an account or use the Service, we may store:

• Account data: email, username, display name, and a securely hashed password.
• If you sign in with Google: your Google account identifier, email, name, and profile picture.
• Optional profile data you add, such as a bio or avatar.
• Inferred data derived from your email (such as likely country and language) used to tailor the experience.
• Usage data within the Arena game, such as predictions, points, streaks, and statistics.
• Subscription status (whether your account is premium and until when).

Payments are processed by Stripe. We never receive or store your full card number. Stripe handles card data under its own security standards (PCI-DSS). We only receive limited information needed to manage your subscription, such as your email and subscription status.

We use your data to: provide and secure the Service, manage your account and subscription, grant premium access, run the Arena game, communicate with you about your account, and comply with legal obligations.

We use a small number of essential and functional cookies, including an authentication token (kept up to 7 days) to keep you logged in, a language preference cookie, and access cookies for restricted areas. We also use the Meta (Facebook) Pixel to measure ad performance and conversions, which sets cookies managed by Meta. Through Meta's Advanced Matching, information you provide on the site (such as your email address) may be shared with Meta in hashed (encrypted) form to improve ad measurement and audience matching. We use no other third-party analytics trackers.

We do not sell your data. We share data only with service providers needed to run Coliseum, namely Stripe (payments), Google (only if you choose Google sign-in), and Meta (advertising measurement via the Meta Pixel, including contact data in hashed form through Advanced Matching), and where required by law. These providers process data under their own policies.

We keep your data while your account is active and as needed to provide the Service and meet legal obligations. You can request deletion of your account and associated personal data at any time.

Under the Brazilian General Data Protection Law (LGPD) and other applicable law, you can request access to your data, correction, deletion, or information about how it is processed. To exercise these rights, email contato@crenas.site.

We protect your data with industry-standard measures, including hashed passwords (bcrypt) and encrypted connections (HTTPS). No system is perfectly secure, but we work to keep your data safe.

Coliseum is intended for adults. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will remove it.

We may update this Policy. When we make material changes, we will update the date above. We encourage you to review this page periodically.

For privacy questions or requests, email contato@crenas.site.