Privacy policy

Updated November 3, 2026.

This is a translation for convenience. If there is any difference, the Portuguese version prevails.

In a nutshell: Farmteia keeps only what it needs so you can sign in and never lose your farm: your account email and your game progress. We don't sell data, and we don't ask for your phone number, address or any ID. If you buy doubloons, you pay on Asaas's page, and Asaas takes care of the payment details; the game keeps only the pack and the status of the purchase. You can delete your account right from the game.

Who looks after your data

Farmteia is a game by Valefy (Valefy Desenvolvimento de Software Não Customizável Ltda., Brazilian company registration CNPJ 68.040.499/0001-02), which is responsible for the data (the controller, as Brazil's General Data Protection Law, the LGPD, calls it). For anything about privacy, write to contato@valefy.app.

What we keep

Your account: your email. If you sign in with Google, also the name and photo of your Google account. Your password is never stored the way you typed it: the account system keeps only a scrambled version of it (a hash).
Your farm: your game progress (what you planted, built and raised, your level, the names you gave your character and your animals, and your settings), in your account and also on your device.
Technical data: your internet address (IP) and browser information that reach the servers when the game opens, and the signals reCAPTCHA uses to tell whether the player is a person.
Doubloon purchases: the pack, the amount, the date and the status of each purchase (open, paid, expired, delivered), linked to your account.

We don't keep your phone number, address, documents, card details or location. The name, CPF (Brazilian taxpayer number), email and Pix or card details of buyers stay with Asaas.

What we use it for

So you can sign in to your account, keep your farm and continue on another device: this is the service you asked for when you created your account (LGPD, art. 7, V).
To deliver the doubloons you bought and meet the tax obligations of the sale (LGPD, art. 7, II and V).
To protect the game and your account from automated use and abuse (legitimate interest, LGPD, art. 7, IX).

We don't use your data for advertising, and we don't sell it.

Who the data stays with

The game runs on Google services, which store and process the data on our behalf: Firebase Authentication (your account), Cloud Firestore (your farm, stored in São Paulo), Firebase Hosting (the website) and reCAPTCHA Enterprise with Firebase App Check (protection against bots). Some of these services may process data outside Brazil, with the safeguards Google offers by contract.

Doubloon purchases are paid on the page of Asaas, a Brazilian payment institution authorized by the Central Bank of Brazil, which receives the payment details and handles them under its own privacy policy. From Asaas, the game receives only the notice that the purchase was paid.

This site is protected by reCAPTCHA, and Google's Privacy Policy and Terms of Service apply.

Ranking and visits

The ranking and visits are part of the game: every farm with an account shows up in the farm ranking, and other players can visit it just to look around, from the ranking or through an invite link. For this, the following is visible to anyone signed in to a game account: the name you gave your character, whether it's Tonho or Tonha, your level, your region, the profile picture you picked from the game's own pictures, and a copy of your farm (what was planted, built and raised, with the names given to the animals). Your email and your Google account name and photo never show up, and neither do your doubloon purchases. Choose a name for your character that you don't mind showing. Deleting your account removes your farm from the ranking and from visits right away; to be removed only from the ranking, write to the email above.

Friends: every account has a friend code, which is only used for another player to send a friend request. A friendship only exists when both people accept. Your friends list, requests and blocks are seen only by you and, for each friendship or request, by the other person. You can remove a friend or block someone at any time, and deleting your account deletes all of this too.

What stays on your device

The game keeps your progress, your preferences (sound, graphics, tutorials) and your account sign-in in the browser, so it opens faster and you don't lose anything when the internet drops. We don't use advertising or tracking cookies; reCAPTCHA may use Google cookies for protection.

For how long

For as long as your account exists. When you delete your account, the account, your farm, your ranking profile and the copy used for visits are removed right away; the database backups, which are used only to recover data if something fails, are gone within 7 days. The record of doubloon purchases is kept for as long as tax law requires, even after the account is deleted.

Your rights

Under the LGPD (art. 18), you can confirm whether we keep any of your data, see what it is, correct it, get a copy, ask for it to be deleted, and find out who it was shared with. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

How to delete your account and data

In the game: sign in and open Settings → Account → Delete account. The game asks for your password (or Google) again to confirm, then right away deletes your account, the farm saved in it, and whatever was left of the farm on your device.
By email: if you can't sign in, or for any other request about your data, write to contato@valefy.app from your account's email. We reply within 15 days.

Children

The game is for all ages, but a child's account must be created by a parent or guardian, who can ask at any time to see or delete the child's data. Doubloon purchases must be made or approved by the parent or guardian.

Changes

When this policy changes, the date at the top changes too. If the change is a big one, the game will let you know.