Effective since October 9, 2026
Privacy Policy
This Policy describes how Matriz SA, registered under CNPJ No. 53.411.953/0001-09, collects, uses, shares and protects the personal data of users of the Cronos Go platform, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and other applicable rules.
1. Controller and data protection officer
Matriz SA is the controller of the personal data processed on the Platform. The data protection officer (DPO) can be reached at contact@cronosgo.com.br, the channel for data subject requests and communications from the Brazilian National Data Protection Authority (ANPD).
2. Personal data collected
- Registration data: name, e-mail address and profile photo, received from Google sign-in. The Platform does not store passwords.
- Identification data: CPF (individual) or CNPJ (legal entity) and phone number, used to validate registration and stored encrypted.
- Match data: contents of match files sent by the User or by the Organization's server, including in-game nicknames, SteamID, positions, events and performance statistics.
- Linked accounts: identifiers and public statistics from Steam and FACEIT, when the User or the Organization links them.
- Voice recordings: collected only when the Organization enables the feature on the game server, with the consent of the participants.
- Voice commands to the assistant: audio of spoken requests to Cronos IA, used to transcribe and carry out the request.
- Technical data: IP address, date and time of access, browser and usage logs, collected for security and to comply with the Brazilian Internet Civil Framework (Law No. 12,965/2014).
3. Purposes and legal bases
Personal data is processed for the following purposes:
- Service delivery — account creation and management, match processing, generation of analyses and reports, team roster management. Legal basis: performance of contract (art. 7, V).
- Registration validation and fraud prevention — confirming the User's identity. Legal basis: legitimate interest (art. 7, IX) and fraud prevention (art. 11, II, g).
- Voice recordings — review of team communications during matches. Legal basis: consent (art. 7, I), revocable at any time.
- Security and legal obligations — retention of access logs and response to authorities. Legal basis: compliance with a legal obligation (art. 7, II).
- Service communications — operational notices and changes to these documents. Legal basis: performance of contract.
Matriz SA does not sell personal data and does not use it for targeted advertising.
4. Data sharing
Data of one Organization is not shared with other Organizations. To operate the Platform, Matriz SA relies on processors that handle data on its behalf, under contractual confidentiality and security obligations:
- authentication service — account access;
- cloud infrastructure providers — hosting, database and storage;
- security services — protection against automated access and abuse;
- artificial intelligence providers — generating analyses from match data, without sending identification data such as CPF, CNPJ or phone number;
- payment processors — processing of charges, where applicable.
The list of processors may be requested at contact@cronosgo.com.br, under art. 18, VII, of the LGPD. Data may also be shared with public authorities upon legal request or court order.
5. International transfer
Some processors maintain infrastructure outside Brazil, especially in the United States. In such cases, the transfer is carried out under the safeguards of art. 33 of the LGPD, including contractual clauses ensuring a level of protection compatible with Brazilian law.
7. Retention period
Data is kept for the period needed to fulfill the purposes described in this Policy:
- registration, match and linked-account data: while the account is active;
- audio of voice commands to Cronos IA: 3 (three) days;
- voice recordings of matches: until deleted by the Organization or by the player;
- access logs: 6 (six) months, under art. 15 of the Brazilian Internet Civil Framework.
Once the account is closed, personal data is deleted or anonymized, except where retention is required by law.
8. Data subject rights
Under art. 18 of the LGPD, the data subject may request:
- confirmation that processing takes place and access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data;
- portability of the data to another provider;
- information about the entities with which the data was shared;
- withdrawal of consent, where consent is the legal basis.
Requests must be sent to contact@cronosgo.com.br and will be answered within 15 (fifteen) days. The data subject may also file a complaint with the ANPD.
9. Information security
Matriz SA adopts technical and administrative measures to protect personal data, including encryption, role-based access control, isolation between Organizations and activity logging.
In the event of a security incident that may cause relevant risk or harm, affected data subjects and the ANPD will be notified, under art. 48 of the LGPD.
10. Children and adolescents
The Platform is not intended for persons under 16. Data of adolescents is processed with the authorization of their legal guardian and in their best interest, under art. 14 of the LGPD.
11. Updates to this Policy
This Policy may be updated to reflect changes to the service or the law. The effective date is shown at the top of the page, and relevant changes will be communicated on the Platform.
Matriz SA · CNPJ 53.411.953/0001-09 · Contact: contact@cronosgo.com.br