Privacy Policy

1. Who handles your data

The party responsible for the processing described here is REALTIME COMÉRCIO DE SOFTWARE LTDA, registered in Brazil under CNPJ no. 12.043.987/0001-00, the company behind the YGOverlay brand. This policy explains what we collect on this site, why, who we share it with and how you exercise your rights.

Requests about personal data are received at the official support channel, support@ygoverlay.com.

2. What we collect

Below is exactly what this site records today. We collect nothing beyond it.

When you open the site, we record a visitor with no personal identification:

• a)A random identifier generated by the visitor cookie, unrelated to your name or email.
• b)The page language and the country reported by the hosting infrastructure from the network address.
• c)The origin that brought you here, kept in two versions: the first one and the most recent one.
• d)The dates of the first and the last visit, and the qualified visitor flag.

When you interact with the page we record the matching event, always tied to the anonymous identifier above: choosing a plan, triggering a purchase, submitting the email form, confirming the email and clicking through to the announcements channel. Each event stores the plan, the origin, the page version and the date.

When you submit your email to get priority at launch, we record the email, the plan you chose, the price table shown at that moment, a confirmation token with an expiry, the status of the signup and the creation and confirmation dates.

We never send your email, your licence key or any other identifying data to Google Analytics.

3. Cookies

This site uses four cookies:

• a)A visitor identifier, stored for up to 14 days and not readable by page scripts. It keeps us from counting the same person twice and preserves where the visit came from.
• b)A language preference, stored for up to 1 year, so the site keeps the language you chose.
• c)A record of your analytics decision, stored for up to 6 months, so the notice is not repeated on every visit.
• d)A Google Analytics cookie, stored only while measurement is active, to tell sessions and devices apart.

You can reopen your analytics decision at any time through the "Manage cookies" link in the footer, and you can delete cookies from your browser settings.

4. Why we process this data

We process visitor and event data on the basis of our legitimate interest in measuring whether there is demand for the product and understanding where interested people come from. Those records do not identify you and are not used to make automated decisions about you.

We process your email on the basis of the consent you give by submitting the form and confirming through a link sent to you. You can withdraw that consent at any time, at no cost, by writing to the official support channel.

Once sales open, the data needed for a purchase will also be processed to perform the contract and to meet legal and tax obligations.

5. Who we share it with

We rely on suppliers that process data on our behalf, each limited to the purpose described:

• a)Neon, our database, with records stored in the South America region.
• b)Resend, delivery of confirmation emails and transactional messages.
• c)Google Analytics 4, measurement of site usage, subject to your analytics decision.
• d)Vercel, hosting and delivery of the pages.
• e)Paddle, at the time of purchase, as Merchant of Record responsible for billing, taxes and the receipt.

Some of these suppliers process data outside Brazil, outside the United Kingdom and outside the European Economic Area. We do not sell personal data and we do not share it with third parties for advertising.

As of this version, sales are not open, so no payment data has been collected or shared.

6. Analytics and consent

We use Google Analytics 4 to understand how the site is used, and the default behaviour depends on your region. In Brazil, measurement starts active and the notice offers to turn it off at any time. Outside Brazil, nothing is stored in your browser for analytics until you accept.

Ad personalisation stays off in every region. When you decline, Google Analytics receives only cookieless signals, with no identification of your device.

7. How long we keep it

We keep visitor and event records for as long as the demand test is being analysed and for the period needed to account for it. We keep your email for as long as you want to stay on the list; when you ask to leave or to be deleted, we remove the record. Records required by law or tax rules are kept for the period the law sets.

8. Your rights

Applicable data protection law, including Brazil's General Data Protection Law, gives you these rights. You can ask for confirmation that processing exists, access your data, correct incomplete or outdated data, request anonymisation, blocking or deletion of unnecessary data, request portability, be told who we share data with, object to processing and withdraw consent.

To exercise any of them, write to support@ygoverlay.com. We answer in Portuguese, English and Spanish, normally within 2 business days. We may ask for extra information only to confirm the request comes from you.

9. Children

This site and YGOverlay are not aimed at children. We do not knowingly collect data from anyone under 13. If you spot a signup in that situation, write to the official support channel and we will remove the record.

10. Changes to this policy

We may update this policy when the product, our suppliers or the law change. The date of the last update appears at the top of this page, and material changes are announced by email to everyone on our list.