Privacy Policy

Effective November 8, 2026 · Updated November 11, 2026

This policy explains what data Aty collects, why, who we share it with and how you stay in control.

Who we are

Aty is operated by Starmade Soluções em Tecnologia LTDA, a Brazilian company registered under CNPJ 49.037.945/0001-77 (“we”). We are the controller of the personal data processed on aty.gg, in the web app and in the desktop app. For any privacy matter, including reaching our data protection officer, write to support@aty.gg.

Data we collect

Account

Email, username, display name and language.
Password, stored only as a cryptographic hash; never in plain text.
Security settings: two-step verification, passkeys and recovery codes, also stored in protected form.

Sign in with Google and connections

If you sign in with Google, we receive your name, email, photo and a Google account identifier. We do not access your contacts, files, calendar or any other Google data.
If you connect Steam, Twitch or Spotify, we store only that account's identifier and public name, to show on your profile if you choose to.

Profile and content

The photo, banner, bio, color and status you choose.
Messages, files, images, sounds, polls, events, reactions and threads you post in communities, direct messages and groups.
Reports you make or receive.

Voice, video and screen

Audio, camera and screen sharing go in real time through our media server to reach the other people in the room. We do not record or store calls. Noise suppression and camera backgrounds run on your own device.

Activity and technical data

Status (online, idle, do not disturb) and, in the desktop app and only if you leave it on, the name of the game you have open.
IP address, browser and device for each session, used to keep you signed in, show your devices under Security and protect the account from abuse.
App preferences (theme, shortcuts, notifications), which may be kept on your device and in your account.

Payments

When purchases are available, payment is handled by Stripe. We never receive or store your card number; we only keep what was bought and the subscription status.

Waitlist

If you signed up before launch, we keep your email and language to let you know when Aty opens.

How we use it

To create and maintain your account and run the service (messages, rooms, calls, notifications).
To protect the platform: prevent fraud, spam and abuse, investigate reports and enforce the rules.
To send necessary emails, such as account confirmation, password recovery and security notices.
To improve the service using aggregated usage information and to fix bugs.
To comply with legal obligations.

We do not sell your data and we do not use your content for advertising.

Legal bases

We process data under Brazil’s General Data Protection Law (LGPD, Law 13,709/2018) and, where applicable, the EU GDPR. The bases we rely on are: performance of a contract (to provide the service), legitimate interests (security and service improvement, always respecting your rights), legal obligations, and consent (for example, optional connections and showing the game you are playing), which you can withdraw at any time.

Your content is seen by the people you choose to talk to and by members of the communities where you post. Beyond that, we only share data with providers that help us run Aty, and only what is needed:

Hosting, database and file storage.
Transactional email delivery.
Google, when you use Sign in with Google.
Giphy, when you search for GIFs (we send only the search term).
Stripe, for payments.

We may also provide data to authorities when the law requires it, limited to what is required.

International transfers

Some providers are located outside Brazil. In those cases we require adequate safeguards, as provided by the LGPD.

How long we keep it

Account data is kept while the account exists.
When you delete your account, it is deactivated immediately and your profile is erased after 14 days. Signing in again within that period cancels the deletion. Messages you sent stay where they are, under the name “Deleted account”.
After an account is deleted, we keep a locked record for legal requests for up to 5 years: name, username, email, dates, linked sign-ins, which messages were the account’s and, if there were reports or moderation, that history. It is only opened if a court or other authority asks for it, only by admins, and every access is logged.
Messages you delete stop showing immediately.
Access records (IP address, app, device and time) are kept for 1 year. Brazil’s Marco Civil da Internet requires at least 6 months.
Security and moderation records may be kept as long as needed to protect the platform or comply with the law.
Purchase records, if you bought something, are kept by us and by Stripe because tax law requires it.
Database backups are deleted on their own after about a month.
See also how to delete your account.

Your rights

At any time you can:

Confirm whether we process your data and access it.
Download a copy of your data under Settings → Security.
Correct data in your profile and account.
Delete your account under Settings → Security.
Withdraw consent by disconnecting accounts or turning off activity display.
Ask about sharing, object to processing or request portability.

For requests not available in the app, write to support@aty.gg. You may also complain to Brazil’s National Data Protection Authority (ANPD) or your local authority.

Security

We use encrypted connections (HTTPS), hashed passwords, two-step verification, passkeys, limits against repeated attempts and restricted, logged staff access to data. No system is infallible; if an incident affects you, we will notify you as the law requires.

Children and teens

Aty is not intended for children under 13. Teens between 13 and 18 should only use it with permission from a parent or guardian. If we learn that an account belongs to someone under 13, it will be removed.

Cookies and local storage

We only use cookies needed to keep you signed in and protect sign-in. The app also stores preferences in your browser (such as theme and volume). We do not use advertising cookies.

Changes to this policy

If we change this policy in a meaningful way, we will notify you in the app or by email before the change takes effect. The date at the top shows the current version.