Terms and Policies

Privacy Policy

Privacy Policy

PRIVACY AND COOKIE NOTICE – GNJOY

Last update: 28 Feb 2025

Simplified version of the Privacy Notice

1. Gravity Interactive Inc. and its affiliates operate in accordance with Law No. 13,709/18 – General Law on the Protection of Personal Data (“LGPD”).


2. In GnJoy games, personal data is collected to register accounts and enable access, support, forums, purchase of credits and other features. For the safety of players, anti-fraud methods are used to protect game payments, nicknames and passwords. These are some examples of activities involving personal data.


3. Access the full version of the Privacy Notice to find out more details about how personal data is processed, as well as the rights of data subjects.



Complete version of the Privacy Notice

4. Welcome! Gravity Interactive Inc. (“Gravity”, “GVI”, or “us/we”), headquartered at 7001 Village Dr, Buena Park, California, United States, 90621-2217, acts as controller of the personal data processed within the scope of this website and the games from GnJoy.


5. To provide transparency to data subjects, we have developed this Privacy Notice to inform people how personal data is processed, for what reasons, and how it is used and stored.


6. The Privacy Notice is supplemented by the Software End User License Agreement (EULA), Rules of Conduct, Account Policy and/or other documents made available on this website.


7. As this document may be changed at any time and without prior notice, we advise you to check the update date at the top of the page and re-read the Privacy Notice whenever you visit our website.



DEFINITIONS


8. The terms used in this Privacy Notice are defined by the LGPD and by the the Personal Data Protection and Privacy Glossary. To make it easier for you to read, we have summarized the main definitions:



  • National Data Protection Authority – ANPD: Federal agency of a special nature responsible for overseeing, implementing and monitoring compliance with the LGPD, as well as for issuing complementary standards;
  • Regulator: Party that makes essential decisions regarding the processing of personal data. Gravity acts as regulator of the personal data for players and other users who access, use and interact with this website and/or the game;
  • Personal data: Information that identifies or may identify a natural person, such as name, email, cell phone, address, among others;
  • Person in charge of processing personal data or DPO (Data Protection Officer): Designated to function as a communication channel between the regulator, the data holders and the ANPD, in addition to other duties provided for in the LGPD;
  • Security incident: A confirmed adverse event that compromises the confidentiality, integrity, availability and authenticity properties of personal data security;
  • Operator: Party that processes personal data on behalf of and in accordance with the guidelines of the regulator;
  • Data holder: Natural person to whom the personal data refers, such as players and users who access, use and interact with this website and/or the game;
  • Processing:: Activities carried out using personal data, such as collecting, accessing, analyzing, transferring, storing, sharing, deleting, etc.


PROCESSED PERSONAL DATA AND PURPOSES

9. Gravity only processes personal data necessary to achieve its sought purposes.


10. The processing of personal data and its purposes will depend on how the data holder relates to Gravity, as described in the table below:


Personal data Purposes
Payment and transaction data
Name; identification; date of birth; email; payment method; cardholder name, number, expiration date and verification code (CVV) of the credit or debit card • Make transactions to purchase credits;
• Implement anti-fraud methods for payment security;
• Comply with legal and regulatory obligations.
Customer support
Name; nickname; email; general account data; generated content (messages, comments and images); questions; answers • Provide a chat feature to help answer basic questions from players;
• Use questions and answers to train artificial intelligence tools, without identifying the user/player.
Social networks, forums and Discord channels
Name; nickname; cell phone; country of residence; email; date of birth; general account data • Integrate the account system with the forum account and activities associated with the main GnJoy account;
• Integrate publicly available information on social networks.
Game data
Trading; party formations; quest completions; in-game partners and clans; items obtained or purchased; information that identifies the user in the backend (ISP, ASN, MACaddress, UUID, IMEI) • Secure access to the game, authorize logins and process microtransactions;
• Collect and monitor data for the safety of users/players;
• Apply anti-cheat, anti-fraud and protection tools and methods;
• Provide access to support, payment methods, forums and Discord;
• Evaluate player complaints and apply sanctions if necessary;
• Comply with legal regulations and local requirements;
• Monitor and track gaming habits.

11. Personal data will be processed for the period necessary to achieve the intended purpose(s), considering the rights of the data subjects and the interests of the agents responsible for its processing (regulators and operators).


SHARING OF PERSONAL DATA


12. We may share personal data with the operators listed below, always respecting the LGPD, especially the Principle of Necessity, and in a manner compatible with the purpose(s) for which it was collected:


  • Companies from the same economic group or affiliated with Gravity;
  • Companies providing marketing, public relations, customer support and legal support services;
  • Companies providing payment processing services, credit cards and financial institutions, with protective measures for the safe purchase of credits;
  • Judicial, administrative, regulatory or governmental authorities, provided there is an express order.

13. In the case of sharing with operators, we will require that personal data be treated in accordance with our instructions, which include, but are not limited to, measures for secure storage, retention only for the necessary period and the impossibility of subsequent sharing with other organizations without prior and express authorization.


PERSONAL DATA OF MINORS


14. The Ministry of Justice classifies the game Ragnarök Online as not recommended for minors under 16 (sixteen) years of age. For users under 18 (eighteen), specific and highlighted consent given by a parent or legal guardian will be mandatory, in accordance with art. 14 of the LGPD.


15. Gravity encourages parents to guide their children to never share personal data online and to identify possible fraud committed by third parties.


THIRD PARTY WEBSITES


16. When accessing this website, you may see links to other websites or online services from third parties that are subject to their own privacy notices and rules of use. Gravity is not responsible for any damage or losses caused by third parties.


PROTECTION AND SAFETY MEASURES


17. Gravity adopts technical and administrative security measures to protect personal data from security incidents.


18. If any security incident involving personal data occurs that may entail risk or relevant damage to the data holder, Gravity will duly communicate this to the data holder and to the National Data Protection Authority (ANPD), in accordance with the LGPD.


RIGHTS OF DATA HOLDERS


19. For processing activities in which Gravity is the regulator, data holders may exercise the following rights in relation to their personal data:


Rights provided for in the LGPD How you can exercise your rights
Confirm, access and correct You can access the personal data processed and receive a copy of it, in most cases. You can also correct incomplete, incorrect or outdated personal data.
Request that personal data be made anonymous, blocked or deleted If the personal data is unnecessary, excessive or processed unlawfully.
Request portability Following the ANPD regulation, you may request that your personal data be transferred to another product or service provider.
Request deletion Only for personal data processed based on consent, provided there is no legal justification for keeping it.
Know the consequences of consent Be informed about the possibility of denying consent and its consequences.
Revoke consent Expressly request the revocation of consent, free of charge and expeditiously, by sending an email to the DPO.
Learn about its shared use Learn of which public and private entities your personal data has been shared with. In this Privacy Notice we inform you with whom we share your personal data. If you would like an updated list, please request it by email to the DPO.
Review decisions made automatically Those made solely based on automated processing of personal data that affect your interests, such as decisions that define personal, professional, consumer and credit profiles or aspects of your personality.

20. To exercise these rights free of charge, or to ask questions about the LGPD or this Privacy Notice, please contact the DPO using the following email <atendimento@dpooficial.com.br>.


21. The data holder may also file a petition regarding their personal data against the regulator before ANPD by accessing the channel available at: https://www.gov.br/anpd/pt-br/canais_atendimento/cidadao-titular-de-dados/denuncia-peticao-de-titular.


PERSON RESPONSIBLE FOR PROCESSING PERSONAL DATA


22. Our data controller is the Official DPO, a registered trademark of Vetaluti – Consultoria e Assessoria Ltda, legal entity under private law, registered on CNPJ under no. 37.781.826/0001-45 and/or LGPDfit Consultoria e Serviços Ltda, registered on CNPJ under no. 53.049.872/0001-00, which have as legal representative Mr. Tarcisio Teixeira and as technical manager Mrs. Ruth Maria Guerreiro da Fonseca Armelin.


INTERNATIONAL TRANSFER


23. Gravity may transfer personal data internationally to its affiliates in South Korea and/or the United States (California), which will also comply with applicable laws and responsibilities set forth in this Privacy Notice.


24. Personal data may be transferred internationally via official tools approved by Gravity, using VPN tools, access restriction and anonymization whenever possible, for the period necessary to achieve the following purposes:


  • Analyze and resolve issues/bugs in the game, including but not limited to access issues, payment issues, anomalies or behavior in violation of the EULA or game rules that require specific analysis or support from the team;
  • Share account data with the administrative team for legal evaluation and defense purposes;
  • Monitor metrics regarding general gameplay, users, and information that is not user-specific (number of users logged into the game, for example);
  • Share content related to events and player suggestions with the development team.

COOKIE STATEMENT


25. Cookies are files installed on users' electronic devices to collect information about the website for various purposes, such as to ensure the website's functionality, monitor performance or to display advertisements.


COOKIES USED


26. O site da Gravity utiliza cookies necessários, cuja desabilitação impede o funcionamento do site ou a utilização de serviços pelo usuário, assim como cookies não necessários, com funcionalidades não essenciais ao serviço, de modo que podem ser desabilitados pelo usuário sem prejuízo do funcionamento do site.


Essential cookies


Cookies Purpose Duration
GNJOY_LATAM_USER_LOCALE Handle multilingual rendering of each character displayed on the website 1 year
_ga Google Analytics tracking tool used to identify unique website visitors and collect information about user interactions such as page views and clicks 2 years
_ga_<container-id> Maintains session state in Google Analytics 2 years
authjs.callback-url Process website navigation after completing the login process Session
authjs.csrf-token Prevents attacks where users can unintentionally manipulate requests during the login process Session
next-auth.session-token-latam Maintains and manages login authentication information. If the website is visited and kept open, the session time is extended to 30 minutes at regular intervals. 30 minutes
a_cookie_ck Ensures that the cookie policy pop-up does not appear again after it has been acknowledged on the GnJoy website. 1 year
a_cookie_ck_ro Ensures that the cookie policy pop-up does not appear again after it has been acknowledged on the GnJoy website. 1 year


Analytical/performance cookies


Cookies Purpose Duration
AMCV_ ; OptanonConsent ; __q_state_ ; _biz_flagsA ; _biz_nA ; _biz_pendingA ; _biz_uid ; _ga ; _ga_# ; _gcl_au ; _mkto_trk ; _uetvid ; cfz_amplitude ; cfz_facebook-pixel; cfz_google-analytics_v4 ; cfz_reddit ; kndctr_ ; mbox ; sparrow_id Cookies provided by CloudFlare to maximize network resources, manage traffic, and protect the customer's website from harmful traffic 2 years
FPLC Google Analytics Tool 20 hours
_gac_<wpid> Google Analytics Tool 90 days
_gid Google Analytics Tool 24 hours
_gat[_<customname>] Google Analytics Tool 1 minute
__utma Google Analytics Tool 2 years
__utmb Google Analytics Tool 30 minutes
__utmc Google Analytics Tool Session
__utmt Google Analytics Tool 10 minutes
__utmz Google Analytics Tool 6 months
__utmv ; FPID Google Analytics Tool 2 years
_dc_gtm_<property-id> Google Analytics Tool, Tag Manager 1 minute
_gaexp Google Analytics Tool, Optimize User defined; maximum 93 days
_gaexp_rc Google Analytics Tool, Optimize 10 seconds
_opt_awcid ; _opt_awmid ; _opt_awgid ; _opt_awkid ; _opt_utmc Google Analytics Tool, Optimize 24 hours

Non-essential cookies



Targeting Cookies


Cookies Purpose Duration
DSID Ensure that the user's ad personalization settings are properly respected 2 weeks
_gads Show Google Ads 13 months
_gac_ Measure user activity and the performance of advertising campaigns 90 days
_gcl_ Help advertisers measure conversion rates 90 days
__gpi ; __gpi_optout Google Ads Manager 13 months
NID Google Ads 6 months
DSID Google Ad Manager, Google Analytics, Display and Video 360, Search Ads 360 2 weeks
id Google Ads Manager, Search Ads 360 24 months
GED_PLAYLIST_ACTIVITY Google Ads Manager, YouTube Session
ACLK_DATA Google Ads Manager, YouTube 5 minutes
receive-cookie-deprecation Display and Video 360 6 months
FPAU Display and Video 360, Google Ads, Search Ads 360 90 days
ANID* Display and Video 360, Google Ads, Search Ads 360 24 months
AID* Display and Video 360, Google Ads, Search Ads 360 540 days
ar_debug Display and Video 360, Google Ads, Google Analytics, Search Ads 360 90 days
IDE Display and Video 360, Google Ads, Google Analytics, Search Ads 360 24 months
TAID* Display and Video 360, Google Ads, Search Ads 360 14 days
FPGCLDC ; _gcl_dc ; _gcl_au Display and Video 360, Google Ads, Search Ads 360 90 days
FLC Display and Video 360, Search Ads 360 10 seconds
RUL Display and Video 360, Google Ads 12 months
FPGCLAW ; FPGCLGB ; FPGSID ; _gcl_gb ; _gac_gb_<wpid> ; _gcl_aw ; GCL_AW_P ; _gcl_gs ; _gcl_ag ; Conversion Google Ads 90 days
1P_JAR* Google Ads 30 days
VISITOR_INFO1_LIVE ; VISITOR_INFO1_LIVE__k ; VISITOR_INFO1_LIVE__default Google Ads, YouTube 180 days
APC Display and Video 360 6 months
gclid Google Ads Session
_fbc Managed by Meta to store the last visit 90 days
_fbp Managed by Meta to store and track visits across websites 3 months
_ttp Measure and improve the performance of advertising campaigns and personalize the user experience (including ads) on TikTok 13 months from last use
_pangle Measure and improve the performance of advertising campaigns and personalize user advertising experiences provided by the Pangle network 13 months


INFORMATION ABOUT THIRD PARTY COOKIES


27. Gravity has no control over how third-party cookies work, as they are created by another domain.


28. 28. For more information and settings, the user can access the Privacy Policies/Notices of each third party to find out which cookies are used and how personal data is processed:




HOW TO CONFIGURE COOKIES ON THE WEBSITE OR IN THE BROWSER


29. Cookies retain user data for the periods mentioned above, and may be transferred outside of Brazil.


30. The user has the option and can change permissions, block or refuse cookies at any time using the tools provided by the browser; however, it is possible that the usability of the website may be impaired. For more information, see the links below:


We use cookies, with your consent, to customize content and advertising.
Learn More