Privacy

Privacy Policy

This policy explains, in plain language, which personal data Cinira Master processes, for what reasons, who it shares that data with and how you stay in control of it.

Last updated: November 3, 2026

1. Who is responsible for your data

Cinira Master is a Bible study platform with quizzes, articles, content and the daily games Teia and Quem Sou Eu, available at www.ciniramaster.com.br.

The platform is run by Vinicius Pereira de Oliveira, an individual, who acts as the controller of the personal data processed here under Law No. 13,709/2018 (the LGPD, Brazil's General Data Protection Law). For any matter related to privacy and personal data, the contact channel is contato@ciniramaster.com.br.

This policy explains what data we collect, why we collect it, who we share it with and how you can control this information. It applies to the website, the web app and the official integrations of Cinira Master.

2. What data we collect

We collect only what is needed to maintain your account, record your progress and keep the platform working:

Sign-up data: name, email and password. The password is stored only as a cryptographic hash (bcrypt) — we never have access to the original text.
Profile data, when you fill it in: profile photo and "about me" description.
Sign in with Google: if you sign in with Google, we receive the name, email and profile photo of the Google account you choose. We do not have access to your Google password.
Usage and game data: quizzes answered and created, answers submitted, score, XP, day streak, participation in leagues and challenges, Teia and Quem Sou Eu attempts, and referrals you make to other people.
Content you create: quizzes, questions, answer choices, articles and descriptions you publish on the platform.
Technical session data: IP address associated with sign-in sessions, access dates and browser or device information.
Browsing log: the pages you visit (outside the administrative areas), the date, how long the page stayed open on the screen, the referring page, the IP address, the approximate location estimated from the IP (country, state, city), browser information, the device type and screen size, a random identifier stored in your browser and, if you are signed in, your account. When you create your account or sign in, we link to it the pages visited without signing in on that same browser in the previous 30 days (the identifier is recorded with the account, one per device). If the browser has already been used by another account, such as on a shared computer, this link is not made.
Interactions on pages: clicks on offers and on share, starting a purchase and the opening of sign-up prompts (such as the one for the free PDF), always from closed lists and never with text you type.
Favorites and email series: the content you mark with the heart and the email series you sign up for.
Precise location, only with your permission: if you accept the browser's request, we record the latitude and longitude it reports along with the pages visited. Without this permission, we use only the approximate location from the IP.
Sign-up source: we record through which path or integration the account was created, to understand how people reach the platform.

3. Why we use your data and on what legal basis

Each purpose relies on a legal basis set out in Article 7 of the LGPD:

Providing the service — creating and authenticating your account, recording answers, calculating scores, showing rankings and leagues, saving your progress. Legal basis: performance of a contract.
Essential communication — welcome emails, email address confirmation, password reset, the material you requested and notices about your account. Legal basis: performance of a contract.
Sending content and offers by email — the newsletter, the email series you sign up for and, from time to time, an email about a material from Cinira Master itself related to what you read. Every send is approved by a member of the team and includes a one-click unsubscribe link; no email carries an affiliate link. Legal basis: legitimate interest, with the option to unsubscribe at any time.
Security and abuse prevention — identifying misuse, attempts at score fraud and unauthorized access. Legal basis: legitimate interest.
Improving the platform — understanding which content and games are used the most, generally in aggregate form. Legal basis: legitimate interest.
Understanding where our players come from and how they browse — the browsing log and the approximate location. Legal basis: legitimate interest. The device's precise location relies on consent, which you give or withdraw in the browser itself.
Audience metrics — measuring page performance. Legal basis: consent, expressed through your cookie and browser settings.
Complying with legal obligations — meeting applicable legal or court requirements. Legal basis: compliance with a legal obligation.

4. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in: the authentication tokens are stored in HttpOnly cookies, which the page's JavaScript cannot read. Without them, it is not possible to keep your session or protect the private areas.

We also use third-party cookies and identifiers to measure audience (Google Analytics, Vercel Analytics and Ahrefs Analytics). These services may use cookies to estimate reach and engagement.

You can block or delete cookies in your browser settings. Blocking the essential cookies prevents you from signing in.

6. Connecting with AI assistants (ChatGPT and other MCP clients)

Cinira Master offers an official integration that lets you play quizzes, Teia and Quem Sou Eu inside a compatible AI assistant. This connection is optional and only exists if you expressly authorize it.

When you connect, you go through a consent screen that shows which app is requesting access and which permissions it will receive. No password is shared with the assistant: authorization uses the OAuth 2.1 protocol and generates a token with a limited scope.

Through the integration, the connected assistant can access only what your own account already accesses: your display name and score, the list of available games and the state of the games you play there. Correct answers you have not yet earned are never sent.

You can undo the connection at any time in the assistant's settings or by requesting revocation at contato@ciniramaster.com.br. Once revoked, access ends and the games you played remain recorded in your account, like any other game.

The content of your conversations with the assistant belongs to its provider and is governed by that service's privacy policy, not by this one.

7. How long we keep data

We keep your account data for as long as the account exists. Session tokens expire automatically, and password reset codes are valid only for a short period.

In the browsing log, the IP address, the precise location, the city and coordinates estimated from the IP, and the browser information are deleted 90 days after the visit; the rest (page, date, time on screen, country, state and device type) is kept for analysis. Interactions on pages are deleted after 180 days.

Favorites, email series subscriptions and the link between your browsers and your account last as long as the account exists; you can remove a favorite or leave a series whenever you want.

When you close your account, your personal data is deleted or anonymized, except for what we need to retain to comply with a legal obligation or for the regular exercise of rights. Public content you created — such as a published quiz — may remain available without being linked to your identity, and you can ask for it to be removed along with your account.

8. How we protect your data

We serve the entire website over HTTPS, store passwords only as bcrypt hashes, keep session tokens in HttpOnly cookies, and keep the website's signing keys separate from the keys used in the AI assistant integration.

No system is completely immune to incidents. If a security incident occurs that poses a relevant risk to your rights, we will notify you and Brazil's National Data Protection Authority (ANPD), as required by the LGPD.

9. Your rights as a data subject

The LGPD guarantees you the following rights, at any time and free of charge:

Confirm whether we process your data and access that data.
Correct incomplete, inaccurate or outdated data.
Request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law.
Request the portability of your data to another provider.
Withdraw your consent and request the deletion of data processed on that basis.
Object to processing carried out on the basis of legitimate interest.
Be informed about the entities with which we share your data.

10. How to exercise your rights

Much of your profile data can be edited directly on the platform. For other requests — including access, portability and account deletion — write to contato@ciniramaster.com.br from the email address registered on your account and describe what you need.

We may ask for additional information to confirm your identity before fulfilling a request, precisely to prevent someone else from accessing or deleting your data. We respond within 15 days.

11. Children and teenagers

The platform is used in a Bible teaching context, including by teenagers. Accounts may not be created for children under 13.

From ages 13 to 17, use must take place with the consent and supervision of at least one parent or legal guardian, and processing observes the best interests of the teenager, as required by Article 14 of the LGPD.

If we identify an account created by a child under 13, it will be deleted. Parents and guardians can request access to, correction of or deletion of the data at any time at contato@ciniramaster.com.br.

12. International data transfers

Some of the providers mentioned in this policy process data on servers outside Brazil, mainly in the United States. In these cases, the transfer takes place to make providing the service possible, and we choose providers that adopt contractual clauses and security standards compatible with the LGPD.

13. Changes to this policy

This policy may be updated when the platform changes or when new legal requirements arise. The last updated date, at the top of this page, always indicates the version in effect.

If a change is relevant to you — such as a new processing purpose — we will let you know through the website or by email before it takes effect.

14. Contact

Questions, requests and complaints about privacy and personal data: contato@ciniramaster.com.br. You can also use the support page (in Portuguese), which lists the support channels and what to include in each type of request.

You also have the right to file a petition with Brazil's National Data Protection Authority (ANPD) if you believe your rights have not been honored.

Questions about this document? Reach us through the support page.