Who we are
Lipy Games is the games brand of Lipy Serviços Digitais LTDA, CNPJ 65.260.227/0001-11, which is the controller of the data described here. For any privacy matter, write to bluetubeoficial@gmail.com.
What the site stores on your device
Lipy Hub pages display Google ads, which use cookies (see “Ads on Lipy Hub” below). The site’s other pages have no ads, and visits are counted without cookies (see “How we count visits”). Apart from that, the site only stores the following in your own browser’s storage:
- whether the intro animation has already played during this visit and which transition to show between pages (deleted when you close the tab);
- the language you selected with the flag in the menu and the country you access the site from (only its code, such as “BR”), so that the site opens in your language on future visits;
- the email address you used to join Lista Lipy, solely to show your pass as “activated” when you return. This stays on your device, and you can delete it by clearing the site’s data in your browser.
The site’s fonts are served by Google Fonts: to deliver them, Google’s servers receive your device’s IP address, as with any website that uses this service.
On your first visit, to open the site in your language, your browser asks our server (Supabase) which country the connection is coming from. The server reads only the country code reported by the network itself and replies immediately: this lookup is neither stored nor linked to you.
Lipy Hub
Lipy Hub is the section of the website with checked game codes, tools, guides and free games. All of this works without an account: an account is optional and is explained just below, under “Lipy Hub account”.
- On your device, the Hub stores the region you selected in the code tabs; which button you tapped for each code (“it worked” or “didn’t work”), so that the button appears highlighted when you return; and a random device code, used solely to count one vote per device.
- When you vote, our server (Supabase) receives the code you voted on, your vote, the reason for a “didn’t work” vote (if you choose one) and the approximate country of the connection. It also stores two encrypted pseudonyms that do not reveal your IP address: one derived from the random device code, used to count one vote per device, and another derived from the IP address of the connection, used to block bots and to count repeated votes from the same network as a single vote. Your IP address is not stored.
- Votes are used to quickly remove from the list any code that has stopped working, and they are deleted within 60 days. The legal basis is our legitimate interest in keeping the list accurate (LGPD, art. 7, IX). To withdraw your vote, tap the same button again.
- On the game pages, the like button (👍 or 👎) stores your vote on our server, linked only to an encrypted pseudonym of your device and your approximate country, with no e-mail and no address. These votes make up the game's rating and are kept for as long as the game exists. To withdraw your vote, tap the same button again.
- In the Hub’s free games, with or without an account, your browser stores a random device code, with no name or email address. Each time you open a game, our server stores that code together with the game, the language, whether you are on a phone or a computer, the type of browser, the approximate country, the site or campaign you came from, how long the game took to load, the time played, the levels and wins, whether the prompt to continue on your phone was shown, taps to download the app and, if there is one, the game’s first technical error. This is used to fix errors, build the “Hot” list and find out which games people enjoy. Your IP address is not stored, and these records are deleted after 13 months. The legal basis is our legitimate interest in improving the games (LGPD, art. 7, IX).
Lipy Hub account (optional)
No one needs an account to read, vote or play on Lipy Hub. Anyone who wants an account can create one, free of charge, to have a player profile, add friends and see who is playing right now. There is no chat, no messaging between players and no photo uploads. Lipy Hub also has no password of its own: you sign in with an account you already have, such as your Google account.
- Login: the account you use to sign in (your Google account, for example) provides us with your email address, your name and your profile photo. This is stored in the login service (Supabase Auth), along with the technical data of each session, such as the access date, the browser and the IP address, which are used to keep you signed in securely. Your name and photo do not appear on your Hub profile, and no other player can see your email address.
- Profile: your nickname; your avatar, chosen from a ready-made gallery (there are no photo uploads); the age range you declare (under 18, or 18 or older); your level and XP; your achievements; your invite code; your privacy settings, including invisible mode; and the dates on which your profile was created, your age range was declared and your nickname was last changed.
- Games: in the Hub’s free games, while you are signed in, we store which games you have played, your matches, your wins, your play time, the dates of the first and the last time you played, and your favorites. Play time is measured by our server, through a signal sent every minute while the game is open and visible on the screen.
- Presence: the game you have open, the time you started playing and the time of the last signal, to show your friends “playing now”, “online” or when you were last seen. With invisible mode on, your friends see you as offline, without the time you last played or the dates of your achievements, and your activity updates (new games, level-ups and achievements) are not shown to them. This record is deleted after 14 days without a signal.
- Friends: your friends, the friend requests you have sent and received, the people you have blocked, and the activity your friends see for 7 days (when you start a new game, level up or earn an achievement). A request that is not accepted is deleted after 30 days, and activity after 8 days.
- Who sees what: profiles are only visible to people who also have an account. If you declared that you are under 18, your profile, your games and your “playing now” status are always visible to friends only: you do not appear in search and only receive friend requests from people who have your invite code, and you still choose whether to accept them. If you are 18 or older, your profile starts out visible to friends only and appears in nickname search, where people who are not your friends see only your nickname and avatar; in settings, you can open your profile to everyone with an account or stop appearing in search. Anyone who declared that they are under 18 can only switch to “18 or older” by asking our team. Blocking hides the two of you from each other everywhere. Your age range and your friends list are not visible to other players.
- Reports and moderation: every profile has the Report and Block buttons. A report stores who made it, who was reported, the reason and any details you write (up to 300 characters), and it goes only to the Lipy Games team, which reviews each case. The person who was reported does not find out who reported them. The team may change an offensive nickname or suspend the account. Reports that have already been reviewed are deleted 180 days after the review.
- Security: to limit abuse, such as creating many profiles or trying to guess invite codes, our server counts the actions of each account and of each IP address. The address is not stored: it is turned into an encrypted code (a pseudonym), and these counters are deleted within 3 days.
- On your device: while you are signed in, your browser stores your sign-in session and a short copy of your profile (nickname, avatar, level and age range), so that the top of the page appears instantly. When you tap Sign out, the session ends and this data is deleted from the device.
- Where it is stored: the account is kept in the Lipy Games database on Supabase (Supabase, Inc.), with servers in the United States (international transfer, LGPD, art. 33), in a locked area: the site can only access the data through functions that apply the privacy rules above.
- How we use it: only to make the account work (profile, friends, level, achievements and “playing now”) and to keep the community safe. Nothing from the account is used for ads or to build an advertising profile, and we do not sell this data or pass it on to other companies for marketing purposes.
- How long: for as long as the account exists, subject to the shorter periods mentioned above (presence, requests, activity, reports and security counters).
- Deleting your account: in Settings, “Delete account” immediately deletes your profile and everything linked to it (games, play time, achievements, friends, requests, blocks, activity and reports made against you), as well as your login, including the email address, the name, the photo and the link to the account used to sign in. Reports you have made stay with the team, but anonymously: they are no longer linked to you. If the login cannot be deleted immediately, the team deletes it within 2 business days. If you sign in and change your mind before creating your profile, the Cancel button also deletes the login immediately; if you just close the page, the login is deleted automatically 7 days after your last access.
- Your rights: in settings, you can change your nickname and avatar, change who sees your profile and delete your account. For your other rights under the LGPD (art. 18), such as finding out what data we hold, correcting it or requesting its deletion, write to the email address at the top of this page, including your nickname: we reply within 2 business days. Parents and guardians may make the same request about their child’s account.
The legal basis for the account is the performance of the service you yourself requested when you created it (LGPD, art. 7, V). Security, reports and limits against abuse are based on our legitimate interest in protecting the people who use the Hub (LGPD, art. 7, IX). The data of children and adolescents is always processed in their best interest (LGPD, art. 14, and Law No. 15,211/2025, Brazil’s Digital Statute of Children and Adolescents, known as ECA Digital): that is why the profile of anyone under 18 always stays on the most protective settings, there is no chat and no photo uploads, and nothing from the account is used for advertising. Anyone under 18 should check with their parents or guardians before creating an account.
New code alerts
On the Lipy Hub game pages, you can ask to receive an email when a new code for that game is added to the list. This is optional and separate from Lista Lipy.
- What we store: your email address, the games you chose, the language of the page, the date on which you declared that you are 13 or older, the dates of the request, of the confirmation and of the last alert, whether you also want news from Lipy Games, and the approximate country of the connection (as reported by the network; your IP address is not stored).
- Email confirmation: nothing is sent until you confirm through the link sent to your email. This way, no one can sign up someone else's email address. Requests that are not confirmed are deleted within 30 days.
- News from Lipy Games: this is a separate checkbox, unchecked by default. Only if it is checked (and confirmed) may we send you news and launches of our games. Without it, you receive only the code alerts.
- Age: the alerts are only for people aged 13 or older. If you are under 13, do not sign up. If we learn that someone under 13 has signed up, that sign-up is deleted.
- Legal basis: your consent (LGPD, art. 7, I), which you may withdraw at any time, free of charge.
- How to unsubscribe: every email includes the “Unsubscribe from alerts” link. There, you can choose to unsubscribe from everything (your email address is deleted from the list immediately) or to stop only the news from Lipy Games. You can also ask by email, at the address at the top of this page.
- Who sends the emails: they are sent through Resend (Resend, Inc., United States), which acts as a processor: it receives your email address and the content of the message solely to deliver it, and keeps the sending logs for its own retention period. This is an international transfer of data (LGPD, art. 33). The list is kept on our server (Supabase).
- How long: for as long as you remain subscribed. When you unsubscribe, your email address is deleted from the list.
Ads on Lipy Hub
Lipy Hub pages display ads from Google AdSense (Google LLC). The studio’s pages and our games’ pages have no ads, and we do not use any other ad networks.
- Non-personalized ads only. We ask Google only for ads selected based on the topic of the page, and we flag each request as intended for a teen audience (or, on pages for Roblox games, a child audience). As a result, Google does not use your history or a profile of you to select the ad, does not engage in remarketing and applies its own protections for minors, which exclude, for example, gambling and alcoholic beverage ads. We do this because the site is also used by children and teenagers (Law No. 15,211/2025, Brazil’s Digital Statute of Children and Adolescents, known as ECA Digital).
- Advertising cookies. In general, third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites, and Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet. On Lipy Hub, this personalization is turned off: Google uses cookies only to limit how many times you see the same ad, to measure ads in aggregate and to combat fraud.
- What Google receives. To show an ad, Google’s servers receive the IP address of the connection, the type of device and browser, and the page visited, as with any website that shows ads. See how Google uses information from sites that use its services.
- How to opt out. You can opt out of personalized advertising from Google on all websites in Ads Settings, and of personalized advertising from other ad companies at aboutads.info.
- Europe, the United Kingdom and Switzerland. If you visit from these regions, a message from Google asks for your consent before advertising cookies are used. Without it, Google shows only limited ads, which do not use personal data to select the ad. You can change your choice at any time using the privacy button that appears on Hub pages.
The legal basis is our legitimate interest in keeping Lipy Hub free (LGPD, art. 7, IX), always using the most protective settings, with no profiling and no remarketing. In Europe, the United Kingdom and Switzerland, the legal basis is your consent.
How we count visits
To find out how many people visit the site and what is most helpful, we use Umami (Umami Software, Inc.), an analytics tool that does not use cookies and stores nothing on your device.
- What is counted: the page visited, the site you came from, the type of browser, operating system and device, the language and the approximate country.
- On Lipy Hub, we also count certain actions without knowing who performed them: copying a code, voting, searching, switching languages and opening a code’s official source. Search terms are stored with a maximum length of 40 characters, and searches containing an email address, a link or long numbers are discarded. Do not enter personal data when searching.
- Your IP address is used only to determine the country and count the visit, and it is not stored. The figures are always aggregated: we do not create profiles, we do not use them for advertising and we do not cross-reference them with other databases.
- The data is stored on Umami’s servers in the European Union (an international transfer, LGPD, art. 33) and kept for up to 6 months.
The legal basis is our legitimate interest in understanding how the site is used and improving it (LGPD, art. 7, IX). We always use the most protective settings, because the site is also used by teenagers. If your browser asks not to be tracked (“Do Not Track”), your visit is not counted.
On Lipy Hub game pages (and only there), we also use the Meta Pixel (Meta Platforms, Inc.) to measure whether the ads for our games on Facebook and Instagram bring in visits. It records the page visit, when you start playing, when you reach 30 seconds, 1 minute and 3 minutes of play, and when you tap to download the app, and it may use Meta cookies. It does not load if your browser asks not to be tracked, or for anyone in a European time zone, and it is not used on the code pages or on the studio page.
What Lista Lipy receives
When you join the list, we store:
- your email address;
- what you want to receive (beta tests, launches, updates) and the games you selected;
- the page and language in which you signed up, the date and the approximate country of the connection (as reported by the network; your IP address is not stored);
- to prevent abuse, an encrypted code derived from your IP address (a pseudonym, not the address itself), used solely to limit repeated sign-ups and deleted within two days.
We do not ask for your name, phone number, age or password, and the list does not require an account.
How we use it
Only for what you asked for: sending invitations to test our games before launch, letting you know when a game reaches the stores and sharing news about our games. The legal basis is your consent under Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados, LGPD, art. 7, I), which you may withdraw at any time.
We do not sell or rent your sign-up, nor do we pass it on to other companies for marketing purposes.
Where the data is stored
The list is kept in a Lipy Games database on Supabase, a cloud service with servers in the United States. Signing up therefore involves an international transfer of data (LGPD, art. 33), carried out with a provider that adopts security measures and processes the data solely on behalf of Lipy. The list table is locked: the site can only add a sign-up or mark it as unsubscribed, and can never read the list.
Lipy Hub votes are kept in the same database and are also locked: the site can only record a vote and read the vote totals for each code.
How long we keep it
For as long as you remain subscribed. When you leave the list, you stop receiving emails immediately — and, for security reasons, no one can re-subscribe that email address through the website. If you wish to rejoin, or to have the record permanently deleted, simply send a request to the email address above.
Your rights
Under the LGPD (art. 18), you may request confirmation of whether we hold your data, as well as access, correction or deletion of it, information about whom we share it with (no one other than the cloud provider) and the revocation of your consent. Write to bluetubeoficial@gmail.com, including the email address you signed up with. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), Brazil’s National Data Protection Authority.
Leave Lista Lipy
Enter the email address you signed up with. For security reasons, the response is the same whether or not it is on the list.
Meta SDK in the Nitrovenant app
Starting with version 0.20.0, the Android app of Nitrovenant uses the Meta SDK (Meta Platforms, Inc.), only the app events module, with no Facebook login. It is used to measure whether the game's ads on Facebook and Instagram bring installs and players.
- What is sent to Meta: the app install and opening, a few game milestones (winning level 1, winning level 3, completing 60 seconds of a race) and purchases made in the game, with the amount and currency. Along with them go the device's advertising ID, the device model, the system and app versions, the language and the IP address.
- We do not send your name, email, phone number or saved progress. The SDK does not read your Facebook or Instagram accounts.
- In Europe, the United Kingdom and Switzerland, the SDK is only turned on after you accept in the consent form the game shows when it opens. You can change your choice at any time with the Privacy button in the game settings; if you decline, nothing is sent to Meta.
- In any country, you can delete or reset the advertising ID in the Android settings (Google → Ads). Meta handles this data under the Meta Privacy Policy, including outside Brazil (international transfer, LGPD, art. 33).
The legal basis is our legitimate interest in measuring the game's ads (LGPD, art. 7, IX). In Europe, the United Kingdom and Switzerland, the basis is your consent.
Hoparade (Android app)
The Android app of Hoparade stores your progress only on your device. Ads are served by Unity Ads, which may process your IP address, interactions with ads, diagnostic data and device identifiers, including the advertising ID. Reminders are optional local notifications scheduled on your own phone; nothing about them leaves the device. The game is not directed to children.
Hoparade also uses the Meta SDK (Meta Platforms, Inc.), only the app events module, with no Facebook login, to measure whether the game's ads on Facebook and Instagram bring installs and players.
- What is sent to Meta: the app install and opening, a few game milestones (finishing the first run, passing the 1st, 2nd and 3rd biome gate, completing 60 seconds of a run, delivering the first pet to the rescue van, opening the farm for the first time), ad impressions with an estimated average value, and purchases made in the game, if any, with the amount and currency. Along with them go the advertising ID, the device model, the system and app versions, the language and the IP address.
- We do not send your name, email, phone number or saved progress.
- In Europe, the United Kingdom and Switzerland, the SDK is only turned on after you accept in the consent form; without that answer, it stays off and ads are not personalized. You can change your choice with the Privacy button in the game.
- You can delete or reset the advertising ID in the Android settings (Google → Ads). Meta handles this data under the Meta Privacy Policy, including outside Brazil (LGPD, art. 33).
Each game’s policy
What happens inside each game (progress, ads, purchases) is covered by that game’s own policy:
- Quiver: Arrow Puzzle · delete your Quiver account
- Nitrovenant
- This Level Hates You: to be published when the game launches.
If this page changes, the date at the top will change with it.






