Translation provided for convenience; in case of any discrepancy, the Portuguese version prevails.

This Notice describes how the Brazilian operator processes personal data under Brazilian law (LGPD); it does not assert compliance with data-protection laws of other jurisdictions.

Partida Privacy Notice

Last updated: September 26, 2026 Version: 1.4 — Brazilian pilot, free phase

This Notice explains how Partida processes personal data during a visit to the site, generation of demos, production, delivery and support.

1. Controller

The controller is Eduardo Lima de Almeida Worrel Consultoria em Tecnologia da Informação, CNPJ No. 51.279.125/0001-33, headquartered at Rua Visconde de Pirajá, 414, sala 718, Ipanema, Rio de Janeiro/RJ, CEP 22410-905, Brazil.

Privacy channel: [email protected]
General support: [email protected]

2. Data processed

Depending on how you use the service, we may process:

  • name, e-mail and contact details;
  • account and authentication identifiers;
  • IP, date, time, session, browser and security logs;
  • technical signals from the anti-bot check (Cloudflare Turnstile) when creating productions and sending feedback;
  • PGN, moves, positions, result and game metadata;
  • public moves, names, federations, events and results from official tournament broadcasts, used in live narration and in the videos on Partida's channel;
  • names, usernames, ratings, event and date present in the PGN;
  • optional player photos and a record of the confirmation of rights and authorizations;
  • choices of language, voice and style;
  • e-mail voluntarily provided on the waiting screen, only to notify you that the video is ready: used only for that notice and deleted from the production record when the notice is sent or, at the latest, when the production is deleted, never becoming a contact list;
  • script, audio, video, thumbnail and intermediate files;
  • job status, delivery history and support messages;
  • ratings and feedback comments sent voluntarily;
  • encrypted Lichess access token, when you connect your account (deleted when you disconnect);
  • consents, acceptance of documents and requests concerning rights or removal.

We also record, without cookies and without any identifier, anonymous operational counts: productions requested, ready and failed, with origin, format, duration and error code. These records contain no IP, account, e-mail or browser identifier. They are kept in our own database, on the same server, together with other operational metrics (calls to language models and performance of the channel's YouTube videos) and with the public PGNs from broadcasts.

3. Purposes and legal bases

We process data to:

  • validate the game and produce the requested video;
  • deliver the file and provide support;
  • limit abuse, block bots, protect accounts and investigate failures, based on legitimate interest, fraud prevention, security and the regular exercise of rights;
  • handle requests for access, correction, deletion and removal, to comply with the LGPD and other obligations;
  • narrate live and publish, on Partida's YouTube channel, videos of games from public broadcasts chosen by Partida itself, based on legitimate interest, using only the public data of the broadcast;
  • measure audience and product usage with Google Analytics, only with your consent;
  • monitor operations (how many productions were requested, became ready or failed), through the anonymous counts described above;
  • send promotional communications, only when there is an adequate legal basis and the possibility to unsubscribe.

When we rely on legitimate interest, we will limit processing to what is necessary, consider the expectations of data subjects and adopt safeguards.

Optional photos are processed to carry out the requested production and incorporate the visual identification chosen by the user. The confirmation of rights and authorizations is recorded for abuse prevention and the regular exercise of rights. Image-use authorization remains the responsibility of whoever submits the material, without prejudice to the rights of the person depicted.

4. Visitors without an account

A generation without an account may use IP, session and technical signals to enforce limits and prevent spam. This data will not be used for behavioral advertising.

The anonymous project, including video and intermediate files, is automatically deleted within 48 hours of its creation. Access records that must be kept by legal obligation may remain for the applicable period, separate from the project content.

A temporary link may allow the visitor to associate the video with an account. The token expires with the project or after its first use.

5. Use of artificial intelligence

To create the script and narration, we send third-party language models the moves, positions, evaluations and language and style instructions. When the narration needs to mention them, we also send the players' names, the event and other game data. We do not send e-mail, account data or photos.

The text is currently generated by Ollama Cloud (Gemma model) and, when it is unavailable, by MiniMax. In productions created on the site, the voice is local: synthesized on our own server (Piper), without sending anything to third parties. MiniMax generates the voice of the live broadcasts, of Partida's YouTube channel and of the premium voices — receiving the final narration text, with the names that are spoken —, the voice of site productions in languages without a local voice or when the local voice fails, and thumbnail images for the videos.

For small automated checks — players' nationality and identity, checking passages of text — we send TypeSafe players' names, federations and event names.

Providers process the data under their own terms and policies. Partida does not use customer content to train a model of its own. We do not use these flows to clone the voice of the user or of players. The up-to-date list of providers is available at https://www.partida.live/fornecedores.

Player photos are not sent to any artificial intelligence provider. Before being stored in the job, they are cropped, reduced, converted to WebP and saved without EXIF metadata. The renderer receives only this normalized version.

6. Sharing

We may share strictly necessary data with:

  • DigitalOcean, which hosts the server, the database and the files, in the United States;
  • Cloudflare, which sits in front of the site (CDN and attack protection), runs the invisible anti-bot check (Turnstile) on creation and feedback and stores the generated videos and audio (Cloudflare R2);
  • Clerk, for account creation, login, session, verification and authentication security;
  • Ollama Cloud and MiniMax, to generate the script and narration, as described in section 5;
  • MiniMax, to synthesize the voice of the live broadcasts, of the YouTube channel and of the premium voices (in site productions, only when no local voice is available) and to generate thumbnails;
  • TypeSafe, for the automated checks described in section 5;
  • Lichess, the source of public broadcast data, which, when you connect your account, authorizes (OAuth) listing your games;
  • Google, through YouTube, to publish and measure the videos on Partida's channel;
  • Google Analytics, for audience and product usage measurement, only after your consent in the cookie banner;
  • a chess analysis provider, used as a fallback when the local engine is unavailable, which receives board positions without player names;
  • Resend, only when you ask to be notified by e-mail that the video is ready: it receives your e-mail and the notice;
  • TikTok, only when you connect your account and ask to publish one of your videos: it receives the video and the caption you chose to publish;
  • support, accounting and security providers, when engaged;
  • public authorities, upon legal obligation or valid order;
  • legal and technical advisers, when necessary for the exercise of rights.

We do not sell personal data.

7. International transfer

Partida's server is in the United States (DigitalOcean), and Cloudflare, Clerk, Ollama Cloud, MiniMax, TypeSafe, Lichess, Google, Resend and TikTok also process data outside Brazil. The data described in this Notice is therefore transferred abroad, mainly to the United States.

These transfers rely on art. 33 of the LGPD: when necessary to perform the service you requested or preliminary procedures related to it (item IX, together with art. 7, V), with your specific consent when consent is the legal basis, as in audience measurement (item VIII), and on the contractual clauses and guarantees offered by the providers (item II). We limit what is sent to each provider to what is necessary and keep the list of recipients public.

8. Cookies and measurement

We use cookies and local storage that are strictly necessary for session, security, the anti-bot check, production progress and essential preferences. These work without consent, as they are indispensable to the service.

In addition, with your consent — requested in a banner on your first visit — we use cookies and local storage for audience and product usage measurement, through Google Analytics. This measurement records pages viewed, interface interactions, technical characteristics of the browser, IP address (used to estimate the country and city of access) and product usage events, without session replay. With consent, events about your productions recorded by our server (production created, ready or failed, joining and leaving the queue) are also sent to Google Analytics, linked to the same browser identifier. We never use your account identifier for this. It serves to understand how the site is used and to improve it; it does not follow you on other sites and does not feed advertising.

If you decline in the banner, none of this is collected or sent to Google, and your refusal is recorded in your browser; the site works fully in the same way. In that case only the anonymous operational counts described in section 2 remain, in our own database, without cookies and without any identifier. You can change your mind by clearing the site data in your browser, which makes the banner reappear. Anyone browsing with the "Do Not Track" signal enabled is not measured, regardless of the banner.

We will not use advertising cookies without updating this Notice and requesting new consent.

8.1 Player embedded on third-party websites

Clubs and organizers can embed our live player (an iframe at partida.live/embed) on their own websites. Inside the player we use no cookies, no local storage, and neither Google Analytics nor any third-party analytics or advertising tool, and there is no consent banner because none of this is collected. To meter the key's credit consumption and enforce the list of domains authorized by the key's owner, the player sends our server, roughly every 30 seconds while it is open: the embed key, a random identifier generated on each page load (not stored in the browser and not identifying the person), whether the tab is visible, and the address of the website that embeds the player. The IP address is used only to limit abuse, as on the rest of the site, and is not linked to that identifier. We keep only aggregate totals per key (time with at least one person watching and the number of simultaneous viewers), with no per-viewer history. The website embedding the player is responsible for its own privacy and cookie practices.

9. Retention

We adopt the following periods:

  • anonymous project: automatically deleted within 48 hours of its creation;
  • free production of a user with an account: automatically deleted within 7 days of its creation or of when it was saved to the account;
  • intermediate files: deleted together with the respective production, within the periods above;
  • normalized photos: follow the period of the respective project and are deleted with it;
  • account and library records: while the account remains active or until a valid deletion request (each production's files follow the periods above);
  • ratings and feedback comments: while useful for improving the service, or until a deletion request;
  • anonymous operational counts: no defined period, as they contain no personal data;
  • access records subject to the Marco Civil da Internet: applicable legal period, as a rule six months;
  • records of acceptance and exercise of rights: applicable legal and defense periods;
  • record of a security incident involving personal data: at least five years, when required.

Videos on Partida's YouTube channel remain published until an editorial decision or a granted removal request.

Backups may keep copies for a limited technical cycle. During that period, deleted data will not be reused in ordinary operation and will be erased or overwritten according to the rotation.

10. Private, unlisted and public videos

  • Private: accessible only in an authenticated environment, when available.
  • Unlisted: accessible to whoever holds the link or QR code; must not be shared with anyone who should not see it.
  • Public: only the videos that Partida itself produces from public broadcasts and publishes on its YouTube channel and on the site.

Customer videos are private or unlisted, and productions generated by users are never published on Partida's channel. A person identified in any video may request review, correction or removal.

11. Children and adolescents

People under 18 may use Partida, including generating videos and creating an account, with the knowledge of a parent or legal guardian. We do not ask for age confirmation when creating.

We do not publish productions submitted by users and do not use minors' data for behavioral advertising. The channel's automated curation may choose public games from officially broadcast youth tournaments; requests from guardians to remove or anonymize these videos, and situations of possible risk to children or adolescents, will be prioritized.

12. Security

We adopt proportionate measures, including access control, administrative authentication, secrets protection, non-sequential links, rate limiting, anti-bot checks, file isolation, logs and scheduled deletion. No system is absolutely immune to incidents.

When an incident may cause relevant risk or harm, we will follow the applicable assessment, recording and notification obligations.

13. Your rights

You may request:

  • confirmation and access;
  • correction;
  • information about sharing;
  • anonymization, blocking or deletion where applicable;
  • withdrawal of consent;
  • objection to irregular processing;
  • review of a relevant automated decision;
  • deletion of account and videos;
  • correction or removal of a video that identifies you, including on Partida's YouTube channel.

Send your request to [email protected]. To protect data subjects, we may request proportionate information to confirm the identity or legitimacy of the requester. Exercising your rights is free of charge.

14. Changes

This Notice will be updated when providers, features, purposes or applicable rules change. Relevant changes will be highlighted on the site. The version history will be preserved.

Note of 26 September 2026 (no version change): clarified that productions created on the site use a local voice, synthesized on our server, and that MiniMax synthesizes the voice of the live broadcasts and of the YouTube channel.