Last updated: August 14, 2026
This Privacy Policy explains how Skapitão ("we", "our", or "us") collects, uses, shares, and protects personal data when you use the Planning Poker web application at planning-poker.skaptain.com (the "App"). We are the controller of the personal data described here. It complements our Terms of Use.
If you have any question about this policy or want to exercise your rights, contact us through our contact page.
You sign in with Google. Google Sign-In provides us with your name, email address, profile picture and a unique account identifier. We do not receive or store your Google password.
If you buy a plan, we store a reference to your customer profile at Stripe, the plan purchased, the date your access runs until, the subscription status, and a history of billing events (purchases, renewals, cancellations, refunds, and access granted by us). Payments are processed by Stripe: your card number and other payment credentials are provided directly to Stripe and are never received or stored by us.
If you connect a room to Jira, the domain, account email and API token you provide are stored in your own browser and sent with each request only so that our server can call Jira on your behalf. The token is not saved on our servers or in our database. The issues returned by Jira (key, title, description and estimates) are shown in the room and, when you apply an estimate, the story points are written back to your Jira issue.
Our infrastructure providers automatically process technical data needed to deliver and protect the service, such as IP address, browser and device information, and request logs. We use Firebase App Check with Google reCAPTCHA to verify that requests come from the genuine App and to block abuse; reCAPTCHA collects hardware and software information and sends it to Google for analysis, subject to Google's Privacy Policy and Terms of Service.
We do not sell your personal data, and we do not use your rooms, votes or backlog content for advertising.
A room is collaborative by design. Other participants in the same room can see your name, profile picture, presence, and — after the reveal — the vote you cast. Anyone who has the room link and is signed in can join it, so treat room links as sensitive and do not put confidential information in room names, backlog items or votes.
We share data with the providers below, only to the extent needed to run the App:
We may also disclose data when required by law, court order, or to establish or defend a legal claim.
Our servers and those of our providers are located outside Brazil, primarily in the United States. By using the App, your data is transferred and processed there. We rely on providers that offer contractual safeguards for international transfers as required by applicable data protection law, including the Brazilian General Data Protection Law (LGPD).
The following is stored in your browser and is necessary for the App to work:
Clearing your browser storage signs you out and removes the Jira credentials saved on that device.
On our website and in the App we use Google Tag Manager to load Google Analytics. These set cookies that let us see, in aggregate, how many people visit, which pages and campaigns brought them, and which steps they complete (for example, starting a checkout). If you arrive from one of our ads, the same cookies let us know that the campaign produced a signup. We use this to improve the product and our advertising — not to identify you personally, and we do not sell this data.
Your choice comes first. On our website these cookies are blocked until you accept them: the first visit shows a banner with Accept and Reject, given equal weight, and measurement stays off — technically, Google Consent Mode is set to "denied" — until you choose Accept. Rejecting changes nothing about how the site or the App works.
You can change your mind at any time through the Cookies link in the footer of our pages, by clearing your browser storage for this site, or by installing Google's Analytics opt-out browser add-on. We do not use advertising cookies to build profiles about you across other websites.
Under the LGPD (and similar laws, where they apply to you), you can ask us to confirm whether we process your data and to access it; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary or excessive data; request portability; obtain information about the parties we share your data with; and object to processing based on legitimate interest.
To exercise any of these rights — including deleting your account and its data — write to us through our contact page. We will answer within the period set by the applicable law. Note that we may need to keep billing records to comply with legal obligations, and that content you contributed to rooms owned by other people (for example a vote in someone else's room) may remain visible to them.
Access to your data is restricted by authentication and by server-side security rules; traffic is encrypted in transit; billing records can only be written by our server; and requests are verified with App Check. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and will notify you and the competent authority of any incident that presents a relevant risk, as required by law.
The App is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date. If the changes are material, we will make that clear in the App. Your continued use after the changes take effect means you acknowledge the updated policy.
If you have any questions about this policy or about your data, contact us at: