1. Information We Collect
TL;DR: We collect what's needed to run the platform — your account info, what you do on Nova, and some technical data.
Information You Provide
- Account Information: Username, password (hashed — we never see your plaintext password), and optionally your email address.
- User Content: Games, assets, chat messages, avatar configurations, and any other content you create or upload.
- Communications: Messages you send to our support channels or Discord.
Information Collected Automatically
- Usage Data: Pages visited, games played, features used, and interaction patterns on the Platform.
- Device Information: Browser type, operating system, screen resolution, and device identifiers.
- Log Data: IP address, access timestamps, and referring URLs.
- Cookies and Local Storage: We use cookies and localStorage for session management, authentication, and storing preferences (such as your theme setting).
2. How We Use Your Information
TL;DR: We use your data to run Nova, improve it, keep it secure, and communicate with you.
We use the information we collect to:
- Operate, maintain, and improve the Platform
- Authenticate your account and manage your session
- Display your profile, games, and content to other users
- Provide customer support and respond to inquiries
- Detect, prevent, and address security issues, fraud, and abuse
- Analyze usage patterns to improve the user experience
- Enforce our Terms of Service and Community Guidelines
3. Information Sharing
TL;DR: We don't sell your data. We only share it when necessary to run the platform or if required by law.
We do not sell, rent, or trade your personal information to third parties. We may share information in the following circumstances:
- With Service Providers: We use third-party services (hosting providers, database services, CDN providers) that process data on our behalf to operate the Platform.
- Public Information: Your username, avatar, profile, and published games are visible to other users by design.
- Legal Requirements: We may disclose information if required by law, legal process, or governmental request.
- Safety: We may disclose information if we believe it is necessary to protect the safety of our users or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.
4. Data Storage and Security
TL;DR: We take reasonable security measures. No system is 100% secure, but we do our best.
- Your data is stored on servers provided by our hosting infrastructure.
- Passwords are hashed using bcrypt before storage — we never store plaintext passwords.
- Session tokens are stored in Redis with a 7-day expiration.
- We implement standard security measures including HTTPS, CORS restrictions, and rate limiting.
- While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
TL;DR: We keep your data while your account is active. Some data may persist after deletion for technical reasons.
- We retain your account data for as long as your account is active.
- If you delete your account, we will remove your personal data within a reasonable timeframe, though some information may persist in backups or logs for a limited period.
- Game data, chat logs, and other content you created may be retained in anonymized or aggregated form for operational purposes.
- We may retain certain data as required by law or for legitimate security and fraud prevention purposes.
6. Cookies and Local Storage
TL;DR: We use cookies to keep you logged in and remember your preferences. That's about it.
| Type | Purpose | Duration |
|---|---|---|
| Session Cookie | Keeps you logged in | 7 days |
| Theme Preference | Remembers your light/dark mode choice | Persistent (localStorage) |
| Sidebar State | Remembers if sidebar is open/closed | Persistent (localStorage) |
We do not use advertising cookies or third-party tracking cookies.
7. Your Rights
TL;DR: You can view, update, or delete your data. Contact us if you need help with this.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: You can request a copy of the data we hold about you.
- Correction: You can update or correct your account information through your account settings.
- Deletion: You can request deletion of your account and associated data.
- Portability: You can request your data in a machine-readable format.
To exercise these rights, contact us through our official Discord server or website.
8. Children's Privacy
TL;DR: You must be at least 13 to use Nova. We don't knowingly collect data from younger children.
Nova is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
9. Third-Party Services
TL;DR: We use some third-party services to run Nova. They have their own privacy policies.
We use the following third-party services:
- Cloudflare Turnstile: For CAPTCHA verification during registration and login.
- Hosting Providers: For server infrastructure and data storage.
These services have their own privacy policies and may collect information as described in their respective policies.
10. International Users
TL;DR: Nova is accessible worldwide. By using it, you consent to data processing as described here.
Nova may be accessed from countries outside our primary jurisdiction. By using the Platform, you consent to the transfer and processing of your data in accordance with this Privacy Policy, regardless of your location.
11. Changes to This Policy
TL;DR: We can update this policy. We'll let you know about significant changes.
We may update this Privacy Policy from time to time. We will notify users of material changes through the Platform or via email. Your continued use of Nova after changes are posted constitutes acceptance of the updated policy.
12. Contact
TL;DR: Questions about your data? Reach out to us.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through our official Discord server or website.