This Privacy Policy explains how Nexus Rift ("we", "us") collects, uses, and protects your personal data when you use our game, website, and related services (the "Service"). We are the data controller for that processing.
1. Data We Collect
- Account data — handled through our authentication provider: your email address, authentication identifiers, and, if you use social login, the identifier your provider shares (e.g. Google or Apple).
- Gameplay data — your progress, in-game currency and item balances, deployments, bids, and related activity needed to run the game.
- Purchase data — records of purchases and subscriptions processed by our payment providers. We do not store your full card details; those are handled by the payment provider.
- Device and usage data — device type, app version, IP address, and diagnostic and performance information, including error reports.
2. How We Use Your Data
- to provide, operate, and maintain the Service and your account;
- to process purchases and manage subscriptions;
- to keep the Service secure and prevent fraud, cheating, and abuse;
- to provide support and respond to your requests;
- to send service and re-engagement messages you can opt out of;
- to understand usage and improve the Service.
3. Legal Bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to run the Service and process purchases); our legitimate interests (security, fraud prevention, and improving the Service); your consent (for optional communications, where required); and compliance with legal obligations.
4. How We Share Data
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, including:
- an authentication provider (account sign-in);
- payment providers and app stores (processing purchases and subscriptions);
- hosting, storage, and content-delivery providers (running the Service);
- error-monitoring and analytics providers (diagnostics and performance);
- email and push-notification providers (delivering messages you've enabled).
We may also disclose data where required by law or to protect our rights and users.
5. Data Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, accounting, fraud-prevention, and dispute-resolution obligations, after which it is deleted or anonymized.
6. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. You can delete your account from within the Service, and you can exercise these rights by contacting us at [email protected]. You also have the right to complain to your local data protection authority.
7. Cookies and Local Storage
We use cookies and local storage that are necessary to run the Service — for example, to keep you signed in and to remember your settings and preferences. We do not use them for third-party advertising.
8. Children
The Service is not directed to children under the age required in Section 1, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
9. International Transfers
Your data may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, as required by law.
10. Security
We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, and we will update the effective date above.
12. Contact
Questions about this Policy or your data? Contact us at [email protected].