This Privacy Policy explains how Nexus Rift ("we", "us") collects, uses, and protects your personal data when you use our game, website, and related services (the "Service"). We are the data controller for that processing.
1. Data We Collect
- Account data — handled through our authentication provider: your email address, authentication identifiers, and, if you use social login, the identifier your provider shares (e.g. Google or Apple).
- Gameplay data — your progress, in-game currency and item balances, deployments, bids, and related activity needed to run the game.
- Purchase data — records of purchases and subscriptions processed by our payment providers. We do not store your full card details; those are handled by the payment provider.
- Device and usage data — device type, app version, IP address, and diagnostic and performance information, including error reports.
2. How We Use Your Data
- to provide, operate, and maintain the Service and your account;
- to process purchases and manage subscriptions;
- to keep the Service secure and prevent fraud, cheating, and abuse;
- to provide support and respond to your requests;
- to send service and re-engagement messages you can opt out of;
- to understand usage and improve the Service.
3. Legal Bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to run the Service and process purchases); our legitimate interests (security, fraud prevention, and improving the Service); your consent (for optional communications, where required); and compliance with legal obligations.
4. How We Share Data
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, including:
- an authentication provider (account sign-in);
- payment providers and app stores (processing purchases and subscriptions);
- hosting, storage, and content-delivery providers (running the Service);
- error-monitoring and analytics providers (diagnostics and performance);
- email and push-notification providers (delivering messages you've enabled).
We may also disclose data where required by law or to protect our rights and users.
5. Data Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, accounting, fraud-prevention, and dispute-resolution obligations, after which it is deleted or anonymized.
6. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. You can delete your account from within the Service, and you can exercise these rights by contacting us at [email protected]. You also have the right to complain to your local data protection authority.
7. Cookies and Local Storage
We use cookies and local storage that are necessary to run the Service — for example, to keep you signed in and to remember your settings and preferences. We do not use them for third-party advertising.
8. Discord Community Bots
Our official Discord server includes AI-driven bots we operate: Mira, who reads and bridges messages, and three disclosed AI characters, Kaori Tanaka (Zenkoku Clearing Authority), Dr. Liv Strand (Borealis R&D Requisitions), and June MacAllister (Red Mountain Salvage). They are disclosed as AI in the server rules and their profiles. The bots read message content only in the specific channels we configure for these features; outside those channels, they do not process message content.
- Discord-to-game relay: in our configured bridge channels, ordinary messages you post are relayed into Nexus Rift's live in-game chat, and game chat is relayed back into those channels.
- Character routing: in our configured character channel, Mira reads ordinary messages that do not mention a bot and decides which of the three characters, if any, should reply. This reading happens for every eligible message, even on the messages where no character replies.
- AI processing: to route a message and generate a reply, Mira sends the message and a bounded window of recent messages to our AI provider, Anthropic. Neither we nor Anthropic use this content to train models, and it is never used for advertising or sold.
- What we store, and for how long: Discord message content
falls into four kinds, each handled differently.
- Short-lived safety evidence: a record of what was sent to and received from our AI provider, kept only to review a moderation or abuse report.
- Bug reports you file: using the "Report bug to Mira" message command, available to every server member, files that one message's text and any attachments into our internal support system, where we keep it for as long as we need to investigate and fix the report.
- Operational metadata: message and delivery identifiers, timestamps, and processing outcomes that do not contain your message text. We may keep this for security and reliability without a fixed time limit.
- Everything else derived from your Discord messages, including any stored summary, is deleted or irreversibly redacted no later than 30 days after we collect it.
- Linking your accounts: connecting your Discord account to your game account is optional, done through our authentication provider, and can be disconnected at any time in the game settings.
- Opting out: say "opt out" to any of the bots in a channel they read to stop all bot processing of your messages, including character routing, storage, and the Discord-to-game relay; content we already stored about you is deleted or irreversibly redacted at that time. Say "opt in" to resume. Any server member can still use "Report bug to Mira" to file one of your messages as a bug report; that is a deliberate, one-time action on a single message, separate from our passive processing, so it is not affected by opt-out status. You can also request deletion by contacting [email protected].
9. Children
The Service is not directed to children under the age required in Section 1, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. International Transfers
Your data may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, as required by law.
11. Security
We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, and we will update the effective date above.
13. Contact
Questions about this Policy or your data? Contact us at [email protected].