This Privacy Policy explains how Nexus Rift ("we", "us") collects, uses, and protects your personal data when you use our game, website, and related services (the "Service"). We are the data controller for that processing.
1. Data We Collect
- Account data — handled through our authentication provider: your email address, authentication identifiers, and, if you use social login, the identifier your provider shares (e.g. Google or Apple).
- Gameplay data — your progress, in-game currency and item balances, deployments, bids, and related activity needed to run the game.
- Purchase data — records of purchases and subscriptions processed by our payment providers. We do not store your full card details; those are handled by the payment provider.
- Device and usage data — device type, app version, IP address, and diagnostic and performance information, including error reports.
- Visit counts: when you open our website, the game, or the spectate page, we count the visit. We record the page, the website you came from, any campaign tag in the link you opened, and the day, but not who you are. See section 8.
2. How We Use Your Data
- to provide, operate, and maintain the Service and your account;
- to process purchases and manage subscriptions;
- to keep the Service secure and prevent fraud, cheating, and abuse;
- to provide support and respond to your requests;
- to send service and re-engagement messages you can opt out of;
- to understand usage and improve the Service.
3. Public Profiles and Your Privacy Control
Player profiles are public by default so other players can follow the shared world. You can switch your whole account to a free Private Profile at any time under Settings and Gameplay. The change applies immediately, and switching back to public restores eligible profile detail immediately.
A Private Profile still shows your username. Shared historical records, such as completed battles, trades, and other public world events, keep the participants and facts recorded when they happened. The privacy control hides passive profile detail, current operations, condition, loadouts, and private inventory relationships. It does not delete or rewrite shared history.
4. Legal Bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to run the Service and process purchases); our legitimate interests (security, fraud prevention, and improving the Service); your consent (for optional communications, where required); and compliance with legal obligations.
5. How We Share Data
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, including:
- an authentication provider (account sign-in);
- payment providers and app stores (processing purchases and subscriptions);
- hosting, storage, and content-delivery providers (running the Service);
- error-monitoring and analytics providers (diagnostics and performance);
- email and push-notification providers (delivering messages you've enabled).
We may also disclose data where required by law or to protect our rights and users.
6. Data Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, accounting, fraud-prevention, and dispute-resolution obligations, after which it is deleted or anonymized.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. You can delete your account from within the Service, and you can exercise these rights by contacting us at support@nexusrift.gg. You also have the right to complain to your local data protection authority.
8. Cookies, Local Storage and Visit Counting
We use cookies and local storage that are necessary to run the Service — for example, to keep you signed in and to remember your settings and preferences. We do not use them for third-party advertising.
We count visits to our website, the game, and the spectate page with our own
server. We use no cookie and no third-party analytics tool for it. Each page
view sends us the page, the website you came from, any campaign tag in the
link (such as utm_source or ref), and the day. To
count how many different people visit in a day, we turn your IP address and
browser type into a one-way code using a random key that changes every day
and is deleted when the day ends. The code cannot be turned back into your
address and cannot be matched from one day to the next. We do not store your
IP address, your browser details, or your account for this count. We use it
to learn how many people visit, where they come from, and how many go on to
play. We delete the individual visit records after 90 days and keep only
daily totals. If your browser sends Do Not Track or Global Privacy Control,
we do not count your visit. While you browse, your browser may keep the
campaign tag from the link in session storage so it can follow you from our
website to the game; it is removed when you close the tab.
9. Discord Community Bots
Our official Discord server includes AI-driven bots we operate: Mira, who reads and bridges messages, and three disclosed AI characters, Kaori Tanaka (Zenkoku Clearing Authority), Dr. Liv Strand (Borealis R&D Requisitions), and June MacAllister (Red Mountain Salvage). The bots read message content only in the specific channels we configure for these features; outside those channels, they do not process message content.
- Discord-to-game relay: in our configured bridge channels, game chat is relayed into Discord. When Mira has Message Content access, ordinary messages you post there are also relayed into Nexus Rift's live in-game chat.
- Character routing: in our configured character channel, Mira reads ordinary messages that do not mention a bot and classifies which of the three characters could respond. This reading happens for every eligible message. Replies to these unmentioned messages are currently disabled.
- AI processing: to classify a message, Mira sends it and a bounded window of recent messages to our AI provider, Anthropic. When replies are enabled, Anthropic also generates them. Neither we nor Anthropic use this content to train models, and it is never used for advertising or sold.
- What we store, and for how long: Discord message content
falls into four kinds, each handled differently.
- Short-lived safety evidence: a record of what was sent to and received from our AI provider, kept only to review a moderation or abuse report.
- Bug reports you file: using the "Report bug to Mira" message command, available to every server member, files that one message's text and any attachments into our internal support system, where we keep it for as long as we need to investigate and fix the report.
- Operational metadata: message and delivery identifiers, timestamps, and processing outcomes that do not contain your message text. We may keep this for security and reliability without a fixed time limit.
- Everything else derived from your Discord messages, including any stored summary, is deleted or irreversibly redacted no later than 30 days after we collect it.
- Linking your accounts: connecting your Discord account to your game account is optional, done through our authentication provider, and can be disconnected at any time in the game settings.
- Opting out: post the exact plain-text message "opt out" in a channel Mira reads to stop bot processing of your messages, including character routing, storage, and the Discord-to-game relay; content we already stored about you is deleted or irreversibly redacted at that time. Say "opt in" to resume. Any server member can still use "Report bug to Mira" to file one of your messages as a bug report; that is a deliberate, one-time action on a single message, separate from our passive processing, so it is not affected by opt-out status. You can also request deletion by contacting support@nexusrift.gg.
10. Children
The Service is not directed to children under the age required in Section 1, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
11. International Transfers
Your data may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, as required by law.
12. Security
We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, and we will update the effective date above.
14. Contact
Questions about this Policy or your data? Contact us at support@nexusrift.gg.