Back to Game

Privacy Policy

Last updated: 4 March 2026

This Privacy Policy explains what personal data NoXMundi ("the Game", "we", "us") collects, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR).

1. Who We Are

NoXMundi is an independent browser-based multiplayer RPG. If you have questions about this policy or your data, contact us at: [your-contact-email@example.com]

2. What Data We Collect

Data	Why we collect it	Legal basis
Username	To identify your account in-game	Contract (account agreement)
Email address	Account recovery and communications	Contract
Password (hashed)	Secure authentication — your actual password is never stored	Contract
IP address at last login	Security monitoring and abuse investigation	Legitimate interest
Account creation date	Audit trail	Legitimate interest
Last login date	Account management	Legitimate interest
Character data (name, class, level, inventory, etc.)	Core game functionality	Contract

We do not collect:

Payment information (there is no payment system)
Location data beyond IP address
Tracking cookies or advertising technologies
Browsing behaviour outside the game
Any data from users under 16 years old (see Section 7)

3. How Long We Keep Your Data

Data	Retention period
Account and character data	Until you delete your account
IP address at last login	90 days from last login, then automatically deleted
Server logs	30 days rolling

IP addresses are automatically nullified after 90 days by a scheduled server process. You do not need to request this.

4. Who We Share Data With

We do not sell, trade, or share your personal data with third parties for marketing purposes.

Your data may be stored on infrastructure provided by:

Fly.io — server hosting (may process data in the EU or US)
Cloudflare — CDN and asset delivery (Cloudflare Privacy Policy)
Neon / PostgreSQL provider — database hosting

These are data processors acting on our instructions. We have no advertising partners.

5. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

Right of access — You can request a copy of the data we hold about you.
Right to rectification — You can correct inaccurate data via your in-game Account page.
Right to erasure — You can permanently delete your account and all associated data at any time via the in-game Account page. Deletion is immediate and irreversible.
Right to restriction — You can ask us to stop processing your data while a complaint is being investigated.
Right to object — You can object to processing based on legitimate interest (e.g. IP logging). We will stop unless we have compelling legitimate grounds.
Right to portability — You can request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at [your-contact-email@example.com]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority (in Denmark: Datatilsynet).

6. Security

Passwords are stored as bcrypt hashes and are never recoverable. Account data is stored on password-protected database infrastructure. Access to the admin panel requires separate credentials and role-based permissions.

We cannot guarantee perfect security. If we become aware of a data breach that affects your personal data, we will notify you within 72 hours as required by GDPR.

7. Children

NoXMundi is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has registered, please contact us immediately.

8. Changes to This Policy

We may update this policy. The "Last updated" date at the top will reflect any changes. Continued use of the game after a change constitutes acceptance of the updated policy.

9. Contact

[Your Name / Studio Name]
Email: [your-contact-email@example.com]