Privacy notice

The short version

The game collects nothing. The website collects what you type into it and nothing else. There are no analytics, no advertising, and no third party is given your data.

What the game stores

Novera runs entirely on your machine. Your craft, worlds, automation, settings and key bindings are plain files in a per-user data directory, and they never leave your computer unless you copy them somewhere. The game does not phone home, does not carry an analytics library, and works with no network connection at all.

The one exception is if you choose to link the game to an account. That sends nothing but the approval exchange described below.

What the website stores

If you create an account, we hold:

• Your email address, so you can sign in and be sent a reset link.
• Your pilot name.
• A hash of your password. Not the password — a scrypt hash of it, which cannot be turned back into what you typed.
• A record of each device signed in: the browser or game client it is, its IP address, and when it was last seen. That is what the security page shows you, and what lets you sign a device out.
• Anything you own on the server, once purchases exist.
• A log of security events on the account — signed in, password changed, a device linked — with the IP address each happened from.

If you ask for updates by email, we hold the address and whether you confirmed it. Nothing else, and unsubscribing removes it from the sending list immediately.

Why we hold it

To run the account: to let you sign in, to keep your unlocks, and to let you see and cut off anything signed in as you. The security log exists so that if somebody does get into your account, there is a record of what happened. None of it is used to profile you, and none of it is sold or shared.

Cookies

One cookie, called novera_session. It holds a random token that identifies your session and nothing else — no name, no email, no tracking identifier. It is set when you sign in and removed when you sign out. There are no analytics or advertising cookies, which is why this site has no cookie banner: it has nothing to ask you about.

Getting your data, and getting rid of it

On the Profile & data page you can download everything the account holds as a single JSON file, and you can delete the account. Deletion is scheduled rather than immediate — you get fourteen days, and signing in during that window cancels it. After that the row and everything referencing it is removed for good.

Deleting the account does not touch the files on your own machine. Those are yours, and the game will keep working with them.

Email

Transactional mail — confirming an address, resetting a password, telling you your password changed — is sent because the account needs it. Update mail is only sent if you asked for it, and every message carries a working unsubscribe link.

Where it is kept

On a server rented by the developer, in a Postgres database. Traffic to the site is encrypted in transit. Nothing is copied to an analytics service, an advertising network, or a third-party account system.

Children

Accounts are not intended for children under 13. If you believe a child has made one, write in and it will be removed.

Changes

If this notice changes in a way that matters, the date at the top changes and anyone with an account is emailed.

Asking about any of this

Write to [email protected]. It reaches a person, and that person is the developer.