Privacy notice

The short version

The game collects nothing. The website collects what you type into it, and counts page views with a self-hosted analytics tool that does not identify you. There is no advertising, and no third party is given your data.

What the game stores

Novera runs entirely on your machine. Your craft, worlds, automation, settings and key bindings are plain files in a per-user data directory, and they never leave your computer unless you copy them somewhere. The game does not phone home, does not carry an analytics library, and works with no network connection at all.

The one exception is if you choose to link the game to an account. That sends nothing but the approval exchange described below.

What the website stores

If you create an account, we hold:

• Your email address, so you can sign in and be sent a reset link.
• Your pilot name.
• A hash of your password. Not the password — a scrypt hash of it, which cannot be turned back into what you typed.
• A record of each device signed in: the browser or game client it is, its IP address, and when it was last seen. That is what the security page shows you, and what lets you sign a device out.
• Anything you own on the server, once purchases exist.
• A log of security events on the account — signed in, password changed, a device linked — with the IP address each happened from.

If you ask for updates by email, we hold the address and whether you confirmed it. Nothing else, and unsubscribing removes it from the sending list immediately.

Why we hold it

To run the account: to let you sign in, to keep your unlocks, and to let you see and cut off anything signed in as you. The security log exists so that if somebody does get into your account, there is a record of what happened. None of it is used to profile you, and none of it is sold or shared.

Cookies

One cookie, called novera_session. It holds a random token that identifies your session and nothing else — no name, no email, no tracking identifier. It is set when you sign in and removed when you sign out. Nothing else is stored on your device: the analytics described below sets no cookie and writes nothing to your browser. That is why this site has no cookie banner — it has nothing to ask you about.

Analytics

This website counts visits using Umami, running on the developer's own server at umami.silberie.com. It is not Google Analytics and it is not a third party — the data goes to the same person who runs this site, and nowhere else.

What it records for a page view:

• The page you looked at, and the page you came from.
• Your browser, operating system, screen size and country.

What it does not record: your IP address is used to work out the country and is then discarded rather than stored, and no cookie, identifier or other mark is put on your device. There is nothing linking one visit to the next, nothing linking a visit to an account, and nothing that follows you to any other website. If you would rather not be counted at all, any tracker blocker or a browser's "do not track" list will stop the script loading, and the site works exactly the same without it.

The game itself has no analytics of any kind. This is the website only.

Getting your data, and getting rid of it

On the Profile & data page you can download everything the account holds as a single JSON file, and you can delete the account. Deletion is scheduled rather than immediate — you get fourteen days, and signing in during that window cancels it. After that the row and everything referencing it is removed for good.

Deleting the account does not touch the files on your own machine. Those are yours, and the game will keep working with them.

Email

Transactional mail — confirming an address, resetting a password, telling you your password changed — is sent because the account needs it. Update mail is only sent if you asked for it, and every message carries a working unsubscribe link.

Where it is kept

On a server rented by the developer, in a Postgres database. Traffic to the site is encrypted in transit. The analytics above are kept on the same developer's own server. Nothing is copied to an advertising network, a third-party analytics service, or a third-party account system.

Children

Accounts are not intended for children under 13. If you believe a child has made one, write in and it will be removed.

Changes

If this notice changes in a way that matters, the date at the top changes and anyone with an account is emailed.

Asking about any of this

Write to [email protected]. It reaches a person, and that person is the developer.