Privacy Policy
We take your privacy seriously. This policy explains what we collect, how we use it, and your choices.
1. Information you provide
- Account: username, display name, email, password (hashed with pepper + PBKDF2; never stored in plaintext), profile bio, location/website, avatar/banner keys (stored in R2, served via /media/).
- Commerce: purchase history, license keys, download records, bundle entitlements, promo redemptions.
- Security: session records (token hash, device hash, timestamps) — not the raw token.
2. Automatically collected & infrastructure
- Security logging: we log IP-derived request IP via cf-connecting-ip for rate-limiting (`rateBuckets` in worker.js) and abuse prevention. No persistent tracking profile is built from this in current code.
- Session/Cookies: Authentication uses `localStorage` keys `nexus_web_session` (Bearer token) and `nexus_web_user` (cached display name/role/plan) — not HttpOnly cookies. `sessionStorage` holds `nexus_return_url` for auth redirects. `localStorage` also holds versioned cookie consent `nexus_cookie_consent` (see Cookie Policy).
- Cloudflare: Nexus runs on Cloudflare Workers + D1 + R2. Cloudflare provides infrastructure, TLS, and edge logs per its own policy. We do not currently run third-party analytics or advertising scripts.
| Storage | Purpose | Duration |
|---|---|---|
| nexus_web_session | Authentication (essential) | Until logout/expiry (30 days) |
| nexus_web_user | Display cache (essential) | Until logout/401 |
| nexus_cookie_consent | Cookie preferences (essential for consent) | Persistent, versioned |
| sessionStorage nexus_return_url | Post-login redirect | Session only |
4. How we use information
- Operate, secure, and improve Nexus (auth, rate-limiting, notifications).
- Provide store functionality including product browsing, purchases, licensing and downloads.
- Send transactional email where configured (verify, reset) via Brevo/webhook outbox — not marketing without consent.
- Donations: optional support via external Ko-fi (https://ko-fi.com/sandro6560); Nexus does not process card/bank details — only a manual
donatorentitlement flag may be set by admins after verification. - No profiling, no sale of personal data. Analytics/advertising are future/optional and disabled without consent.
5. Processors & sharing
Service providers: Cloudflare (hosting/storage), and where configured Brevo (transactional email) or your email webhook. We share only as needed to provide the service, comply with law, or protect safety. We do not sell personal data. If analytics/advertising is introduced, it will require consent and be listed here.
6. Retention & deletion
Account data is retained while your account exists. Deleting your account removes or anonymizes personal data through our deletion flow, subject to transaction, tax, fraud-prevention and other legal retention requirements. Session records expire after 30 days. Email delivery records are retained for troubleshooting and purchase support.
7. Your rights (UK/EU considerations)
Subject to applicable law you may have rights to access, correct, delete, restrict, object, or port your data, and to withdraw consent where processing is based on consent. Contact us to exercise rights. We will respond per legal timelines. You may lodge a complaint with your supervisory authority (e.g., UK ICO). Data is processed in the jurisdictions where Cloudflare operates infrastructure.
8. Cookies & storage choices
Essential storage (auth) cannot be disabled if you want to stay logged in. Optional categories (Analytics, Advertising, Preferences) are currently unused and off by default — rejecting them has no effect today but will apply if those features ship. Manage via the cookie banner or Cookie Policy / Cookie Settings link in footer or here. See dedicated Cookie Policy for currently used vs future categories.
9. Changes & contact
We may update this policy; material changes will be notified via the site. Contact us through the Help page or the official address published on buildwithnexus.xyz.