Privacy policy

Controller

The data controller is the owner of NodusPlay. For any question or request about your data, write to [contact email pending — set CONTACT_EMAIL].

What data we process

• Account: email address, password (stored hashed, never in plain text) and preferred language.
• Profile (optional): display name, username, bio, location, avatar, banner, interests, links and your privacy settings.
• Activity: favorites, likes, wishlist, comments, reviews, saved searches, who you follow and who follows you, notifications, and clicks on "Play now" (linked to your user if you are signed in, unidentified otherwise).
• Messages and communications: private and forum messages, reports, appeals (with any screenshots you attach) and notifications.
• Technical data: IP address and data about your browser and device, which we use for security, to limit abuse and to show you your open sessions.
• If you are a creator: your studio details, games, covers, links, tags and update notes.

Minors

NodusPlay is not aimed at children under 14 and we do not knowingly collect their data. When you create an account you are asked to confirm that you are 14 or older, and we only keep the date and time of that confirmation. If you think someone under that age has signed up, write to [contact email pending — set CONTACT_EMAIL] and we will delete the account.

What we use it for

• Providing the service: signing in, showing your profile and games, and enabling favorites, comments, following and notifications.
• Security and moderation: reviewing games and comments, limiting abuse and protecting accounts.
• Computing discovery sections (for example, trending from clicks and favorites).
• Sending strictly necessary emails, such as password resets, and the alerts or summaries by email that you have turned on.

Cookies and local storage

We use a single cookie, essential to keep you signed in (nodusplay_session, HttpOnly, expires after 14 days). We also store preferences in your browser, such as language or whether the filter panel is collapsed, and a service worker keeps copies of static files so the site loads faster and shows an offline page. We do not use advertising or third-party analytics cookies.

Nodi, the site creature

If you are signed in and have not turned it off, Nodi shows up on screen every now and then. To make it work we store, tied to your account, how many Nodis you have caught, your daily streak, which variants you have, your recent appearances (about 30 days) and, if you adopt pets, your collection (names, stats, state and care history). None of this leaves NodusPlay or is used for anything else. You can turn it off in Profile settings > Website appearance.

Third-party content

Each game page links to its creator's own page, which has its own privacy policy. If a creator adds a YouTube or Vimeo video to their game page, we ask for your permission before loading it: until you accept, the provider is not contacted, and once it loads it receives your IP address and may store data on your device. If you choose “Always load”, we remember it in your browser and, in the catalog, games with a video from that provider play it on their card when you hover over it (muted). You can turn this off in Profile settings > Website appearance, and withdraw your choice by clearing your browser’s local storage. Some images (for example, covers linked by creators or the images of other stores’ offers) are loaded from third-party servers, which receive your IP address when you request them.

Who we share data with

Some providers help us run the service (server hosting, email, automatic translation and security) and process data only for that purpose, following our instructions. We may also disclose data when the law requires it.

How long we keep it

• While you have an account. You can delete it at any time from Profile settings → Delete account.
• When you delete it we permanently remove your account, profile, favorites, likes, wishlist, comments, reviews, follows, notifications and sessions and, if you are a creator, your studio, your games and the files you uploaded.
• Games you withdraw go to a recycle bin and are permanently deleted after 30 days.

Your rights

You can access, rectify (by editing your profile), erase (by deleting your account), object to the processing of, or request the portability of your data by writing to [contact email pending — set CONTACT_EMAIL]. If you believe we have not handled your rights properly, you can complain to the data protection authority of your country.

Changes

If we change this policy we will update the date on this page.