Privacy Policy
Nexuna uses the data needed to sign you in with Discord, fulfil orders, operate Nexuna Pennies, provide support and secure the service. This website does not run advertising trackers or sell personal data, and public statistics are aggregate-only.
Effective: 19 October 2026 · Version: 1.0 · Operator: Nexuna Development Team, an unregistered development team based in Latvia. Nexuna does not claim a company-registration or VAT number on this website.
1. Controller and contact
Nexuna Development Team, an unregistered development team based in Latvia, is responsible for personal data processed through nexuna.xyz, the Client Portal and the Nexuna Discord services described here. For privacy requests, open a Discord support ticket from the account concerned so we can verify the request. Start at Contact & Support.
2. What we process and why
| Context | Data | Purpose and legal basis |
|---|---|---|
| Discord sign-in | Discord user ID, username/display information made available by the identify OAuth scope, portal role, session security values. | Authenticate you, route you to the correct customer/staff/owner area and protect accounts. Contract and legitimate security interests. |
| Orders and payments | Discord ID, product, amount/currency or NP amount, payment method, order/status references, Stripe checkout/session identifiers, partnership-discount eligibility at order time. | Fulfil and evidence orders, prevent duplicate fulfilment, provide receipts/support and meet accounting/legal obligations. Nexuna does not store full card numbers; Stripe processes card data. |
| Nexuna Pennies and Discord shop | Discord ID, wallet balance and transaction journal, purchases, transfers, partnership partner/beneficiary IDs and partner-written advertisement content. | Operate the economy, discounts and partner listings; investigate errors and abuse. Contract and legitimate interests. |
| Support tickets and project delivery | Messages, files and project details you send, ticket/channel IDs, assigned staff and status, deliverables and related technical records. | Quote, build, deliver and support your request. Contract and legitimate interests. |
| Website security and operations | IP address, user agent, timestamps, requested URLs, rate-limit/security events and server logs. | Security, abuse prevention, debugging and service reliability. Legitimate interests. |
| Public statistics | Aggregate member count, paid-order totals/count, NP circulation and daily snapshots from 19 October 2026 onward. | Transparency. Public output contains no names, per-user balances or individual order details. |
| Project brief builder | Text typed into the contact-page form. | The builder runs in your browser and copies text locally; Nexuna receives it only if you paste/send it in Discord. |
3. Cookies and local storage
Nexuna uses strictly necessary login/OAuth cookies. It does not use advertising or analytics cookies on this website as of the effective date. Details, cookie names and durations are in the Cookie Policy. If you turn optional click sounds on, your browser stores that preference locally.
4. Who receives data
- Discord — authentication, community, tickets, shop and economy features.
- Stripe — card-payment processing and payment-status webhooks.
- Cloudflare and hosting/server providers — DNS, TLS, content delivery, security and server operation.
- Nexuna staff/owner accounts — only as needed for support, fulfilment, moderation or administration.
- Authorities or advisers where disclosure is legally required or necessary to establish/defend legal claims.
These providers may process data outside the European Economic Area under their own transfer safeguards and terms. We do not sell personal data and do not share it for third-party advertising.
5. Retention
We retain account, order, wallet and support records while they are needed to operate the service, evidence transactions, resolve disputes, prevent abuse and satisfy legal/accounting duties. Security logs are kept for a shorter operational period unless an incident requires longer retention. Aggregate statistics may be kept after underlying records are deleted because they do not identify a person.
6. Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction, portability or objection, and you may withdraw consent where consent is the legal basis. Some order/accounting/security records may need to be retained despite an erasure request. Open a Discord support ticket from the relevant Discord account and state that it is a privacy request.
You may complain to your local data-protection authority. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija). We ask that you contact Nexuna first where possible so we can try to resolve the issue.
7. Security and children
We use HTTPS/HSTS, HttpOnly/SameSite session cookies, OAuth state checks, server-side authorisation, rate limits and access controls. No online system is perfectly secure. Nexuna services are intended for people who are permitted to use Discord and, where a purchase requires legal capacity, to enter the relevant agreement personally or with appropriate guardian involvement.
8. Automated decisions and changes
Nexuna does not use personal data for automated decisions producing legal or similarly significant effects. Material privacy changes will be published on this page with a new effective date/version.