Privacy, in plain words.

What we process, and why

Email and consent. We store your normalized email address, signup and confirmation timestamps, notice version, and mailing status. We use these to send the confirmation you request, a receipt after your first successful confirmation, and the game’s launch link if you remain subscribed. The receipt states whether a Founder reservation was earned. The form trims spaces and treats letter case as equivalent; it does not merge different aliases.

Founder eligibility. An eligible confirmation creates a separate, stable reward identifier linked to the email record, with the reward type and reservation date. This allows us to honor the reservation even when launch emails are stopped.

Support. When you write to support@nulveris.com, we process your email address, message, any attachments you choose to send, and our replies to resolve your request. The inbox is human-managed. Please do not send passwords, payment details, or unnecessary sensitive information.

Delivery and safety. We process verification links, queued email content, delivery identifiers and status, failed-delivery or complaint information, and temporary request limits. An IP address is necessarily processed to connect to the website. The application stores keyed digests of IP addresses and email addresses for request limits, rather than the raw values in those rate records. It does not write emails or verification tokens to application logs.

Where applicable law requires a legal basis, requested launch emails rely on your consent; recording and fulfilling the reward you request relies on performing that commitment; responding to support requests, protecting the service, and honoring opt-outs relies on legitimate interests, or a legal obligation where the request concerns statutory rights. You can object to interest-based processing. Necessary legal obligations may also apply. Providing an email is not a legal requirement: without it, we cannot confirm a signup or associate a reward with you.

Anti-abuse rules may temporarily delay a request or stop delivery. We do not use advertising profiles or automated decisions with legal or similarly significant effects. Contact support if you believe a restriction is mistaken.

How long information stays

• Unconfirmed registrations: removed after 30 days without a new confirmation request, unless a delivery suppression must be retained or an earlier confirmed reservation exists.
• Confirmation links: valid for 24 hours from the request. Queued confirmation and receipt content expires within 23 hours of being queued and is cleared after sending, cancellation, or final failure.
• Abuse-prevention digests: expire after 48 hours. Anonymous daily sending counts are kept for 30 days.
• Delivery records: retained for up to 90 days after provider acceptance, or creation if not accepted. Delivery-event metadata is retained for up to 90 days after receipt.
• Confirmed reservations and mailing preferences: kept while the launch notification, outstanding reward, or suppression of unwanted mail still requires them. We will publish any future claim deadline before it applies and remove information that is no longer needed. You can request deletion sooner.
• Support correspondence: held in our Resend inbox subject to its email retention period, currently 30 days on Pro. We avoid copying inbox content into separate archives. If a specific legal obligation or dispute requires longer retention, only the necessary information is kept for that purpose.
• Backups: encrypted database backups use a 30-day retention period. Deleted data may remain isolated in an older backup until it expires; restoring a backup must reapply subsequent deletions and opt-outs before sending resumes.

Expiry is applied by routine cleanup. If a provider has already accepted an email, we may be unable to recall that message. Providers may retain limited security or suppression information under their own applicable obligations.

Providers, access, and international processing

The public service is designed to use Hetzner infrastructure in Germany for the website, database, and encrypted backups. Resend provides outgoing email and the support inbox, receiving message addresses, content, attachments where provided, and delivery information. Our verified sending domain uses Tokyo (ap-northeast-1) for email routing. The sending region does not determine data residency: Resend stores message content, delivery logs, webhook payloads, and account records in the United States, where its primary processing takes place. The operator is based in Israel.

We use provider data-processing terms and appropriate transfer safeguards where required, including contractual safeguards where applicable. You may ask for information about the relevant safeguards. See Resend’s data-processing terms and current subprocessors.

Better Stack receives operational status, availability measurements, and aggregate queue, capacity, and backup alerts. We do not include subscriber addresses, message content, or verification tokens in monitoring payloads. Email open and click tracking are disabled. The support inbox does not use AI features.

Only authorized operators and service providers may access information for the stated purposes. We may disclose information when legally required or necessary to protect rights and security. We do not share visitor information with the artwork or audio-generation tools: the finished assets are hosted with the page. See Resend’s data handling and retention information.

Unsubscribe, rejoin, or delete

Use the unsubscribe link in an email to open the preference page, then choose Unsubscribe from emails. You do not need an account or password. If the link is unavailable, contact support@nulveris.com. Withdrawal cancels queued confirmation and receipt mail and stops future launch mail and does not affect the lawfulness of earlier consent-based processing.

Unsubscribing keeps any already earned Founder reservation. Reopening an old confirmation does not undo your opt-out. While preregistration is open, you can request a new confirmation and explicitly confirm again to rejoin; delivery blocks may need support assistance.

Full deletion removes the live email record, linked reward reservation, and associated delivery records we can identify. That may leave us unable to verify a later claim. Temporary abuse-prevention digests and delivery events that can no longer be linked to your record expire under the limits above. We explain the reward consequence and reasonably verify control of the address before acting; deletion is not conditional on giving up unrelated statutory rights. We also address relevant provider records and private exports as part of the request. Deleting this landing-page record is separate from deleting a future game account or data held independently by a provider.

Your rights and how to reach us

Contact support@nulveris.com for access, correction, deletion, or a copy of your information. Depending on the law that applies, you may also request portability, restriction of processing, or object to certain uses. We may ask for proportionate evidence that the request concerns your address; do not send passwords, payment information, or identity documents unless a specific, justified request is made.

We respond within the deadlines that apply to your request. Where GDPR applies, this is normally within one month; if a lawful extension is needed, we explain it within that period. If we cannot fulfill a request, we explain the reason and available review options.

You may complain to the Israeli Privacy Protection Authority or the competent authority where you live or work. Contacting us first is welcome but is not a condition for exercising that right. Mandatory local privacy rights remain available.

Age, cookies, and your browser

Preregistration is for people aged 16 or older who can consent for themselves under the law where they live. We do not offer a parental-consent process or knowingly accept registrations below that age. If an underage person’s address was submitted, contact support so we can investigate and remove it.

We do not set tracking cookies. Your browser can store the nulveris-motion preference so your animation choice survives a return visit. You can change it with the motion control or clear it in browser settings. Audio starts only after you choose to enable sound. The page does not require animation, audio, or WebGL to read content or use signup.

If this notice changes

The version and update date appear above. We will publish material changes clearly and obtain fresh consent where required before using your email for a new purpose. Signing up does not subscribe you to unrelated marketing.