Privacy Policy

Last updated: April 2026

1. Who we are

Nossky (the "Service") is a non-commercial, community-operated NosTale private server. The website is hosted in the European Union and the game service is operated from Germany. This notice explains what personal data we collect, why, and your rights under the GDPR and equivalent regulations.

2. Data we collect

• Account data: username, email, hashed password, registration date, last-login timestamp.
• Connection data: IP address, user agent, approximate country (from IP) — used for anti-cheat, abuse prevention and server-side logs.
• Game data: characters, levels, inventory, friends, family, chat logs and actions performed in-game. Required to deliver the service.
• Payment data: if you purchase coins, only the transaction ID is stored. Card/PayPal details are handled by the payment processor and never reach our servers.
• Support data: ticket content you submit, and any attachments you voluntarily provide.

3. Why we process it (legal basis)

• Contract performance (GDPR Art. 6(1)(b)): operating the game and the account dashboard.
• Legitimate interest (Art. 6(1)(f)): abuse prevention, anti-cheat, server security logs, analytics.
• Consent (Art. 6(1)(a)): optional cookies, marketing communications (never shared with third parties without explicit consent).
• Legal obligation (Art. 6(1)(c)): responding to law-enforcement requests.

4. How long we keep it

• Active accounts: for the lifetime of the account.
• Deleted accounts: 90 days (soft-deleted, then purged from active DB).
• Server logs (IPs, chat): 180 days rolling window.
• Payment transaction records: 10 years (tax / accounting regulations).

5. Who we share it with

We do not sell your data. Limited sharing happens only with:

• Cloudflare: CDN and DDoS protection — sees your IP and user agent.
• Stripe / PayPal: payment processors — only when you purchase coins.
• Law enforcement: when legally compelled to.

6. Your rights

Under GDPR you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data directly from your account settings.
• Erase your account and associated data (subject to legal retention periods).
• Object to processing based on legitimate interest.
• Portability of your data in a machine-readable format.
• Complain to your local data-protection authority.

To exercise these rights, email [email protected] from the address linked to your account.

7. Children

Nossky is not directed at children under 13. If you are a parent or guardian and believe we have collected data from a minor, contact us and we will remove it.

8. Changes

We will post updates to this policy on this page. Significant changes will also be announced via the news feed.