1.What we collect
We collect the minimum needed to run the platform and deliver an order you have placed.
- Account details: display name, email address and password hash
- Order details: the service, tier, requirements you supply and delivery notes
- Communications: messages between you and your specialist, and support tickets
- Payment metadata: the amount, currency and status — never full card details
- Technical data: IP address, browser and device type for security and abuse prevention
2.What we never collect
We do not collect, request or store credentials for any game account. That includes passwords, one-time codes, recovery emails and authenticator seeds. If you send one to a specialist unprompted, it is deleted and the specialist is instructed to tell you not to.
3.Why we process it
- To create and secure your account
- To deliver, support and dispute-handle the orders you place
- To detect fraud, abuse and prohibited requests
- To meet accounting and tax obligations
- To improve the platform in aggregate, using data that does not identify you
4.Payment data
A production build would use a PCI-compliant payment processor. Card details would be entered into the processor’s hosted fields and never reach Nebulith servers. We would store only the transaction reference, amount and status.
This demonstration build processes no payments and stores nothing.
5.Retention
Account data is kept while your account is open. Order records are retained for as long as accounting rules require, then deleted. Messages are kept for two years, after which they are removed. Deleting your account removes your profile, favourites and reviews.
6.Sharing
We share order details with the specialist assigned to your order, and only what they need to do the work. We use processors for hosting, email delivery and payments, each bound by contract. We do not sell personal data.
7.Your rights
You can request a copy of your data, ask for corrections, or ask us to delete it. Marketing preferences are managed in your dashboard settings and can be changed at any time.
8.Cookies
We use a small number of first-party cookies for sign-in sessions and preferences. Analytics, where enabled, is aggregate and privacy-preserving. There is no advertising tracking on this platform.
9.Contact
Privacy questions and data requests can be sent through the support page. We respond within one business day and complete data requests within thirty days.
Questions about this document? Contact us.