Who is responsible
MMONova (mmonova.com) is operated by the MMONova team. For anything about your data write to [email protected].
What we collect
Account. Your username, your email address and a one-way hash of your password. If you sign in with Google we receive your Google account identifier, your email address and your first name, and nothing else from your Google account.
What you publish. Server listings, clan ads, player profiles and projects, including the contact details you choose to put in them. These are public once approved.
Nova Coins. A record of every purchase and every spend. Payments are handled by PayPal on PayPal's own pages. We never see or store your card or bank details; we receive the amount, the currency and PayPal's reference for the payment.
Technical data. Your IP address and browser type appear in our web server logs and in short-lived abuse counters (for example, how many forms an address submitted in the last hour). One session cookie keeps you logged in. Your light or dark theme choice is stored in your own browser and never sent to us.
Why we use it
To run your account and deliver what you buy (performance of a contract), to keep the site secure and free of spam and fraud (our legitimate interest), and to keep the payment records that tax and accounting law requires (legal obligation). We do not sell your data and we do not use it for advertising profiles.
Who else is involved
Cloudflare delivers the site, filters attacks and runs the “verify you are human” check on our forms. OVH hosts our server in the European Union. Google provides sign-in (only if you choose it), the web font this site uses, and the Safe Browsing check we run on website addresses that users submit. PayPal processes payments. Amazon Web Services (SES) delivers our emails. Each of them receives only what it needs for that job, and some of them process data outside the EU under the standard safeguards they publish.
The community forum at /forum has its own accounts, separate from the main site.
Cookies
The main site sets one essential session cookie. Cloudflare may set security cookies needed to tell people from bots. We do not use advertising or analytics cookies.
How long we keep it
Account data stays until you delete your account. Abuse counters are deleted after two days, web server logs after a few weeks. Payment records are kept for as long as tax and accounting law requires, even after an account is deleted, but without your username or email.
Your rights
You can see and correct your data in your account, and delete your account yourself under Settings: that removes your listings, ads and profiles and erases your username and email. You can also ask us for a copy of your data, object to a use of it, or ask us to restrict it, by writing to the address above. If you live in the EU or the UK you may complain to your data protection authority.
MMONova is not intended for children under 16.
Changes
If this policy changes in a way that matters, we will say so on the site before the change takes effect.