Privacy Policy
Version 1 - 2026-05-30
This Privacy Policy explains what personal data Nullcrest collects, why we collect it, how long we keep it, and the rights you have over it. It applies to the Nullcrest browser game and the account system that supports it.
1. Who we are (data controller)
The data controller for Nullcrest is Cyberfrog Systems (operating the Nullcrest service). For any privacy request or question, contact us at ops@cyberfrog.systems.
2. Who can use Nullcrest
Nullcrest is an adults-only (18+) service. It includes simulated economy and chance-based mechanics together with real-money token purchases. You must confirm you are at least 18 to create an account.
3. What data we collect and why
- Account and authentication data - your email address and authentication state, handled by our identity service (frogauth). Used to create and secure your account, sign you in, and send transactional email (verification and password reset). We never store the email password in readable form.
- Gameplay and progress data - your character, game state, progression, wallet and in-game ledger, action and run history, inventory, and notification preferences. Used to operate the game and persist your progress.
- Purchase records - records of token purchases processed through our payment layer (frogpay) and Stripe. We store a closed-loop purchase record only; we do not store your card details.
- Web-push subscriptions - if you enable push notifications, we store the browser push subscription endpoint so we can deliver notifications you opted into. You can withdraw this at any time by turning push off.
- Cookieless acquisition funnel - when you visit our landing page we record a cookieless beacon for attribution (any UTM-style campaign parameters in the link) together with a hashed IP address, a hashed user-agent string, and the referring host. This contains no cookie and no readable IP; it lets us understand which campaigns bring visitors without tracking individuals.
4. Cookies
We use only strictly-necessary cookies, set by our authentication service:
- frogauth_refresh - keeps you signed in (session).
- frogauth_csrf - protects against cross-site request forgery (security).
We set no tracking, advertising, analytics, or third-party cookies. Because every cookie is strictly necessary, no cookie-consent banner is required. The acquisition funnel described above is cookieless. See our Cookie Notice for detail.
5. Sub-processors
We share data with a small number of service providers who process it on our behalf, each under a Data Processing Agreement:
| Provider | Purpose | Data it processes |
|---|---|---|
| Stripe (via frogpay) | Payment processing | Payment and card data. Stripe is the controller of card data; Nullcrest stores no card data, only a closed-loop purchase record. |
| Resend (via frogauth) | Transactional email (verification, password reset) | Your email address only. |
| DigitalOcean | Hosting / infrastructure | Data at rest and in transit, as the hosting provider for our servers. |
The list above is our current and complete set of sub-processors. Each processes data under a Data Processing Agreement. If we add or change a sub-processor, we will update this list and reflect it in the version of this policy.
6. How long we keep data (retention)
| Category | Retention |
|---|---|
| Financial records (purchases, ledger, refunds, enforcement) | Approximately 7 years, for tax and chargeback-defense purposes. Retained after account deletion as a legitimate interest, keyed to a tombstoned account. |
| Gameplay / progress data | Kept for the life of your account and deleted when you delete your account. |
| Acquisition funnel and telemetry (hashed) | Maximum 30 days, then purged. |
| Operational server logs | Minimal / short (days), for debugging and incident response only. |
7. Your rights
- Access and portability - you can obtain a copy of your data in a structured, machine-readable form.
- Erasure - you can delete your account. This wipes your gameplay and progress data and removes your push subscriptions. We retain the legally-required financial records described above, keyed to a tombstoned account.
- Rectification - you can correct your data, including changing your account email.
- Withdraw consent - you can turn off web-push notifications at any time to withdraw that consent.
To exercise any right, use the in-app account controls where available, or contact ops@cyberfrog.systems.
8. Payments and refunds
Token purchases are processed by Stripe via frogpay. In-game tokens have no cash value and all sales are final; purchases are non-refundable, as disclosed at checkout. See our Terms of Service.
9. Changes to this policy
We may update this policy. On a material change we will bump the version above and, where the change is material, ask you to re-accept before your next purchase or sign-in.
10. Contact
Questions or privacy requests: ops@cyberfrog.systems.