Privacy policy
Last updated : 14 November 2026
This is a translation provided for convenience. The French version is the legally binding one.
Neonotte collects as little data as possible: what is needed to run your account and the game, protect it from abuse and fix bugs. No data is sold.
Data controller
NANNI Anthony, 62300, France. Contact: [email protected].
Data processed
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Username, email address, password (stored hashed, unreadable) | Create and secure your account, send confirmation and password reset emails | Performance of the contract (terms of use) | Until the account is deleted |
| Game data: corporations, buildings, squads, reports, rankings | Run the game | Performance of the contract | Until the account is deleted; rankings of finished seasons keep the corporation name (public game archives) |
| Private and alliance messages | Messaging between players, moderation upon report | Performance of the contract; legitimate interest (moderation) | Until the recipient’s account is deleted; an excerpt of a reported message is kept with the report |
| Blocks, reports, sanctions | Fight harassment and cheating | Legitimate interest | Until the account concerned is deleted |
| Session cookie | Keep you signed in | Strictly necessary (no consent required) | 7 days, or until you sign out |
| IP address | Limit sign-in and sign-up attempts (anti-abuse), server technical logs | Legitimate interest (security) | Anti-abuse counters: 1 hour at most; server logs: 30 days |
| Connection fingerprint: a code computed from your IP address with a secret key (the address itself is not stored), dates of first and last use | Detect multiple accounts: two accounts seen on the same connection within 14 days cannot trade with, loot or reinforce each other | Legitimate interest (fair play, compliance with the terms of use) | 90 days after last use |
| Date of last sign-in | Delete inactive accounts | Legitimate interest (data minimisation) | Until the account is deleted |
| Error reports: error message, page, browser, game version, account number (no username, email or IP) | Detect and fix bugs | Legitimate interest | 90 days |
| Database backups | Restore the game after an outage | Legitimate interest | 90 days: a deleted account disappears from backups within that period |
An account with no sign-in for three years is deleted automatically. An email warns you one month before: simply sign in again to keep it.
If two accounts are wrongly linked (for example two players from the same household), the moderators can allow them to interact on request.
Recipients and processors
- Aruba S.p.A. (Italy): hosting of the server and database.
- Cloudflare, Inc. (United States): all traffic goes through its network, which therefore sees your IP address. Transfers outside the European Union are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
- Scaleway SAS (France): sending the game’s emails.
Error tracking (GlitchTip) is hosted on our own server: nothing is sent to a third-party service. Other players see your username, corporation and alliance names, your rankings and the messages you send them. They never see your email address.
Advertising
To fund the game, Google AdSense banners may be shown on this website (guides, news, FAQ), never in the game itself. Google and its partners may then set cookies to measure ad audiences and, only with your consent, personalise them. Your choice is requested by a consent banner on your first visit. You can change it at any time with the cookie settings link at the bottom of the page. Refusing does not stop you from playing: the ads shown are then non-personalised.
If an ad blocker prevents ads from loading, no advertising cookie is set. You can also delete cookies from google.com and doubleclick.net in your browser settings.
Learn more: how Google uses data from partner sites.
Your rights
You can access your data, correct it, erase it, restrict its processing, object to processing based on legitimate interest and request its portability. Two rights can be exercised directly in the game, on the My account page (world menu at the top of the screen):
- Export my data: a JSON file with all your account data;
- Delete my account: immediate and permanent deletion.
For other requests, write to [email protected]. We reply within one month. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.
Minimum age
The game is open from age 15. Between 13 and 15, signing up requires the consent of a parent or legal guardian.
Security
Encrypted connection (HTTPS), passwords hashed with Argon2, session tokens stored as fingerprints, database not reachable from the Internet, backups encrypted in transit.