Nexcell LogoNexcell
Back to game

Last Updated: 2026-07-11

Privacy Policy

This Privacy Policy explains how Nexcell collects, uses, and protects information in connection with your use of our websites, game, and related services.

  • We collect only what we need to operate the game and improve your experience.
  • We do not sell your personal data.
  • This document explains what data we collect, how we use it, and your choices.

Controller & Contact

Nexcell is responsible for the processing described in this policy. For privacy requests or questions, contact:

support@nexcell.app

Please include enough information for us to identify your account and request. We may need to verify your identity before acting on a data-protection request.

Information We Collect

Information Collected Automatically

  • IP address
  • Device information (operating system, browser type)
  • Request, security, and error data needed to deliver and protect the service
  • Gameplay data and preferences (e.g., controls, settings)

Information You Provide

  • Nickname (in-game name)
  • Email address and account/profile information
  • Chat messages you send
  • Images and content you upload (skins, emotes) including their names and tags

    • We fully strip out metadata from all images that get uploaded to our service including GPS coordinates, camera make/model, timestamps, software info, or any other EXIF data to protect your privacy.

Information From Third Parties

  • Account information from third-party services you use to sign in (currently Discord or Google), such as an account identifier, display name, email address, and profile image, depending on the provider and permissions you approve

Cookies and Similar Technologies

What Are Cookies

Cookies, localStorage, and sessionStorage let a website store information on your device. Nexcell uses these technologies where needed to provide requested features.

Why We Use Cookies

  • Remember preferences (settings, keybinds)
  • Keep you authenticated
  • Remember interface and privacy-notice choices

How We Use Cookies

Authentication state, game settings, nicknames, recent server choices, and interface preferences may be stored locally on your device. These items are necessary to provide features you request or remember your choices. Vercel Web Analytics is used for aggregated usage statistics and does not use third-party cookies. You can clear local data in your browser, but some features or preferences may stop working or reset.

Purposes & Legal Bases

Security & Abuse Prevention

  • Preventing attacks (e.g., DDoS, fraud, abuse)
  • Monitoring for cheating or violations
  • Protecting against security breaches

Legal basis: our legitimate interests in keeping Nexcell secure, reliable, and fair (Article 6(1)(f) GDPR).

Authentication & Personalization

  • Authentication and account access
  • Storing game preferences and settings
  • Enabling chat features and social interactions

Legal basis: performing our agreement with you and taking steps you request before entering it (Article 6(1)(b) GDPR).

Performance & Improvements

  • Improving game performance and responsiveness
  • Developing new features and gameplay modes
  • Measuring usage to optimize the experience

Legal basis: our legitimate interests in understanding and improving the service (Article 6(1)(f) GDPR). Where consent is legally required, we rely on Article 6(1)(a) GDPR instead.

Compliance & Enforcement

  • Enforcing our Terms of Service
  • Complying with legal obligations
  • Responding to legal claims and protecting rights

Legal basis: compliance with legal obligations (Article 6(1)(c) GDPR) and our legitimate interests in establishing, exercising, or defending legal claims (Article 6(1)(f) GDPR).

Information Sharing and Disclosure

We understand the importance of protecting your privacy. We share information only as needed to operate our services.

Service Providers

  • Vercel: website hosting and aggregated Web Analytics
  • Convex: database, application backend, and authentication
  • Cloudflare R2/CDN: storage and delivery of uploaded media
  • Upstash: rate limiting and abuse prevention
  • Discord and Google: optional sign-in providers
  • Resend: transactional account email delivery

These providers process only the data needed for their role. Their own processing and any optional account you maintain with them are also governed by their privacy notices.

Data Retention

We keep personal data only for as long as it is needed for the purpose described above. The exact period depends on the data and the reason for processing it:

  • Account, profile, social, and gameplay records are generally kept while your account is active and removed or anonymized after a valid deletion request, unless an exception below applies.
  • Security, rate-limit, and technical logs are kept for the shortest configured period needed to detect abuse, investigate incidents, and maintain the service. Incident-related records may be kept longer while a claim or investigation is active.
  • Support and legal correspondence may be retained until the request is resolved and for the applicable limitation period.
  • Records subject to tax, accounting, or other statutory duties are kept for the period required by applicable law.
  • Approved public user content may remain available under the license in our Terms, but associated personal data is removed or anonymized where required. Moderation evidence may be kept where necessary to prevent repeat abuse or defend claims.
  • Data stored only in your browser remains until it expires or you clear it. Residual copies in backups are deleted on the applicable provider's normal backup cycle.

There is no general two-year GDPR retention period. We set and review periods by purpose, legal obligation, and necessity.

International Transfers

Some providers or their subprocessors may process data outside the European Economic Area, including in the United States. Where Chapter V GDPR applies, we use an applicable adequacy decision (including the EU-US Data Privacy Framework where the recipient participates) or appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may request information about the safeguards by emailing us.

Security

Our Measures

  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Monitoring for suspicious activity
  • Incident response procedures

Limitations

While we implement strong measures, no system is completely secure. Please practice good security habits and contact us immediately if you suspect unauthorized access to your account.

Your GDPR Rights

Data Subject Rights

  • Access your personal data and receive a copy
  • Correct inaccurate or incomplete personal data
  • Request erasure or restriction where the law permits
  • Receive portable data where Article 20 GDPR applies
  • Object to processing based on legitimate interests; we will stop unless compelling grounds or legal claims justify it
  • Withdraw consent at any time for future processing where we rely on consent

You can export available account data from your profile or contact support@nexcell.app. We do not sell personal data and do not use solely automated decisions that produce legal or similarly significant effects.

Right to Complain

You may complain to a data-protection supervisory authority with jurisdiction where you live or work, or where you believe an infringement occurred.

Children's Privacy

Nexcell is not directed to children under 13. If you are under the age at which you can consent to data processing in your country, a parent or guardian must authorize consent-based processing. If you believe a child's data was provided without the required authorization, email support@nexcell.app and we will take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for operational, legal, or regulatory reasons. We will update the “Last Updated” date and notify users where appropriate.