Privacy Policy

We collect the minimum needed to run the platform. We do not sell your personal data, we do not run advertising or tracking networks, and we do not add you to mailing lists without your consent.

Account credentials: a username, an optional display name, and a password stored only as an Argon2id hash. Scan configuration, findings, and evidence you create are stored to provide the service. When you log in or register, we also record the IP address and user agent to a tamper-evident audit log solely to detect abuse and brute-force attempts.

We do not collect email addresses at registration. We removed our analytics endpoint — the platform does not track pageviews, sessions, or browsing behaviour. We do not use cookies for advertising, social media, or retargeting. See the Cookie Policy for the full list of what we store in your browser.

A short-lived access token and a user profile are stored in your browser's local storage so you stay signed in to the console. The only cookie we set is a strictly necessary HTTP-only refresh token used to keep your session valid. Everything stored locally can be cleared by signing out or clearing site data.

We do not see or store your card details. Payments are processed by our providers — Gumroad (cards) and NOWPayments (crypto). When you purchase, those providers handle the transaction under their own policies and store only a confirmation reference on our side.

Scan findings and the evidence attached to them are yours. They are stored to provide the service and are never shared with other customers or third parties. We do not train third-party models on your findings.

Account data is retained while the account is active. You may request full deletion of your account and associated data at any time by writing to privacy@nyxeara.vip. Audit-log entries are retained for a bounded period for security purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw any consent you have given. Write to privacy@nyxeara.vip and we will honour those rights within applicable timeframes.

Data is protected in transit by TLS and at rest by industry-standard measures. Passwords are hashed with Argon2id and are not recoverable in plaintext. Access to systems holding customer data follows least-privilege principles.

Privacy questions and data requests: privacy@nyxeara.vip. These policies may be updated; changes are reflected here and dated. Last updated September 9, 2026.