Privacy Policy · Nova Dominion

00 In short

Your wallet is your account. No email, no password, no phone number.
We store only what the game needs to run: your wallet address and your game.
No ads, no analytics, no tracking. We never sell your data or share it for marketing.
Purchases, referral codes and claims are Solana transactions: public by design.
During the test phase the game runs on Solana devnet with a test token that has no monetary value.

01 What we store

Your wallet address

The public key of the wallet you sign in with. It identifies your account. We never see your private key or seed phrase.

Your game, on our server

The commander name and planet names you choose, your planets, buildings, research, fleets, battle reports, reward and claim records, referral relations and tutorial progress. Other players see your commander name, planet names, planets and battle results, as in any multiplayer game.

Name reports

If you report another player's name, we store your wallet address, the reported planet, the names as they were shown and the time, so staff can review it. The reported player is not told who reported them.

One session cookie

nd_session keeps you signed in for up to 7 days. It is HttpOnly, Secure and signed, holds only your wallet address and its expiry, and is strictly necessary for the game to work. We set no other cookies.

Sign-in security records

Each sign-in message you sign (Sign-In With Solana) is stored with your wallet address and the IP address it was requested from, so we can limit abuse. One-time sign-in links that move a session to another browser are stored only as a hash and expire after two minutes.

On your device only

The game keeps a few things in your browser's (or the app's) local storage: sound and display settings, panel layout, the selected planet, the commander name you are typing, the offline practice save, the connection token your wallet app (Seeker Wallet, Mobile Wallet Adapter) issued and — only if you choose it — the throwaway key of the devnet test wallet. They leave your device only to your own wallet app.

02 What we never collect

Your real name, email address, phone number, contacts, photos or precise location.
Advertising identifiers. There are no ad networks, analytics or tracking scripts in the game, and no fingerprinting.
Private keys, seed phrases or anything in Seed Vault. Every signature happens inside your own wallet app.

03 How we use it

To sign you in and run the game: your empire, battles, the shared galaxy.
To compute the daily NOVA rewards, referral shares and the claim tickets your wallet redeems on chain.
To keep the game fair and the service secure: rate limits, cheat and abuse prevention.
To keep names free of abuse: a name filter, and staff review of the names players report.

We do not sell, rent or trade your data, and we do not use it for advertising or profiling.

04 On-chain transparency

Buying a planet, setting a referral code, claiming rewards and using the test faucet are transactions on the Solana blockchain. They are public and permanent: anyone can see them, linked to your wallet address, in a block explorer. Nobody — including us — can change or delete them. Our server also reads public chain data (purchases, reward pools) to run the game.

05 Services we rely on

Hosting and server functions: Vercel.
Database: Neon (Postgres), where the game state above is kept.
Solana RPC nodes: they relay the chain reads and the transactions your wallet sends. Like any web server, they see your IP address.
Solana Mobile (Seeker Connect relay): when you use "Connect with Seeker" on a Seeker phone, the end-to-end encrypted messages between the game and Seeker Wallet pass through Solana Mobile's relay, which sees your IP address and when you connect, not their contents.
Your wallet app (Seeker Wallet, Seed Vault, Phantom, Solflare…) is a separate service with its own privacy policy. So is any website you open from the game, such as a block explorer or X.

These providers process data only to deliver their service to us.

06 Keeping and deleting your data

Your game data is kept while your account plays in the current game world; resetting a world deletes it. Sign-in security records are kept for abuse prevention. Name reports are kept until they are reviewed and then for up to 12 months, to deal with repeat abuse.

Deletion: contact us (below) and prove you own the wallet by signing a message with it; we then delete the server-side game data linked to that wallet. On-chain records cannot be deleted by anyone. Data on your device goes when you clear the site's data in your browser, clear the app's storage, or uninstall the Android app.

07 Age

Nova Dominion is not directed at children. You must be at least 18 (or the age of majority where you live) to connect a wallet. We do not knowingly collect data from minors; if you believe a minor has an account, contact us and we will delete it.

08 Security and your rights

All traffic is encrypted (HTTPS). Sessions are signed, the cookie is out of reach of page scripts, and we store no passwords. No system is perfectly secure, but we keep what we hold to the minimum.

Depending on where you live (for example under the GDPR), you may ask to access, correct or delete your data, or object to its use. As we do not know who you are, we identify you by a signature from your wallet.

09 Changes and contact

We update this page when the game changes (for example when it moves from devnet to mainnet) and change the date at the top; important changes are also announced in the game or on the website.

Contact: reach the Nova Dominion team through novadominion.xyz or the official Nova Dominion account on X, @NovaDominionXYZ.