Privacy Policy

This policy explains what personal data Nichr collects, how we use it, and your rights under UK law. Nichr is operated as a sole trader based in the United Kingdom and acts as the data controller for the purposes of UK GDPR.

1. Data we collect

Account data: When you register, we collect your username, email address, and password (stored as a one-way hash). You may optionally add a display name, bio, and links to your profile.

Purchase data: When you buy a game, we store a record of the transaction including the game purchased, amount paid, payment method, date, and your IP address at the time of purchase for fraud prevention and dispute resolution. We do not store card numbers. Card payments are processed by CCBill; their privacy policy governs how card data is handled.

Crypto payment data: Crypto payments are processed by OxaPay. We store a transaction reference and amount. OxaPay's privacy policy governs how on-chain and payment data is handled.

Creator payout data: If you are a creator, we store your payout request history and any bank reference information provided in relation to transfers.

Usage data: We collect standard server logs including IP addresses, browser type, and pages visited, for security and debugging purposes.

Communications: If you contact us, we retain the content of that communication to respond to your enquiry.

2. How we use your data

We use your data to operate the platform, process purchases and payouts, send transactional emails (receipts, sale notifications, payout confirmations), and comply with legal obligations including fraud prevention and age verification requirements under the UK Online Safety Act 2023.

We do not sell your personal data to third parties.

3. Analytics

We use Google Analytics (Google LLC) to understand how visitors use the site - pages visited, session duration, and similar aggregate metrics. This data is used only to improve the platform. Google Analytics cookies are only placed after you give explicit consent via the cookie banner. Google acts as a data processor for this purpose. You can review Google's privacy policy at policies.google.com/privacy.

We use Google Consent Mode v2. If you decline analytics cookies, Google Analytics operates in a cookieless mode and does not store identifiable data on your device.

We use Cloudflare (Cloudflare, Inc.) for content delivery, DDoS protection, and DNS. Cloudflare processes visitor IP addresses and request headers as part of its service. Cloudflare acts as a data processor. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

We do not display third-party advertising on Nichr.

4. Cookies

Essential cookies (no consent required): We use a session cookie to keep you logged in and to remember your age verification. These are strictly necessary for the service to function and cannot be disabled.

Analytics cookies (consent required): With your consent, Google Analytics places cookies to help us understand site usage. These are only activated after you click "Accept" on the cookie banner. You may decline by clicking "Reject" - the platform functions fully without them.

You can change your cookie preference at any time using the cookie settings link - this will re-show the cookie banner on next page load.

5. Legal basis for processing

Contract: Processing your account data and purchase records is necessary to provide the service you have signed up for.

Legal obligation: We are required by law to retain purchase records for accounting purposes and to verify user ages under the UK Online Safety Act 2023.

Consent: Analytics cookies are processed only on the basis of your explicit consent, which you may withdraw at any time.

Legitimate interests: We process server logs and security data to protect the platform from fraud and abuse.

6. Data retention

Account data is retained for as long as your account is active. If you close your account, personal data is deleted within 30 days except where we are legally required to retain it. Purchase records are retained for 7 years for accounting and legal compliance purposes.

7. Your rights (UK GDPR)

Under UK GDPR you have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); object to or restrict processing; withdraw consent at any time where processing is based on consent; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We use HTTPS for all connections, bcrypt password hashing, and presigned URLs for file delivery. No system is completely secure - please use a strong, unique password for your account.

9. Age verification

In compliance with the UK Online Safety Act 2023 and other regional laws, we require age verification before allowing access to adult content. Age verification data is processed securely and is not shared with third parties except where required by law.

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. The date at the top of this page reflects the most recent update.

12. Contact

Data protection questions: [email protected].