Privacy
How we protect your data and respect your presence.
Last updated: April 2026
Our Promise
Nimbus Novem does not trap people. It does not hoard identity. It does not weaponize data. Your data exists to serve you — not us.
We are stewards of your information, not owners. You may leave at any time, take your data with you, and owe us nothing.
What We Store
We only store what is necessary for Nimbus Novem to function as a meaningful space. Nothing more.
- Account information: Email address (for authentication), display name, handle, and avatar you choose to share.
- Content you create: Messages, artifacts, motion content, and anything you intentionally contribute.
- Preferences: Your quiet path settings, atmosphere preferences, and surfaces you choose to avoid.
- Presence patterns: Session rhythm and return cycles — used only to reduce noise, never to manipulate behavior.
- Technical logs: Minimal error logs and rate limiting data for abuse prevention. These are not used for profiling.
What We Do Not Track
These are not aspirational. These are structural decisions we have made and will not change:
- No engagement metrics (time spent, scroll depth, click patterns)
- No social graphs (who you follow, who follows you)
- No emotional scoring or sentiment analysis
- No addiction or retention predictions
- No location tracking beyond what you explicitly share
- No third-party advertising trackers
- No selling or sharing of your data with advertisers
If a system technically complies but violates the feeling of privacy, we consider it non-compliant and remove it.
Your Data, Your Ownership
You own your data. You own your history. You own your work. You own your signals.
You have the right to:
- Export everything you've created at any time
- Request deletion of your account and all associated data
- Leave without penalty, without friction, without guilt
Exports are provided in standard, portable formats. We do not lock you in. Leaving is allowed without explanation.
Visibility & Access
Not everything here is public. Different surfaces have different visibility:
- Public pages: About, Privacy, Terms are visible to everyone.
- Member-only surfaces: Spot, Motion, Archive, and other spaces are only visible to signed-in members. There is no public feed.
- Witnessing: When you witness something, no public count is shown. Names are only visible when explicitly opened, if at all.
- Quiet Path: A preference signal that reduces motion and overload. It is not a marketing profile. It is not used for targeting.
Quiet Path Memory
Nimbus Novem has a feature called Quiet Path Memory. Here's exactly what it does and doesn't do:
What it stores:
- Your preferred session rhythm (short vs. long sessions)
- Surfaces you consistently avoid (so we stop showing them)
- Return patterns (so we welcome you back quietly)
What it never stores:
- Emotional scoring
- Addiction predictions
- Engagement risk assessments
- Public-facing totals
Quiet Path Memory shapes what is withheld, not what is pushed. If it is ever used to increase time online, it must be removed.
Third-Party Services
We use minimal third-party services to operate:
- Authentication: Handled through Supabase, which stores only what is needed for secure login.
- Hosting: Our infrastructure providers do not have access to your personal data.
- Payments: When you purchase, payment processing is handled by trusted providers. We never see your full card number.
We do not use analytics platforms that track behavior. We do not embed social media trackers. We do not show ads.
Cookies
We use only essential cookies required for authentication and basic functionality. We do not use:
- Marketing cookies
- Analytics cookies
- Third-party tracking cookies
Security
Your data is encrypted in transit and at rest. We implement industry-standard security practices and regularly review our systems.
If a security incident occurs, we will notify affected users promptly and transparently. We do not hide breaches.
Age Requirements
Nimbus Novem is designed for users 13 years of age and older. We do not knowingly collect information from children under 13.
Data Retention
We keep only what is needed to operate. When you delete your account, we remove your data. We do not retain shadows of you for later use.
Some technical logs may persist briefly for security and abuse prevention, but these are not tied to your identity after deletion.
Changes to This Policy
If we change this privacy policy, we will notify you. Changes will never retroactively reduce your rights or protections.
We will not suddenly start tracking things we said we wouldn't track. If our principles change, we have failed.