Privacy Policy
This Privacy Policy explains how Noctis (“we”, “us”) collects and uses your personal data when you register for early access at noctis.to. We aim to collect only what we need, and to be clear about it.
1. Data we collect
- Information you give us: the email address and character name you submit, and the fact that you accepted our Terms.
- Technical data, collected automatically: your IP address, browser/user-agent, a device identifier stored in a cookie, your chosen language, and the date and time of your registration.
- Usage data: how you interact with the site, collected via the analytics and advertising tools described in Section 4.
2. How we use your data
- to record and manage your name reservation;
- to notify you before registrations open and let you claim your reservation;
- to send you the Noctis newsletter (launch news and updates), which you can unsubscribe from at any time;
- to detect, prevent, and act on abuse, fraud, and circumvention of our one-reservation-per-person limit;
- to measure and improve our site and marketing, and to understand where our audience comes from.
3. Legal basis
Where the GDPR or similar laws apply, we rely on: your consent (for the newsletter and for analytics/advertising cookies); our legitimate interests (operating the program, securing the service, and preventing abuse); and, where relevant, taking steps at your request before launch.
4. Cookies, analytics & security tools
We and selected providers use cookies and similar technologies:
- Essential: a session cookie and a device-identifier cookie (ea_device) used to secure the form and enforce one reservation per person.
- Security — Cloudflare: our site is served through Cloudflare, which protects against bots and attacks (including the invisible Turnstile check on our forms) and may set security cookies. Turnstile is provided subject to Cloudflare's Turnstile Privacy Addendum.
- Analytics — Google Analytics 4: we use Google Analytics, deployed through Google Tag Manager, to understand site usage.
- Advertising — Meta Pixel: we use the Meta (Facebook) Pixel to measure and optimize our advertising.
- Advertising — TikTok Pixel: we use the TikTok Pixel to measure and optimize our TikTok advertising.
These providers may process data outside your country (for example, in the United States) under appropriate safeguards.
5. Who we share data with
We do not sell your data. We share it only with the service providers acting on our behalf described above (Cloudflare, Google, and Meta), and where required by law.
6. How long we keep it
We keep your reservation data until the early-access program ends and you have had the opportunity to claim your name, or until you ask us to delete it or you unsubscribe — whichever comes first. Technical logs are kept only as long as needed for security.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, or restrict your data, to object to or withdraw consent for processing, and to data portability. You can unsubscribe from the newsletter at any time via the link in our emails. To exercise any other right, contact us (Section 9); we will respond as required by law.
8. Security
We use reasonable technical and organizational measures to protect your data, including transport encryption and restricted access. No method of transmission or storage is completely secure, however.
9. Children
The program is not directed at children below the age of digital consent in their country, and we do not knowingly collect their data. If you believe a child has registered, contact us and we will remove it.
10. Changes
We may update this Policy; the “last updated” date will change accordingly, and significant changes will be made clear on the site.
11. Contact
For privacy questions or requests, reach us through our official Discord.