Privacy Policy

Effective date: 30 July 2026 · Last updated: 30 July 2026

This policy explains what data the Nexo Discord Activity (“Nexo”, “we”, “us”) collects about you, why we collect it, how long we keep it, and what you can ask us to do with it. It applies to the Nexo Activity and to nothing else.

Nexo is operated by blendercs, who is the data controller for the purposes of this policy. You can reach us at nexogame.discord@gmail.com.

1. What we collect

1.1 From your Discord account

When you open Nexo, you are asked to authorise it. We request the identify scope and nothing else. Discord then gives us:

We do not receive your email address, your password, your phone number, your real name, your friend list, or the list of servers you belong to. The identify scope does not include them, and we do not ask for any scope that would.

1.2 From playing the game

Guesses are words from a dictionary of the game’s language, typed into a fixed grid of letters. They are not free text and they are not messages: there is no way to write anything to another player through Nexo.

1.3 About the server you play in

When you launch Nexo from a Discord server, we store that server’s ID, name and icon, the channel ID, and the Activity instance ID, together with your score in that server. This is what makes a per-server ranking possible — without it, the only ranking we could offer would be the global one.

If you launch Nexo outside a server, no server data is recorded.

1.4 Duel rooms

A Duel room records who opened it, who joined, the word played, and each participant’s result and finishing position, so that the live scoreboard and the podium can be shown. Nexo does not access the audio, video or contents of the voice call it runs in.

1.5 Integrity records

We keep an audit trail of actions that change your account: sessions opened and closed, currency credited or spent, purchases, achievements unlocked, duel rooms created and joined, and anti-cheat signals such as an impossibly fast sequence of guesses. Each entry records the action, the account it belongs to, a short technical detail and a timestamp.

This is what allows us to find and reverse an exploit, and to tell an unusually good player from an automated one. We do not record IP addresses in this trail.

1.6 In your browser

Nexo uses no cookies and no tracking technology of any kind. Your session token is kept in memory only and disappears the moment you close the Activity.

The only thing Nexo writes to your device is a small entry in your browser’s local storage holding your display preferences: chosen theme, colour-blind mode, whether the timer is visible, and whether the Activity closes when you leave. It never leaves your device, and clearing your browser data removes it.

2. What we do not do

• We do not read, store or have any access to your Discord messages.
• We do not access voice or video, nor record anything from a call.
• We do not know which servers you are in, beyond the ones you actually play Nexo in.
• We do not use advertising, analytics, tracking pixels or third-party scripts.
• We do not sell, rent or trade your data. Ever, to anyone.
• We do not build profiles for marketing, and we do not make automated decisions with legal effects about you.

3. Why we are allowed to process it

Under the Brazilian Lei Geral de Proteção de Dados (LGPD) and the European GDPR, the relevant grounds are:

• Performance of a contract — the account, progress, rankings and duel data exist because you asked to play a game that has them.
• Legitimate interest — the integrity records in §1.5, so that the rankings mean something and cheating can be undone. We keep them minimal for that reason.
• Consent — the Discord authorisation screen you accept when you first open Nexo. You may withdraw it at any time (§6).

4. Who else sees your data

Discord Inc. is the only third party involved, and only because Nexo runs inside Discord: we call Discord’s API to authenticate you and to confirm that a session really came from the server it claims. Discord’s own handling of your data is governed by Discord’s Privacy Policy.

Your display name, avatar, level and equipped frame are visible to other players in the rankings and duel rooms you take part in. That is the point of a ranking, and it is the only way your data is shown to anyone else.

Beyond that, we disclose data only if we are legally required to by a valid order from a competent authority.

5. Where it is stored and for how long

Data is held in a PostgreSQL database on infrastructure operated on our behalf. As with any internet service, our hosting and network providers process connection metadata (including IP addresses) in order to deliver traffic; that processing is theirs, and Nexo does not store it.

We keep data as follows:

• Account and progress — for as long as your account exists.
• Game sessions and guesses — for as long as your account exists, because they are your history and your statistics.
• Integrity records — kept while they remain useful for investigating abuse.
• Deleted accounts — removed as described in §6.

6. Your rights

Under the LGPD (article 18) and, where it applies to you, the GDPR, you can ask us at any time to:

• Confirm whether we process data about you.
• Access a copy of that data.
• Correct data that is incomplete, inaccurate or out of date.
• Anonymise, block or delete data that is unnecessary, excessive, or processed in a way that does not comply with the law.
• Port your data to another provider, in a structured, commonly used format.
• Delete your account and the data attached to it, where consent is the basis (see §6.1).
• Be told with whom we have shared your data (§4 — the answer is Discord and no one else).
• Be told what happens if you refuse consent — you would not be able to use Nexo, since your Discord identity is the account.
• Withdraw consent, by removing Nexo’s authorisation in Discord under User Settings → Authorized Apps.
• Object to processing based on legitimate interest, and to ask for a human review of any automated decision that affects you.

Nexo makes one kind of automated decision: an account may be flagged or suspended by our anti-cheat checks. If that happens to you, you can ask for a person to review it by writing to us.

6.1 How to exercise them

Write to nexogame.discord@gmail.com from an address you control, and tell us your Discord username or user ID so we can find the right account. We will answer within 30 days.

On deletion, we erase your account and everything attached to it: progress, statistics, achievements, frames, sessions and guesses. Two things survive, and both stop being about you: entries in the integrity trail are unlinked from your account rather than erased, so that a past investigation does not lose its evidence, and aggregate counters that contain no personal data are unaffected.

Withdrawing the Discord authorisation stops Nexo from working, but on its own it does not delete data we already hold — for that, ask us.

7. Children

Nexo is not directed at children. You must meet Discord’s own minimum age for your country to have a Discord account at all, and Nexo requires one. If you believe a child below that age is using Nexo, write to us and we will remove the account.

8. Security

Traffic between your device and Nexo is encrypted in transit. Session tokens are short-lived and held only in memory. Your identity is always taken from your authenticated session and never from anything the client sends, so a modified page cannot act as someone else.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify the competent authority and affected users as required by law.

9. Payments

Nexo does not currently process any real-money payments and holds no payment or card data whatsoever. If paid features are introduced, payment will be handled by a specialised payment provider that receives your payment details directly — Nexo would never see or store a card number — and this policy will be updated before that happens.

10. Changes to this policy

We may update this policy as the game changes. The effective date at the top always reflects the current version. If a change materially affects how we use your data, we will announce it inside the Activity before it takes effect.

11. Nexo is not gambling

Nexo is a game of vocabulary, not a game of chance, and no part of it is a bet. To be explicit, because tickets and duels can look like something they are not — there is:

• no cash prize and no payout of any kind;
• no way to withdraw, cash out or convert nexos or tickets into money or anything of value;
• no transfer of money, currency or items between players;
• no stake: you never win what an opponent paid, and losing a duel costs you nothing;
• no promise, suggestion or possibility of profit or financial return.

A ticket does one thing: it opens a duel room. Joining a room someone else opened is free for everyone, always. Anything that may be sold in the future is either a ticket or a cosmetic item, and cosmetics grant no competitive advantage whatsoever.

12. Contact

If you are in Brazil and are not satisfied with our answer, you may complain to the Autoridade Nacional de Proteção de Dados (ANPD). If you are in the European Economic Area, you may complain to your national data protection authority.