add privacy policy

This commit is contained in:
kittentm 2026-06-07 06:43:08 +02:00
commit e89402ae4a

32
PRIVACY-POLICY.md Normal file
View file

@ -0,0 +1,32 @@
### This is an agreement between you (hereby referred to as "the user", "you") and Spacebar Network (hereby referred to as "us", "the network", "Spacebar", "SPBR").
# Information We Collect and How We Use It
## Account Data
### Personal Information
- **Principal ID:** We store a sequentially generated ID for each user (hereby referred to as "Principal ID", "PID"). This PID is generated through a sequence and not from your data.
- **Username (a.k.a SNID):** Your SNID is set by you on account creation, and is linked to your PID for authentication purposes.
- **Birthdate:** Your birthday is set by you on account creation, and is used to confirm your age for access to restricted services.
- **Email:** Your email is set by you on account creation, and is used to send you important updates about your account, password resets and anti-bot systems.
- **Country:** Your country is set by the console upon its initial setup, and is sent to the server as part of the signup process. We store it in our database linked to your PID, and return it when the console requests it, otherwise the Services would not be functional.
### Security
The console hashes your password by appending your PID to it, and hashing it with MD5. When sent to our server, your password gets stored as a bcrypt hash to prevent a database compromise from possibly leaking any passwords.
While the data stored on the server is not personally identifiable data, we do our best to protect it, and will inform users if we are made aware of a breach to our systems within 30 days of notification of the breach.
## Game Server Data
- **Account Authentication Data:** Upon initialization to a NEX ("game") server, the server makes a request to the account ("ACT") server to retrieve your NEX credentials. This includes your **NEX password (different from your account password), Prinicpal ID (PID), and account level**. This data is required strictly for user authentication and account validation. Your NEX password is a randomly generated string that is only known to the ACT server, NEX server and you.c
- **Network and Connection Data:** The application temporarily processes the **IP address** provided by your console. This information is held temporarily in memory and is used solely to facilittatee P2P connection and matchmaking with other players on our network.
### Data Retention
We believe in data minimization and only store data for as long as necessary to maintain network stability and for debugging purposes only.
### What we do with debugging data
We do not sell or rent your personal information. Your IP address is shared strictly with other players during the matchmaking procedure.