Meta:Privacy policy

(TL;DR: only necessary data is collected, I do not sell your data, you may request data deletion at privacy@nin0.dev).

Introduction

This privacy policy applies to anyone visiting a nin0 Service (any service under the nin0.dev domain name). nin0 Services may collect data relating to you.

As privacy is a priority to me, all services collect the minimal amount of personal information needed to function. No unneeded data is collected.

What is collected

The following is collected if you visit a nin0 Service:

• Your IP address;
• The time and date when the page was viewed;
• Any information voluntarily entered (e.g. in a form).

This information is collected as a part of an access log. Keeping an access log is standard practice that is used across many websites.

This log helps avoid service abuse and other suspicious/malicious activity. They do not necessarily allow identifying you as an individual.

Unauthenticated users' data retention

Their data is kept for, at most, 30 days.

If you are authenticated

If you do log in, on top of the data listed above, the following will be collected and attached to it:

• Your account display name/username;
• Your account email, to contact you. Your account email is never used for promotional purposes;
• If a password is used, a one-way hash of it to retain account security;
• Any other data voluntarily provided to the service.

No identifiable analytics are used across nin0 Services.

Consent and info usage

By logging in, or using nin0 Services, you consent to your data being used according to this privacy policy.

Your personal information is only used for the aforementioned use-cases. They are never shared with third-parties, outside of legal obligation. If possible, you will be informed of it.

Each user only has access to the data needed for their own usage of the services, for example, a user can view their own private content but not others', while an admin may be able to, for moderation purposes.

Data retention, and your rights

Your data is retained as long as it is required, which means as long as your accounts are active.

You are allowed to request:

• data deletion, either by deleting your accounts on all nin0 Services, or emailing privacy@nin0.dev;
• remove your consent to data processing. This implies data deletion, therefore see above;
• data rectification. Most services will allow you to edit your own information. If that is not the case, email privacy@nin0.dev;
• access and portability for your own data. To request a data export for one/more nin0 Services, email privacy@nin0.dev.

The Data Protection Officer may be emailed at, privacy@nin0.dev.

Infrastructure and 3rd-party providers

To ensure optimal functioning of nin0 Services, I make use of third-party service providers to run them. These only hold the required data to function:

• Oracle Cloud hosts the services. The physical server is located in Montreal, Quebec;
• Cloudflare ensures the security of some services;
• BorgBase is my backup provider. The backup region is in the EU, and backups are encrypted and can only be accessed by myself.

You may refer to each service's privacy policy for more information. If the nin0 Services ever suffer a security breach, all affected users will be informed.

Cookie usage

Cookies are used if needed, depending on each service, most notably for authentication and authorization, or retaining personal settings.

Data encryption

SSL encryption is used to encrypt in-transit data. At-rest encryption is used depending on the service.

Policy updates

Any privacy policy change will be announced 30 days prior and will only apply 30 days after the announcement date. If you disagree with the change, you may delete your data according to the section above.