Privacy Policy

This Privacy Policy explains how Zenith Nexus ("we", "us") — the operator of the Keystone application and website (the "Service") and the "controller" of your personal data — collects, uses, and shares information when you use the Service. By accepting this Policy you acknowledge the practices described here; where consent is required, we ask for it separately.

• Account information — email address, display name, and optional avatar. If you sign in with Google, we receive your email, name, and profile picture from Google.
• Legal acceptance records — which version of the Terms of Service and this Privacy Policy you accepted, and when.
• Content you create — campaigns, characters, homebrew items, stores, inventories, and related in-game data.
• Billing information — if you purchase a subscription, our payment processor collects your payment details; we receive only subscription status and billing metadata, never your full card number.
• Usage and log data — technical logs (IP address, browser type, timestamps, request identifiers) generated when you use the Service, used for security and debugging.
• Cookies — strictly necessary cookies for authentication and preferences. See the Cookie Policy.

• to provide, operate, and secure the Service;
• to authenticate you and manage your account;
• to process subscription payments;
• to respond to support requests;
• to comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data or use it for advertising.

We process personal data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to comply with legal obligations, and with your consent where we ask for it. You may withdraw consent at any time.

• Campaign members— content you create or share in a campaign is visible to that campaign's members according to their roles, along with your display name and avatar.
• Service providers — infrastructure providers that host our application and database, our payment processor, and our transactional email provider, each processing data on our instructions.
• Legal — where required by law or to protect our rights, users, or the public.
• Business transfers — as part of a merger, acquisition, or asset sale, subject to this Policy.

We keep your personal data while your account is active. If you delete your account, your account data and content are deleted, with residual copies removed from backups within a reasonable period. We may retain minimal records where required by law (for example billing records).

Our infrastructure providers may store data in the United States. Where personal data of EEA/UK users is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

Depending on your location, you may have rights to access, correct, export, delete, or restrict the processing of your personal data, to object to processing, and to lodge a complaint with your supervisory authority. You can delete your account and associated data yourself in account settings, or contact us to exercise any of these rights.

Depending on your state of residence, you may have rights to know what personal information we collect, to access or delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or share your personal information and do not use it for targeted advertising. To exercise any right, use account settings or contact us at support@keystone.nexus. We will verify your request through your account.

We protect your data with technical and organisational measures, including encrypted connections, row-level access controls in our database, and least-privilege access. No system is perfectly secure; please use a strong, unique password.

Keystone is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. When we make material changes we will publish a new version with a new effective date and ask you to accept it before continuing to use the Service. The version you accepted is recorded on your account.

Privacy questions or requests? Reach us via the contact page or at support@keystone.nexus.