Privacy policy

Who is responsible

HELIOS, publisher of Nexus. See the legal notice for contact details. For any request about your data, open a ticket on the Asura Discord or write to contact.asurati@gmail.com.

What we store

Your Discord account: your Discord ID, username and avatar, received when you sign in, and the roles you hold on the Asura Discord server, read through our own bot. They tell Nexus who you are and which features and perks you have access to.
Your linked Steam IDs (public SteamID64 only, through the official Steam OpenID flow). They let the game servers recognise you, so points, quests, storage and achievements land on the right account.
In-game activity on the Asura servers: joins and leaves, playtime, the dinosaur you play, kills and deaths, and your position on the map while you are online. This drives the live map, the HUD, quests, achievements, leaderboards and the economy, and is used to investigate cheating.
Your Nexus economy: Asura Points and Game Tokens balances and every transaction (shop, market, lottery, quests, eggs), your inventories (skins, specials, stored dinosaurs), quest and achievement progress, friends, groups and profile settings.
Support material: the content of tickets you open with us, and staff notes attached to moderation decisions.

What we do not do

No advertising, no analytics service and no third-party tracker on Nexus.
No browser fingerprinting and no advertising profiling. We never sell your data; we share it only with the service providers named on this page, for the purposes described here.
No payment or card details: money is handled entirely by Tebex on the Asura store, never by Nexus.
No email address is collected. Discord OAuth is requested with the identify scope only.

Why we use it

To run Nexus and the features you use (your account, points, storage, quests, inventories, the live map): this is necessary to provide the service you sign up for (Article 6(1)(b) GDPR).
To keep the servers fair and safe and to answer your requests: investigating cheating, exploits, ban evasion and rule violations, restoring what a bug or a cheater took from you, and handling support tickets. This rests on our legitimate interest in protecting the community and the service (Article 6(1)(f) GDPR), and includes the AI-assisted analysis described below. You can object to it, see your rights.

AI-assisted investigations

When a player reports a problem (a lost dinosaur, missing points, a suspected cheater), our staff can ask an AI assistant to go through the relevant records instead of searching them by hand. The assistant runs on Claude, an AI model provided by Anthropic, PBC. It is used only by staff, in a private staff channel; players never talk to it.

What it can read: only the records about the players concerned by the request: Discord ID and username, linked Steam IDs, in-game activity (joins and leaves, dinosaur, kills and deaths, positions), Nexus storage and dinosaur backups, inventories and transactions, and the ticket text or screenshots a staff member shares with it. Secrets and contact details (passwords, access tokens, email and IP addresses) are filtered out before anything is sent.
What it does: it cross-checks these records, summarises what happened, points out the traces that matter (who killed whom and when, which backup matches a lost dinosaur, which accounts are linked) and suggests a solution.
What it does not do: it never decides a sanction: warnings, kicks and bans are always decided by a staff member who has reviewed the evidence. It cannot change anything on its own initiative: a change to an account, such as restoring a lost dinosaur or refunding points, is only applied when a staff member asks for it, within limits set by the project, and anything that removes points or items from an account needs the approval of the project owner. Every request, suggestion and change is logged and can be reverted.
Anthropic processes this data on our behalf, under its commercial terms and data processing addendum. It does not use it to train its models and deletes it within 30 days. Processing takes place in the United States; the transfer is covered by the European Commission's Standard Contractual Clauses included in that addendum.

We will list any other AI provider on this page before using it.

Cookies

Nexus sets one cookie, the session cookie that keeps you signed in and remembers which server you have selected. It is strictly necessary for the site to work, which is why there is no cookie banner: nothing else is set. While you are signed in it lasts 30 days; for a visitor who is not signed in it ends with the browser session.

Some pages load Bootstrap and jQuery from public CDNs. Those requests carry no Nexus cookie and are used to fetch the files only.

How long we keep it

Account and linked Steam IDs: as long as you use Nexus. Ask for deletion at any time.
Positions: a rolling window of a few days, used for the live map and investigations, then dropped.
Points and token ledgers, quest and achievement history: for the lifetime of the project, so that a mistake can be traced and repaired.
Stored dinosaurs: until you load them back or the server is wiped.
AI assistant case records (the staff request, the records the assistant consulted and its answer): 12 months, then deleted. Changes applied to an account through it are kept with the ledgers above.
Web server logs (IP address, requested page) are kept by the hosting layer for security and rotated out after a short period.

Where it lives

Nexus and its database run on servers hosted by OVH in the European Union. Records needed for an AI-assisted investigation are sent to Anthropic in the United States (see above). Discord and Steam only receive what their sign-in flows need.

Your rights

You can ask to see, correct or delete the data we hold about you, or object to a use of it, by opening a ticket on the Asura Discord. We confirm your identity through Discord and answer within 30 days. Deleting your account removes your linked Steam IDs, balances, inventories and profile; ledger entries needed for audit are anonymised rather than kept under your name.

You can also object to the AI-assisted analysis of your records: we then handle your requests without it, unless we have compelling grounds to continue, such as an ongoing investigation into cheating.

Leaving the Discord does not delete your Nexus data on its own. You have to ask.

Changes

When this page changes, the date at the top changes with it, and the change is announced on the Asura Discord. See also the terms of use.