Privacy Policy
NOVARIX ENTERTAINMENT · UPDATED NOVEMBER 3, 2026
The controller’s identity and address, contractual details for service providers and binding retention periods still need to be completed or reviewed. These notices describe the intended operation currently known to us and do not replace the missing information.
1. Controller and contact
This website is operated from Germany under the project name Novarix Entertainment. The controller’s full legal name and address for service are still to be added. Contact: contact@novarix-entertainment.com. Please also see our Legal Notice.
2. Website hosting and security
When you visit the website, information such as your IP address, time of access, requested address, browser information and technical errors is processed where needed to deliver, operate and protect the service. Hosting and email services are obtained through MCHost24; the email infrastructure uses MailEight24. The providers’ exact legal identities, processing agreements, subprocessors and processing locations remain subject to review.
Technical delivery and abuse prevention are generally based on legitimate interests in providing a secure, functioning service under Article 6(1)(f) GDPR. Security and administration logs may include an account identifier, action, timestamp and outcome. Passwords and verification codes must not appear in public logs.
3. Accounts and profiles
For accounts, we process account names, email addresses, password hashes, verification and sign-in data and, where applicable, two-factor authentication and saved-device information. Optional profile information may include a profile picture, biography, gender and telephone number. Please only provide information you need to share. Processing supports the requested account and its security under Article 6(1)(b) or (f) GDPR, depending on the specific relationship and purpose.
4. Support requests and email
When you contact support, we process contact details, subjects, descriptions, selected topics, attachments and correspondence. Authorised team members manage requests, assignments and internal notes. Automated messages may confirm receipt and provide updates about handling or closure. Contract-related enquiries are processed under Article 6(1)(b) GDPR; other enquiries generally rely on a legitimate interest in responding under Article 6(1)(f). This does not cover additional purposes requiring separate consent.
5. Newsletter
For the newsletter, we process email addresses and information about subscription, confirmation and unsubscription. Newsletter delivery starts only after the subscription is confirmed. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it for the future using the unsubscribe link included in each edition. Creating an account does not automatically subscribe you to the newsletter.
6. Cookies and local storage
Essential session cookies support sign-in and protection against abusive requests. If enabled, FastLogin stores device-related access information; use it only on your own devices. Help Center appearance preferences and privacy choices may be stored locally in your browser. Strictly necessary storage or access is subject to Section 25(2) of Germany’s TDDDG; other access requiring consent is subject to Section 25(1).
Optional usage events, such as page views and navigation, are recorded only after you agree. You can change your choices at any time using in the footer. Choices apply to the current browser. Rejecting optional features does not prevent basic website use.
7. Discord and external services
The Discord server widget remains disabled until you allow external content. Once enabled, your browser connects to Discord, which may receive information including your IP address and browser details. This optional integration relies on your consent. You can use the regular invitation link without enabling the widget. External websites have their own privacy notices.
Cloudflare Turnstile is used for protected actions to help prevent bots and abuse. Technical browser, connection and verification information is transmitted to Cloudflare. Processing relies on the security interest under Article 6(1)(f) GDPR insofar as the actual configuration and balancing of interests support this basis. Any device access requiring consent must be considered separately; the integration still requires legal review.
External services may process data outside the European Economic Area. Specific recipients, transfer mechanisms and safeguards need to be completed using the current provider agreements. Read the Discord Privacy Policy and the Cloudflare Privacy Policy.
8. Applications and team administration
For email applications, we process submitted contact details, documents and correspondence to assess the application. Where employment is being considered, Section 26 of Germany’s BDSG may apply. Other forms of cooperation require their own applicable legal basis. Team accounts, permissions and internal communications are restricted to authorised people. Separate applicant and team privacy notices still need to be added.
9. Retention and deletion
Customer support accounts can be deleted from My account after password confirmation and, where enabled, two-factor verification. Profile details, verification records, authentication secrets, sessions and saved sign-ins are removed; the remaining account reference is de-identified and disabled. Requests are archived. Support conversations, attachments, email records, logs and backups are not automatically erased by this action and require a separate deletion review. A restricted review record retains the previous email address in encrypted form until a review outcome is recorded. Newsletter unsubscription is offered separately during account deletion. Review outcomes must identify any further deletion or justified retention; marking a review complete does not itself erase the retained records.
Data should be retained only as long as required for its purpose or by applicable legal obligations. Binding retention periods and automated deletion processes for support, applications, accounts, logs, newsletter consent records and backups still need to be established. Indefinite retention is not intended. This notice does not claim that all automatic deletion processes have already been implemented.
10. Your rights
Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests under the applicable conditions. You can withdraw consent for the future. You may also lodge a complaint with a data protection supervisory authority, particularly where you habitually live or work, or where you believe an infringement occurred.
11. Children and young people
Public project information is intended for a broad audience. Additional rules apply to children’s consent. In Germany, where the relevant online service relies on consent under Article 8 GDPR, children under 16 generally require authorisation from a parent or guardian. Age and authorisation procedures for accounts and newsletters still need to be finalised. Please do not submit unnecessary sensitive information.
12. Updates
These notices will be updated as the operator’s details and technical and organisational arrangements are confirmed.