Last updated: 16 October 2026

Who we are

Nexus Game is a subscription service that gives you access to a library of games. This page explains what we collect about you and how we use it. For any question, reach us on the support page.

What we collect

• Your account: your username, your email if you gave one, the end date of your subscription, and a note the team may add. Your password is never stored as text, only as a one-way hash.
• If you sign in with Google: Google tells us your name, your email address and an account number; we never see your Google password.
• If you pay online: your phone number, the plan, the amount, the date and the order number of the payment. Your card number and its code are typed on the payment page of the bank and never reach us.
• Your activity: the accounts you took and when (kept 400 days), the notifications sent to you, and the problem reports you sent with their replies.
• Your devices: when you sign in from a browser we put a random number (a cookie) in it and keep its hash with a generic browser name such as "Chrome · Android", the last IP address and the time of use. We use this to limit how many devices one subscription can be used on and to stop an account from being shared. A device unused for 30 days no longer counts.
• Visit statistics: each visitor is counted once a day without knowing who they are, by cookie or by a hash of the address and browser type that changes every day and cannot be turned back into your address. We also see where a visitor came from (Facebook, Telegram…). These numbers are kept 180 days.
• Security log: to protect the site we record failed sign-ins, suspicious requests and automated scans, with the address, browser type and time, and keep only the latest 500 events. Only the site owner sees them, and an attacking address may be blocked automatically for a while.

Cookies and what is stored in your browser

• nx_sid: keeps you signed in (7 days).
• nx_dev: your device number for the device limit (one year).
• nx_vid: counts visits without repeats (one year).
• nx_ref: remembers the partner whose link you came from.
• nx_gstate: protects a sign-in with Google while it is under way (10 minutes).
• Your language, theme and the announcements you closed are kept in your browser only and never reach us.

The first cookies are essential to the site and its security. You can delete them in your browser, but you will have to sign in again and your browser may count as a new device.

Facebook Pixel (Meta)

We may switch on the Facebook Pixel on the public store pages to measure and improve our adverts. When it is on, Meta learns that you opened a page or a game, searched, clicked a contact channel, started a payment, paid or signed in, together with browser data and Facebook cookies. Our server may send the same events to Meta directly (the Conversions API), with your address, browser and, if you are signed in, your email, phone, name and customer number turned into an irreversible code (SHA-256 hash) so Meta can match them to its users; if you are not signed in, a random visitor number in the same coded form. Our server also sets the Facebook cookies themselves (_fbp and _fbc), for up to 90 days. A sale we record by hand (a transfer, for example) is reported to Meta the same way, without any browser data. The Pixel does not run in the admin panel, and we never send it passwords or account details. Meta handles that data under its own policy.

Who processes data with us

• Google Firebase (Firestore): stores the service's data.
• The hosting provider: runs the site and sees visitors' addresses, as any server does.
• The Steam Guard code provider: an outside service we ask for a code; we send it only the game account's name, never anything about you.
• Meta: if the Pixel is on, as above.
• Google: if you sign in with Google, it confirms who you are.
• SofizPay and SATIM (the CIB/EDAHABIA card network): if you pay online, they receive your name, email, phone number and the amount, and process the card payment.

We do not sell your data and do not share it for advertising with anyone beyond the above.

How we protect it

Game account passwords are encrypted in the database, sign-in passwords are stored in a form that cannot be reversed, the connection to the site is encrypted with HTTPS, and the admin panel is hidden and protected by a password and optional two-step verification. No method is perfectly safe, but we monitor the site and block attackers.

Your choices

You can ask us to see, correct or delete your data, or withdraw from the Pixel by deleting cookies and blocking tracking in your browser. Reach us on the support page and we will answer as soon as we can. After a subscription ends we keep what is needed to renew it and to settle any dispute, and delete it on request unless the law requires us to keep it.

Changes

We may update this page when the service changes; the date of the last update is at the top.