Training records
Credits, earned unlocks, equipped loadout, per-mode personal bests, and aggregate session telemetry are stored in this browser. Selected paid item identifiers and the weapon-overlay visibility preference may also be remembered locally, but pack ownership is never stored as a local entitlement boolean. Reset data inside the trainer or clear browser site data to remove local records and preferences.
Accounts and network activity
Anonymous gameplay remains available without an account, and Nocturne Vector does not send gameplay records to the account API. If you request an optional magic sign-in link, the service processes your email address, verification time, a one-way hash of the short-lived sign-in token, and a one-way hash of an HttpOnly session token. The sign-in link expires after 15 minutes, can be used once, and keeps its token in the URL fragment until you explicitly continue. Account sessions expire after 30 days. Expired token and session records are removed during routine service activity. The web server may retain standard access logs for operations and security, but application security logs do not include raw emails, sign-in links, session tokens, Checkout URLs, or secret values.
Purchases
The one-time Extended Loadout Pack purchase is processed on Stripe-hosted Checkout. Stripe processes payment and billing information under its own privacy terms. Nocturne Vector receives an internal order identifier, Stripe Checkout, Payment Intent, Charge, and event identifiers, payment status, amount and currency, and the signed payment lifecycle events needed to grant or revoke the server-side nv_extended_loadout_v1 entitlement. A pending Checkout URL is kept only while that Checkout is usable. Checkout, account, and purchase-completion pages remain free of advertising.
Retention and account deletion
Your email, account session, and entitlement remain until you delete the account from the account panel. Deletion removes the account, active sessions, sign-in tokens, and entitlement. A minimal purchase record may be retained without the local user or email link where needed for payment reconciliation, refunds, dispute handling, fraud prevention, accounting, or legal obligations. Deleting an entitled account permanently removes automatic pack restoration. Browser-local training records and cosmetic preferences are separate; use Reset in the trainer or clear browser site data to remove them.
Advertising
Advertising is currently off. Nocturne Vector does not load an advertising provider, place advertising cookies, or send training records to an ad network. Lobby, active-training, telemetry, and completed-session views are not approved advertising locations.
If advertising is introduced later, it must be a manual unit limited to the standalone aim training guide, separated from targets, controls, and results. A Google-certified consent management platform must be configured before consent-dependent advertising or storage is used where required. This notice will identify the provider, purposes, data categories, retention, and available choices before launch.
Contact
Privacy, purchase, and support questions can be sent to [email protected].