Data Encryption & Operator Privacy • Rev 2.4.0

Privacy Policy

Advenexus operates under strict privacy-by-design standards. We collect solely the operational state data necessary to power real-time turn-based combat, synchronize inventory assets, and secure user accounts. We never monetize, rent, or vend your telemetry.

Encryption Standard
Bcrypt + TLS 1.3
Ad Pixels / Beacons
0 (None Deployed)
Client Persistence
JWT + LocalStorage
Regulatory Baseline
NDPA / GDPR Align
SEC // 01•CORE ARCHITECTURE

Data Protection Principles

When accessing Advenexus, your privacy is safeguarded by three foundational design tenets:

Data Minimization

We gather only data strictly required to resolve turn-based calculations and maintain account integrity.

Zero Data Brokering

We never vend, syndicate, or broker user telemetries to advertisers, data aggregators, or third parties.

Cryptographic Shields

Credentials, sessions, and recovery PINs are secured with salted one-way hashing and modern TLS protocols.

SEC // 02•TELEMETRY BREAKDOWN

Information We Collect & Store

Our servers register specific categories of telemetry depending on operator actions within the Nexus:

Account Credentials

SECURITY-CRITICAL

Unique username, salted bcrypt password hash, encrypted 6-digit recovery PIN, and country code derived from initial IP for currency formatting.

Retention Lifecycle: Lifetime of account until voluntary de-authorization.

Combat & Economy Telemetry

GAMEPLAY STATE

Real-time player level, XP, ELO ladder ratings, beast rosters, weapon reroll stats, Tower floor records, guild contributions, and virtual wallet balances.

Retention Lifecycle: Persistent live game state synchronized across cluster nodes.

Uploaded Media & Cosmetics

USER-GENERATED

Profile avatar images, custom uploaded stickers, unlocked wallpapers, chat text messages, and cosmetic title configurations.

Retention Lifecycle: Retained while active; deletable upon user request or moderation cleanup.

Financial Billing Metadata

PAYMENT TOKENS

Payment reference codes, transaction timestamps, currency amounts, and order status provided by payment gateways. We NEVER store credit card numbers, CVVs, or bank logins.

Retention Lifecycle: 7 years for statutory tax & audit compliance.
SEC // 03•OPERATIONAL REASONS

How We Utilize Telemetry

Collected operational telemetry serves exclusively the following game functions:

  • Live Combat & ELO Ranking: Matching operators in 3v3 PvP, computing combat formulas, and updating global leaderboard ladders.
  • Asset Inventory Ledger: Recording animal awakenings, rune socketings, weapon calibrations, and marketplace escrow transactions.
  • Fraud & Tamper Defense: Analyzing command frequency bursts to prevent cheat scripts, automated bots, and duplicate exploit bugs.
  • Account Recovery & PIN Verification: Validating the operator 6-digit PIN before issuing password updates or wallet transfers.
SEC // 04•INTEGRATED INFRASTRUCTURE

Third-Party Service Infrastructure

We contract with industry-standard service partners to handle specialized infrastructure functions under strict non-disclosure covenants:

Flutterwave• Payment Processing Gateway
Policy

Data Scope: Transaction reference, currency code, purchase amount, and customer email.

Security Benchmark: PCI-DSS Level 1 Certified
Cloudinary• Secure Media CDN Storage
Policy

Data Scope: User-uploaded avatar pictures and sticker assets.

Security Benchmark: SOC 2 Type II / ISO 27001
Google Gemini AI• Oracle Neural Assistant Engine
Policy

Data Scope: In-game lore and tutorial prompt queries. Never exchanges passwords, PINs, or financial records.

Security Benchmark: Enterprise Privacy Standard
SEC // 05•SECURITY FORTIFICATION

Cryptographic Defense Matrix

We implement industry-tested safeguards to shield your account and credentials from unauthorized intrusion:

Layer 01: Salted Cryptographic Hashing
Bcrypt 10+ Rounds

Passwords and 6-digit recovery PINs undergo one-way cryptographic hashing before disk storage. Passwords cannot be decrypted or viewed in plaintext even by system administrators.

Layer 02: Transport Layer Security
TLS 1.3 / SSL Encryption

All data packets between your client browser and game servers travel through end-to-end encrypted HTTPS and secure WebSockets (WSS).

Layer 03: Rate Limiting & Packet Scrubbing
Reverse Proxy Shields

Intelligent burst throttling prevents credential stuffing, brute-force PIN guessing, and automated API flooding.

Layer 04: Atomic Transaction Vault
ACID Database Journaling

Marketplace trades, animal gem conversions, and crate openings use atomic write isolation to prevent balance desyncs and item loss.

SEC // 06•STORAGE PROTOCOL

Browser Storage & Cookie Directives

Advenexus utilizes browser localStorage and essential session tokens in place of intrusive multi-site tracking cookies. We do not integrate Facebook Pixel, Google AdSense cookies, or marketing trackers.

Operator Storage Permissions

You can review which storage keys are allocated, inspect lifespans, and adjust optional diagnostic telemetry at any time via the Storage Center.

Essential Storage
Auth tokens, CSRF tokens
Functional State
uiScale, interfaceMode
Diagnostic Telemetry
Ping stats, FPS benchmarks
SEC // 07•OPERATOR PREROGATIVES

Operator Rights & Account Erasure

Under applicable data protection laws (including the NDPA and GDPR), operators hold comprehensive rights concerning their stored information:

Right of Access

Request an export of your inventory records, battle logs, and profile attributes.

Right to Rectification

Update obsolete passwords, customize your handle, or reset your recovery PIN.

Right to Deletion (Erasure)

Request permanent de-authorization and erasure of your operator profile and game state.

Right to Restrict

Opt out of non-essential diagnostic telemetry via the Cookie & Storage Center.

How to Initiate Account Erasure:To request full account deletion, submit an erasure ticket on our Official Discord or email advenexusdev@gmail.com with your handle and verified recovery PIN. Deletion is executed within 72 business hours.
SEC // 08•AGE BOUNDARIES

Age Gate & Protection of Minors

Advenexus does not knowingly solicit or collect personally identifiable information from children under the age of 13. If system telemetry reveals that an operator is under 13 without verifiable parental clearance, the profile and associated data are purged immediately.

SEC // 09•NETWORK TOPOLOGY

Cross-Border Data Transmission

Advenexus operations and database nodes reside across secured cloud clusters in Nigeria and distributed global edge networks. When accessing the system from outside Nigeria, you acknowledge and agree that your game packet telemetry traverses international boundaries in full compliance with robust encryption protocols.

SEC // 10•SECURITY AUDIT DESK

Data Protection Communications

For compliance audits, security vulnerability disclosures, or data privacy requests, contact our Data Protection desk:

Data Privacy Inquiries
advenexusdev@gmail.com
Subject tag: [DATA PRIVACY REQUEST]
Encrypted Dispatch (Discord)
discord.gg/kaxBECTDBG
Contact #mod-mail or server administrators
Data Sovereignty Assured

Your combat data remains within the Nexus.