Privacy Policy

We collect exactly as much as is needed for the site and the engine to work, and we say so plainly. Below is what exactly, why and for how long.

1. Who is responsible for the data

The author of the NEX1ON project (a private individual, Norway), the nex1on.com site. Questions about data: support@nex1on.com.

2. What the site collects

Without an account

• Technical server records: the address the request came from, the time, the page address, the browser type. They are needed for the site to work and to fend off password guessing and inflated counts. They are kept in the logs for a limited time.
• Visit counter — our own, built into the engine. It counts page views and does not store who visited.
• Cookies: the session (to remember your sign-in and chosen language), a poll voting mark (so that a vote is not counted twice) and a note that you accepted cookies. There are no third-party trackers or advertising networks on the site.

With an account

• Name, email, password (stored only as a hash — we do not know your password), language, time zone, and an avatar if you uploaded one.
• Active sessions: the time, address and browser of each sign-in, so that you can see them in your profile and close any you do not need.
• What you wrote: topics, posts, comments, reviews, attachments, votes in polls and on suggestions.
• Topic subscriptions and notifications, if you enabled them.

When you buy

Name, email, the contents of the order, the licence key issued and the domain it is tied to. Payment details are handled by the payment service; your card number never reaches us.

When you subscribe to the newsletter

Email and language. The subscription is confirmed by email; you can unsubscribe via the link in any message.

3. What your site sends to our server

An installed NEX1ON engine contacts our server by itself in a few cases. Each one is listed below: when it happens, what is sent and whether you can turn it off. None of them sends email addresses, people's names or passwords, texts or titles of entries, or visitors' addresses. Like any request on the internet, every contact leaves us the address of the server your site runs on.

Update check. On by default: every 7 days and when you open the panel. It sends the site's domain, the engine version and the PHP version, the licence key (if entered) and an approximate summary of the site: site type and theme, enabled languages, enabled modules with their versions, the edition (free or full), whether a key is entered, and the counts of what you created against the free-edition limits — numbers only. The panel shows exactly what is sent on the "System → Updates" page. We keep this as a register of installations: which version runs on which domain and when the site last checked in. The record is erased 12 months after the last contact; while your licence is active, it is kept. On request to support@nex1on.com we delete it sooner. Turn it off in "System → Updates → Engine", the "Update check" block.

List of revoked keys. The engine downloads the list of revoked licence keys from us. Nothing about your site is sent.

Catalogue of modules, themes and languages. The panel asks us for the list of add-ons when you open "Add-on catalogue", "Updates" or "Languages", when you install an add-on and in the setup wizard. It sends the engine and PHP versions, the domain and the licence key (if entered); for language packs, only the engine and PHP versions. The update-check switch does not turn this request off.

Downloads. An archive of a module, theme, language or update is downloaded only when you press the button.

Licence check. If a key is entered, the engine asks us whether it is allowed for this address. It sends the key, the domain, the engine version and the installation ID — a random number the engine creates by itself, which links the contacts of one site. While a key is entered, this check cannot be turned off: the key does not work without it. Remove the key and the check stops. The record of the check is kept for 90 days after the last contact. Our site may ask yours to check the licence right away, for example after you buy a key. This is an incoming request: your site then runs the same check, and nothing beyond the above is sent.

Error reports. Off by default. If you turn them on, once a day a report of errors in our code is sent: the engine and PHP versions, the module, the place of the error (file and line), the day and the installation ID. The report contains no site address and no message texts. We keep an error for 180 days and its link to the installation ID for 90 days. Turn them on or off in "System → Diagnostics → Error reports".

Connection check. Only when you press the button in the panel or on the setup wizard step. It sends the engine and PHP versions, without the key or the domain.

4. Why we need all this

So that you can sign in and not lose your account; so that we can answer on the forum; so that we can issue a key and send updates; so that the site is not flooded with password guessing and spam; so that we know which pages are being read. For advertising and selling data — no.

5. Who we share it with

No one, apart from the services without which the site cannot work: the hosting provider, the mail server for the site's messages, and the payment service when you buy. Each sees only what it needs to do its job.

6. How long we keep it

• Your account — for as long as you use it or until you ask for it to be deleted.
• Server logs and security events — for a limited period, after which they are erased.
• The download log — 90 days: the date and time, the file, whether you were signed in, the country (no city) and your IP address shortened to its network (the last part is removed). The entries of a signed-in user are deleted together with the account or on request.
• The session — while you are signed in; "remember me" extends it for the period set in the site settings.
• The register of installations — 12 months after the site's last contact; longer while the licence is active.
• Orders and keys — while the licence is valid and for a reasonable time afterwards, so that we can answer questions about the purchase.

7. Your rights

You can view and correct your data in your profile; to export it or delete your account, email support@nex1on.com. On deletion, personal data is erased, and forum posts remain anonymised so that other people's discussions are not broken. You can unsubscribe from emails from any message.

8. Security

The site runs over a secure connection. Passwords are stored as hashes, sign-in can be protected with a second step, and guessing attempts are limited. Files uploaded to the media library are rebuilt, and nothing in the uploads folder is executed.

9. Children

The site is not intended for children under 16, and we knowingly do not collect their data.

10. Changes

The policy may change along with the site; a new version is published here with its date. The current version is dated 13 November 2026.