Privacy

Version 2026-10-10 · written by the founder · not reviewed by counsel. This page lists what Nova keeps, where, for how long and how to delete it: nothing more than the code does. It is not legal advice. When a lawyer edits it, the version line changes and nothing else has to.

Where things stand. Nova has not opened to the public yet, and nobody can play for real money on it today. This page describes the service as it is built and as it will run when it opens. Where a part is not switched on yet, the text says so.

Who we are

Nova is run by LosDudos SRL, registered in Romania, registration number (CUI) [CUI], registered address [registered address]. We decide what Nova keeps and why, so under data-protection law we are the controller. Where to write about anything on this page: hello@intellnova.ai.

The short version

• Practice needs no account. Your progress lives on your device; our server knows a random device id, a few usage counts and every run you finish, which it checks for cheating.
• An account (only for cash play) adds a username, your email address and what it takes to keep your wallet safe. Your login and your wallet run with Openfort.
• Cash play adds what money and tax law need: entries, prizes, the tax on them, and, for winners who live outside Romania, a name.
• We hold no identity documents and no card details. MoonPay collects those itself, if you use it.
• The waiting list keeps your email address (and a first name, if you give one) because you asked to join it, only for Nova's launch, until you leave.
• No cookies, no advertising, no tracking pixels, no analytics. The public website keeps nothing about you beyond the waiting list and, for a day, a salted hash of your connection's address that stops floods of sign-ups and questions.
• Nova on this website answers the tap questions from a fixed list and sends nothing. A question you type goes to Cloudflare's AI service to write her answer; neither the question nor the answer is kept.
• In the app, your conversations with Nova never leave your device.

The website

The public pages at intellnova.ai (the home page, the Terms, this page) set no cookies, run no analytics and carry no advertising or tracking code. Cloudflare hosts them (Cloudflare Pages), and like any web host it sees each request's IP address and browser; for the pages themselves we receive and keep none of it, and we have not switched on Cloudflare's web analytics. The pages load their fonts and pictures from intellnova.ai itself; the only thing they load from another service is Cloudflare's human check, on the waiting-list form and when you type questions to Nova (below).

If you switch between the light and dark look, your browser remembers the choice on your device (nova-site-theme). It is never sent to us.

The waiting list

What you give us. Your email address, and a first name if you want to give one. Nothing else is asked: no age, no country, no phone number.

What we keep with it: that you ticked the consent box, the wording you agreed to (by version) and when; when you joined and when you confirmed; the country your connection came from, as Cloudflare labels it (your address itself is not kept); and a one-way fingerprint of your confirmation link until it is used. The list lives in a database run for us by Cloudflare (Cloudflare D1), written by a small sign-up program that also runs on Cloudflare (Pages Functions).

Confirming. After you join we email you a link. Only when you open it do you count, and only then does your place appear in the counter. A sign-up that is not confirmed within 7 days is deleted.

The counter on the page is the number of confirmed sign-ups and nothing else. No name, email or any other detail of anyone on the list is ever shown on the page.

The human check. The form runs Cloudflare Turnstile, an invisible check that a person is signing up, so that nobody can fill the counter with fake sign-ups. Cloudflare sees your IP address and browser for it. The address your request comes from is not stored by us: to stop floods of sign-ups we keep only a salted hash of it for each 10-minute window, deleted after a day.

Invite links. After you join you get your own invite link. If someone joins through it, we keep whose link it was, so that the page can show you how many people you brought: a number only, never who they are.

The emails. Brevo sends our emails. The list's emails are about Nova's launch only: the confirmation, news about the countdown and the release, and the test-week invitation if you are chosen. Every one carries a link to leave the list. Our emails carry no tracking pixel and no tracked links. We never sell the list, share it with anyone or use it for advertising.

If you are chosen for the test week, we keep that you were invited and, once you make your Nova account, which account is yours, so that the beta-tester 10 USDC (Terms, section 13) reaches the right wallet. The payment itself is then kept like any other payment, as accounting law requires.

Why: you asked to join, and we rely on your consent, which you can take back at any time. How long: until you leave, and at the latest three months after Nova's public release; then the list is deleted. Leaving: use the link in any email, or write to hello@intellnova.ai; your entry is deleted, not just marked.

Nova on this website

The home page opens with Nova, who answers questions about Nova Arena.

The tap questions are answered by the page itself, from a fixed list. Tapping one sends nothing.

A question you type goes to our small program on Cloudflare (Pages Functions), with up to three earlier questions and answers of the same conversation so that Nova can follow it. The program passes that text, and nothing else about you (not your address, email or name), to Cloudflare Workers AI, a language model that Cloudflare runs for us, which writes Nova's answer. When the model is switched off, busy, or its answer fails our checks, the program answers from the same fixed list instead. We do not store or log your questions or Nova's answers: they exist only while the answer is being written. Cloudflare states that it does not use what is sent to Workers AI to train AI models. Nova needs no personal details to answer, so please leave them out of your questions.

The human check. Before Nova's AI answers your typed questions, the page runs the same Cloudflare Turnstile check as the waiting list (above). Once it passes, your browser gets a pass that works for an hour, so the check is not repeated for every question. The pass holds a salted hash of your connection's address and its expiry time; we keep no copy of it.

Limits. To keep this free service from being flooded, the program counts the questions from each connection (an IPv6 connection counts as its whole /64): it keeps a salted hash of your connection's address, with a count, for each 10-minute window and for each day, and deletes it after a day. It also counts how many answers the AI wrote each day, for all visitors together; that number says nothing about you.

Why: answering a question you asked is running what you asked for; the human check and the limits protect a free service from abuse, which is our legitimate interest. How long: your questions and Nova's answers are not kept; the salted hash of your connection, a day; the pass, an hour, in your browser.

On your device

Your browser keeps these in its own storage for this site (no cookies are used):

• Device id and token: a random id and a signed token from our server, so it can tell your device from another one. They are created the first time something needs them (when you open You, open a game's Play for cash screen or finish your first run) and kept until you delete them.
• Your name, if you set one under You. Without an account it stays on your device; with one it follows your account (below).
• Member since: the date of your first visit.
• Your language: on your first visit Nova asks you to choose your language, and the choice is kept (nova-gate-v1, with when you chose it) so the question is not asked again. Nothing else is asked at the door: no age, no country.
• Your practice progress: your best, the number of runs you finished and when you last played, per game.
• Settings: sound, music, voice, theme, language.
• The last time you visited, so Nova knows how to greet you.
• The game's voice files, if you open ORBITA on its own page: its voice engine and the lines it renders are cached by your browser so they are not downloaded twice.

Your conversation with Nova is held in memory for the visit and is gone when you close the page. It is not saved, not sent to us and not used to train anything.

What the server keeps, account or not

When your device registers, the server stores the device id, when it was created and when it was last seen. If the server's analytics capture is switched on, it also stores, once, what a web server sees on that first call: the browser and operating system family, the browser's user-agent string, the page that referred you, whether the request looked like a bot, and a salted hash of your IP address. The IP address itself is not stored.

Usage events. While you use the app, your device sends a few usage events, each one a name from a short fixed list and a time: that the page opened (land, with the channel of the link that opened it, such as a shared result or a video site, when there is one), that you chose your language at the door (gate_enter: the two-letter language code, sent once), that the entrance finished and how long it took (entrance_done), that the greeting showed, that a game card or a chip was tapped (which one), that you typed something to Nova (only which kind of answer she gave, never the words), that a run started or ended (which game, the distance), that the one-time "Want it full screen?" note on an iPhone was shown, opened or dismissed (install_hint), that the Full screen switch was used (fullscreen: on or off), which of the two onboarding answers you gave (onboarding: yes or learn more), that you opened a game's Play for cash screen (play_open: which game), and that you shared a practice result (share: which game and which way it left, never the picture, the words or who received it). The server stores each with its own clock, keyed to your device id, and only ever adds them up. It rejects any event that carries text, and it has no way to see what you type to Nova.

Every finished run. Every run you finish, practice included, is sent to our server once, when it ends, so it can be checked for cheating: the inputs with their game ticks, the level and the game build, the result, your screen's refresh rate, whether you played by touch, keys or mouse, and which browser family you used (read from the request; the full browser string is not kept). The server keeps the run 90 days and the numbers it measured from it one year.

Players online. From the moment the entrance ends, and while the app is open in a visible tab, your device keeps one live connection to the server's lobby so that it can be counted. The number you see on a game's screen ("Players online") is the size of that list, yours included, and nothing else: no other device's id or name reaches you, and yours reaches no one. The connection closes about a minute after the tab is hidden, when you tap Delete my data, and when you leave.

Ranked runs (a test mode, not linked from the app). ORBITA has a second mode that only its own page opens, with ?mode=ranked in the address; nothing in Nova links to it. A run played there is uploaded as it happens (every change of direction with its game tick, a short fingerprint of the game's state every five seconds, and at the end the final tick, its fingerprint and the distance your screen showed), and the server keeps that upload, when each part arrived and its verdict, with the measurements it was based on, keyed to your device id.

Your account

An account is needed only for cash play, and can be made from the age of 16. You make it on Nova's wallet page, which is the only page where you type your email and password.

Openfort runs the login. Your email address and password go to Openfort, which runs Nova's sign-in and wallet service for us. Openfort keeps your login, records the IP address and browser of each session, and sends its own emails (confirm your email, reset your password). Openfort's error reporting is switched off in Nova's pages.

What our server keeps for your account: your username; your email address (a copy of Openfort's, refreshed each time you sign in); your Openfort user id; the version of these terms you accepted and when; that you said you are 16 or older (your date of birth is typed on your device and never sent: the page works out the date you turned 16 and keeps only that, on your device); your language; and, so they follow you to another device, your name, settings and practice progress (runs, last result and best per game).

Keeping the wallet safe. To spot a password reset, our server reads from Openfort, at each wallet action, when your password last changed. It also keeps: the 24-hour wait's end after a reset or an email change, a freeze if you pressed "This wasn't me", the devices that passed a new-device code (31 days after their last use), each new-device code as a one-way fingerprint (15 minutes, single use), the one-time freeze links in our emails (30 days), and a security log of sign-in events with a keyed hash of the IP address (90 days). To keep sign-in working when Openfort changes its answers, the server also keeps a record of their form (field names and kinds of value, and when they changed), never a value of yours.

Typing your password again. Some steps ask for your password again, such as a large cash-out or deleting your account. That opens a second, short Openfort session, which is signed out within ten minutes.

The breached-password check. When you choose a password, your browser asks Have I Been Pwned (api.pwnedpasswords.com) whether it appears in known breaches, sending only the first 5 characters of a one-way hash of it: never the password, and never anything that identifies you.

The wallet page's own storage. On your device, the wallet page keeps: the date you turned 16 (worked out from your date of birth, which is not kept), a sign-up in progress (the username, the terms version and the language, a day at most), when your email was confirmed, your confirmed country of residence, your language, Openfort's session (including its token), and, during a card purchase, the open order's id (until the tab closes). The password you type at sign-up stays in the page's memory, never stored, until your email is confirmed (30 minutes at most), and goes only to Openfort.

The emails we send about your account (through Brevo, our email provider): the new-device code; a notice when a new device signs in, with the "This wasn't me" link; a notice when your wallet is linked; a notice to your old address when your email changes; a notice and, where needed, a code when your key is exported (naming the browser and system it was asked from, read from the request and not kept); a code for a cash-out above $500 in a day (with the amount, the start and end of the address and the browser and system); and a notice after every cash-out (the amount and the start and end of the address). We log each email we send (its kind, a one-way fingerprint of the recipient, the account and the time) for 30 days. No newsletters, no marketing email.

Your wallet

Your wallet is self-custodial: it is yours, not ours. Its key is split into parts. One part is kept in your browser, inside Openfort's own frame; Openfort holds another; and our server holds the encryption share that lets a signed-in player open his wallet on a new device. Our server passes that share to Openfort's key service each time one of your devices opens the wallet, and never holds a session that could open it alone.

Your wallet's address is public, as every blockchain address is. Our server keeps which address belongs to which account. Your balance and receipts are read from a Base network node ([RPC provider]), which sees your IP address and the address it is asked about: every 20 seconds while the wallet page is open, every 3 seconds while an add-money or cash-out sheet is open.

Cash play

When cash play is switched on, playing for cash adds:

• The 18+ statement: that you ticked "I am 18 or older", with the versions of these terms and the room rules you accepted, and when.
• Where you connect from: at each join, the country of your IP address, looked up in a country database on our own server (DB-IP Lite) or, where the site sits behind Cloudflare, Cloudflare's country label; and whether your connection comes from a hosting network (looked up in DB-IP's network database). The IP address is not stored; the country seen at each entry is kept with the entry as VAT and tax evidence.
• Who may share a room: to keep linked players apart, keyed fingerprints of your wallet, device, network and linked group, and a salted hash of the IP address, never the address itself (90 days); and which wallets funded yours and where cash-outs went, read from public blockchain data.
• Your country of residence for the prize tax, every change of it, and the country seen when you declared it.
• For winners who live outside Romania: your full legal name and, if you give it, your tax number. If you send a tax-residence certificate to lower your rate, we keep the file, its country and period, and who reviewed it and when, and use it only to set your rate.
• Your entries, prizes, refunds and tax: the room, your wallet address, the amounts, the rate and the times.
• Your level per game, and your cancels (each time you were removed from a ready check, kept for ten minutes, for the two-minute wait).
• The match. To play, our game server receives your account id, your level and the four keyed fingerprints above (never your address, device id or IP address), in memory only, and Nova gives your game page a ticket that lives 60 seconds. The game server sends our judge the match record (each player's inputs by game tick, the score and how it ended), which the judge reads in memory and does not keep.
• The human check. Every Ready runs Cloudflare Turnstile in your browser, so Cloudflare sees your IP address and browser. Cloudflare receives the action and a one-way fingerprint of the room and your entry, never your account, address or name. We keep nothing from it.
• Your signed entry is held in our server's memory until everyone is Ready, then sent to the blockchain. It is never written down or logged.

On the blockchain, public and permanent: your wallet address, each entry, each prize and refund, each cash-out to an address, and the tax rate group of each entry (0, 10 or 16 %). Your country, name and tax number never go on the blockchain. Nobody, us included, can delete what is on a blockchain.

The evidence record. Once a room is over, its evidence record is public: the wallet addresses, a fingerprint of each seat's inputs, the result, the judge's version and the level that was played. No device id, name or IP address.

Fair play

Every finished run, practice and paid, is checked by our fair-play system (above). From each run it measures numbers about the play itself, kept one year. A paid room's input records are kept 12 months; a result that did not count, a decision and a contest are kept 3 years. A closure is kept as long as it lasts (one year, or three where it rests on hard proof); once cash play runs with real money, a closure of a wallet address or a linked group stays in force after Delete my data or Delete my account, so that a closed cheater cannot return by deleting.

What the fair-play data is never used for: recognising who someone is by how they move, guessing anyone's age, marketing, or anything shown to other players. It is never sold or shared, and no model is trained on it.

Only hard proof decides a paid result automatically, before the room pays, and you can contest any decision; a person answers, and a person confirms every closure.

Adding money and cashing out

By crypto transfer, nothing comes to us beyond what the blockchain shows: the money arrives at your wallet address. The exchange or wallet you send from has its own data and terms.

Through MoonPay (card, Apple Pay or Google Pay in; bank out), which is not switched on yet: we open MoonPay's window with your wallet address and an order id, in a link we sign. MoonPay collects your identity, card and bank details itself, as an independent controller under its own privacy policy, and its window sees your IP address and browser. We receive only the order's state and amount; never your documents, your card or any identity result. We keep the order (its id, your account, your wallet address, the provider, buy or sell, its state and times) until 30 days after it ends, or until you delete your account. Before showing the card option, we check the country of your IP address, at that moment, without storing it.

A cash-out sends the amount and the address through our server to the blockchain, where both are public, and we email you a notice (above).

Other services

Nova's app does not run a language model in this build: what you type to Nova in the app is matched against a short list of words on your device and never leaves it. (On this website she does use one: see "Nova on this website" above.) The app can be built to send your messages to a hosted model; the build you are using is not that one, and this page changes before any such build ships.

The country and network lookups use IP geolocation by DB-IP (db-ip.com), licensed under CC BY 4.0.

Some of these companies may process data outside the European Economic Area. Where they do, they use the safeguards the law requires, such as the European Commission's standard contractual clauses.

Why we use it

• Your consent: the waiting list and its emails. You can take it back at any time; that does not undo what was lawful before.
• To run what you asked for (the contract between us): your account, your wallet, cash play, adding money and cashing out, the emails about them, and Nova's answers to the questions you type on this website.
• Because the law requires it: the prize tax and its reports, accounting and VAT records, the country checks.
• Our legitimate interest in a fair and safe service: the fair-play checks, keeping linked players apart, the security log, the usage counts, the limits and the human check on the waiting list and on questions typed to Nova, and keeping a closure in force after a deletion.

How long

Delete my data, Delete my account

Delete my data (under You) asks twice, then tells the server to forget your device (every row keyed to your device id is deleted), wipes everything Nova kept in this browser, and reloads the page as a first visit. The next visit gets a brand-new device id. If the server cannot be reached, nothing is deleted and Nova says so.

Delete my account (under You) asks for your password again, then deletes your account and its rows. It is refused while your wallet holds money or while you sit in a room: cash out first. (To check, the server reads your wallet's balance from the blockchain at that moment and keeps nothing.) We then delete your login at Openfort as well, without undue delay.

Leaving the waiting list takes one tap on the link in any of its emails, or an email to us. Your entry is deleted.

What the law makes us keep after a deletion: your entries, prizes and tax, under a random code instead of your account (your wallet address stays public on the blockchain); a winner's legal name, tax number and accepted certificate where a prize was taxed or reported; a closure for as long as it lasts (above). Each is kept only for the period in the table, and used for nothing else.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent (the waiting list), you can take it back at any time. Write to hello@intellnova.ai; one person answers by hand, within one month. Delete my data, Delete my account and the waiting list's leave link work without asking anyone. One decision is automated: hard proof of cheating cancels a paid result before the room pays, and the room is refunded (Fair play, above). You can contest it, and a person answers. Every other decision about you, a closure included, is made by a person.

If you think we got it wrong, you can complain to the Romanian data-protection authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, sector 1, Bucharest, dataprotection.ro, or to the authority of the country you live in.

Children

Practice is for everyone and needs no account. The waiting list and an account need you to be 16 or older, and cash play 18 or older. If you believe a child under 16 has joined the list or made an account, write to us and we delete it.

Contact

LosDudos SRL, [registered address], Romania. hello@intellnova.ai.

Where an address is set, You carries a Contact screen. Its Copy diagnostics button shows you, in full, what it copies (the app version, your language, your screen size, your device id, the identification string your browser sends to every website, what the entrance managed to load and the last error the page saw), and nothing is sent by the app: it goes to your clipboard, and you paste it into your own email, or you do not.