Privacy policy

Last updated: 8 August 2026

Information we use

We store your callsign, account settings and game progress so that you can use Neverending Space. If you choose password access, we store an Argon2id password hash rather than your password. If you choose a passkey, the private key remains with your device or passkey provider; we store the corresponding public credential information.

A recovery email is optional with a passkey and required with password access. An address cannot be used to recover an account until it has been verified. Short-lived verification and login codes are stored as keyed digests, not as readable codes.

If you email jason@neverendingspace.com or support@neverendingspace.com, Resend processes the message and any attachments and forwards them to our Gmail mailbox so that we can read and respond. Our database stores forwarding identifiers and delivery state, but not the message body or attachments. Because receiving is catch-all, Resend may receive mail sent to another address at the domain; the application ignores those recipients without retrieving or forwarding their message content.

For abuse prevention, the application keeps temporary attempt counters associated with a keyed, pseudonymous version of your IP address. The raw address is not stored in our account database, although our hosting provider may process it in ordinary request and security logs.

How we use it

We use this information to provide and secure accounts, remember story progress, deliver requested account emails, prevent automated abuse, diagnose faults and respond to support or legal requests. We don't use it for advertising or sell it.

Service providers

We use Vercel to host the application, Neo4j to host its database, Resend to send and receive email, and Google to provide the destination Gmail mailbox. They process the information needed to provide those services and may process it outside the UK or European Economic Area under their own contractual and legal safeguards.

Modifying and deleting data

You can see and modify account information in the Console. You can also contact us to request access, correction or deletion, or to exercise another applicable data-protection right. We keep account information while the account is active and retain other records only while they are needed for security, legal obligations or resolving disputes.

Sharing data

We share data with the service providers above only as needed to operate Neverending Space. We may also disclose information where required by law, to respond to a valid legal request, or to protect users and our rights.

If we sell the service your personal information would be transferred to the new owner.

Cookies and tracking

We use essential, secure cookies to remember your login and briefly bind passkey requests to your browser. We don't use advertising cookies or third-party analytics trackers.

Complaints

If you are in the UK and believe your data-protection rights have not been respected, you may also complain to the Information Commissioner's Office.

Contact

support at neverendingspacenospam dot com