Privacy Policy

Who this policy covers

This policy covers the services operated by Nocville. Your team controls who joins its offices and which integrations it connects. If your organization operates its own deployment, it also controls that deployment’s infrastructure, access, and retention. Ask its administrator about any additional workplace or hosting policies.

Information we handle

• Account information, including your email address, display name, password hash, avatar choices, sign-in sessions, and team memberships.
• Office content and activity, including maps, positions, presence, desk assignments, messages, uploaded images, NPC updates, incident information, and integration settings that you or your team provide.
• Technical and usage information, including IP addresses in connection or security logs, device and browser information, errors, feature counts, connection times, and voice/video bandwidth and duration. Usage records can be associated with account, team, map, or NPC identifiers.
• Support correspondence and, when a paid plan is purchased, billing contact details, subscription status, and payment-provider references.

Connected tools send the information they are configured to share. Depending on your configuration, this can include project names, file names, status messages, logs, or coding-agent activity. Review those settings before connecting confidential systems.

How information is used

We use information to operate your account and office, deliver messages and calls, send account and invitation emails, provide support, prevent abuse, diagnose failures, understand service usage and costs, and administer subscriptions. Nocville does not sell personal information or use team content for targeted advertising.

Team visibility and encryption

Other participants can see information you share with them, including your profile, presence, office activity, and content in channels they can access. Team membership features may expose your email address to teammates. Team administrators manage membership and configuration; being an administrator does not automatically grant access to every private conversation.

Privacy protections depend on the deployment you use. The existing hosted backend processes team content on the server. Where the encrypted Cloudflare deployment is enabled, supported messages and NPC content are encrypted on participating devices or connectors before reaching storage. That protection does not cover all data: account details, membership, office layouts and positions, routing information, and usage records remain available to the hosting service.

Encryption does not prevent an authorized recipient from copying or sharing content, or protect a compromised device. Your team is responsible for its devices and recovery material. We cannot recover encrypted content without the necessary keys. Older deployments, exports, and backups may have different protections; this policy is not a promise that all Nocville data is unreadable by its operator.

Voice, video, and desktop permissions

Voice, video, and screen sharing use WebRTC. Media travels directly between participants when possible and through a relay when needed. WebRTC encrypts media in transit; connection setup and relay services still process network information and traffic metadata. Direct connections can reveal network addresses to other participants. Nocville does not provide server-side call recording; other participants may capture what you share.

Microphone, camera, screen-sharing, notification, and desktop permissions support the features you enable. You can change permissions in your browser or operating system. Optional music sharing exposes the currently playing song to teammates when enabled. Desktop availability features may use idle or screen-lock state to update your presence.

Service providers and other disclosures

Depending on the deployment, infrastructure providers include Amazon Web Services and Cloudflare; account email uses Resend. Sentry may process error diagnostics where enabled. Paid checkout, when offered, uses a payment provider such as Stripe; payment card details are submitted to that provider rather than stored as card numbers by Nocville. Providers process information needed for their services, and their own policies also apply.

Integrations you choose send or receive information under their respective providers’ policies. For a customer-owned Cloudflare deployment, any Cloudflare authorization you grant permits the deployment actions described on its consent screen. You can revoke that authorization through Cloudflare; revocation does not itself delete deployed resources or end their hosting charges.

We may disclose information when required by law, to respond to lawful requests, protect people and the service, or as part of a business transfer subject to applicable privacy obligations. Information may be processed in the United States and other countries where our providers operate.

Cookies, local storage, and retention

Nocville uses browser storage and, where applicable, cookies for sign-in, preferences, device keys, and service functionality. Clearing that storage can sign you out or remove locally held keys. Our application does not use advertising cookies.

Retention depends on the record and deployment. Accounts, team settings, and retained conversations support ongoing use. Live status, alerts, and incident history may expire quickly and should not be treated as an archive. Logs, usage records, billing records, and backups may remain for operational, security, recovery, or legal needs after active content is removed. Deletion from active storage does not instantly remove every backup or copies held by recipients.

Your choices and requests

You can change available profile and integration settings, stop sharing media or music, and disconnect tools. Contact your team administrator about team-controlled content and access. You may also request access, correction, export, or deletion of your personal information; depending on your location, you may have additional rights to object, restrict processing, withdraw consent, or complain to a privacy regulator. We may need to verify your identity and consider legal obligations and other people’s rights when handling a request.

Children

Nocville is a workplace collaboration service and is not directed to children under 13. Do not create an account or send us personal information if you are under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

Changes to this policy

We will update the date on this page when this policy changes and provide additional notice of material changes as required. Our Terms of Service explain the conditions for using Nocville.

Contact Nocville

Nocville operates this service. For privacy questions or requests to access, correct, export, or delete your personal information, email stoneleaftstudiogames@gmail.com.