Legal
Privacy Policy — Nova Dominion
Last updated: 17 August 2026
This document is shown in your selected language.
This Privacy Policy explains how Gold Development ("we", "us", the operator of Nova Dominion) processes your personal data when you use the online strategy game Nova Dominion and its related services (the "Service"). We process personal data in accordance with the General Data Protection Regulation (GDPR/AVG) and the Dutch GDPR Implementation Act.
1. Data controller
The controller responsible for your personal data is:
- Gold Development
- Coolsingel 139, 3012 AG Rotterdam
- KvK number: 61213535 — VAT number: NL002254942B32
- General contact: info@gold-development.nl
- Privacy / data protection: info@gold-development.nl
For any questions about this Privacy Policy or the processing of your personal data, please contact info@gold-development.nl.
2. Personal data we process
We process the following categories of personal data:
| Category | Examples |
|---|---|
| Account data | Email address, username, encrypted (hashed) password. Your password is never stored in plaintext. |
| Preferences | Preferred language. |
| Gameplay and account data | Planets, fleets, alliance membership, in-game messages, activity and timestamps (such as last login), game progress and related data. |
| Technical and security data | Server logs and IP address, processed for the operation and security of the Service. |
| Payment data | If you purchase a Commander Pass: transaction data (product, amount, currency, status, transaction/payment id). Card data is processed by our payment provider Mollie; we do not store card data ourselves. |
Nova Dominion is free-to-play; no purchase is required. We process payment data only if you take out a paid subscription.
3. Purposes and legal bases
We process your personal data for the following purposes, each on the legal basis under Article 6 GDPR indicated:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and providing the game (login, game progress, alliances, messages) | Performance of the contract (Art. 6(1)(b) GDPR) |
| Security, fraud prevention, anti-cheating and anti-abuse, and ensuring the stability of the Service (including server logs, IP) | Legitimate interest (Art. 6(1)(f) GDPR) — a secure and fair game |
| Processing payments and granting subscription benefits | Performance of the contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR, e.g. tax retention) |
| Communication about the Service (service emails, important changes) | Performance of the contract / legitimate interest |
| Optional features requiring consent (e.g. analytics, non-essential cookies) | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
Where we rely on a legitimate interest, we have balanced our interests against your rights and freedoms.
4. Recipients and processors (sub-processors)
We do not sell your personal data. We engage carefully selected processors that process data solely on our instructions and under a data processing agreement:
| Processor | Role | Data processed |
|---|---|---|
| Mollie B.V. | Payment provider | Payment and transaction data when you purchase a Commander Pass |
| TransIP | Hosting and infrastructure provider | Storage and processing of account data, gameplay data and server logs required to run the Service |
In addition, we may share data with competent authorities where we are legally required to do so, or in the context of legal proceedings or to protect our rights.
5. Transfers outside the EEA
We aim to process your personal data within the European Economic Area (EEA). If a processor processes data outside the EEA, we ensure appropriate safeguards such as a European Commission adequacy decision or the EU Standard Contractual Clauses. You may request a copy of, or further information about, these safeguards via info@gold-development.nl.
6. Retention periods
We do not keep your personal data longer than necessary for the purposes for which it was collected:
- Active account — for as long as your account exists, we keep your account and gameplay data to provide the Service.
- Account deletion — when you delete your account (or we do), the account is first soft-deleted with a recovery period of 30 days. During this period you can reactivate the account by logging in. After 30 days the data is permanently and irreversibly purged.
- Administrative suspension/blocking — for a breach of the rules we may block an account or, for serious or repeated breaches, permanently delete it.
- Payment and transaction data — retained for as long as necessary to comply with our legal (including tax) retention obligations, typically seven (7) years.
- Server logs / security data — retained for a limited period necessary for security and troubleshooting.
7. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Right of access — you can request which personal data we process about you.
- Right to rectification — you can have inaccurate or incomplete data corrected.
- Right to erasure ("right to be forgotten") — you can request that your data be erased; you can partly do this yourself via "delete account".
- Right to restriction of processing — you can have processing restricted in certain cases.
- Right to object — you can object to processing based on our legitimate interest.
- Right to data portability — you can receive the data you provided to us in a structured, commonly used and machine-readable format.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of prior processing.
You can exercise these rights by contacting info@gold-development.nl. We will in principle respond within one month. To verify your identity we may ask for additional information.
8. Complaint to the supervisory authority
If you believe we process your personal data unlawfully, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority, https://www.autoriteitpersoonsgegevens.nl). We would appreciate the opportunity to address your complaint first via info@gold-development.nl.
9. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. For example, passwords are stored only in encrypted (hashed) form, and we process payments via a specialised payment provider so that card data does not reach our servers. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The Service is not intended for persons under 16 years old. In the Netherlands, consent is subject to an age limit of 16 years. If we unintentionally process a child's data without the required consent, we will delete it as soon as we become aware.
11. Cookies and local storage
The Service makes minimal use of cookies and local storage. For operation we store, among other things, an authentication token in your browser's local storage (localStorage) and your language preference. See our Cookie Policy for details.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the most recent version. For material changes we will inform you in a reasonable manner.
13. Contact
Questions or requests about your personal data? Contact:
- Gold Development
- Privacy / data protection: info@gold-development.nl
- General: info@gold-development.nl
- Coolsingel 139, 3012 AG Rotterdam