Privacy Notice

1. Who controls your data

The data controller is the N4XION sole proprietor [registered trade name — to be confirmed], with a place of business at [business address — to be confirmed]. For any privacy request, contact [email protected].

2. Personal data we collect

When you join the waitlist or use this site, we may collect:

• Your name or gamer name.
• Your email address.
• Your country.
• The game you want to host (and a custom game name if you choose “Other”).
• Your planned monthly budget range (PHP band, not an exact figure).
• Consent records — your age confirmation, terms acceptance, and marketing consent, with versions and timestamps.
• Referral data — a referral code you arrived with, and the referral link we issue to you after verification.
• Limited security and abuse-prevention logs — for example, hashed or truncated technical signals used for rate limiting and bot protection. We do not permanently store your full IP address unless required and documented.

We practise data minimisation. We do not collect full postal addresses, birthdays, government IDs, passwords, or payment details during the waitlist phase.

3. Why we process your data

• To manage the waitlist and verify that your entry is a real, reachable email.
• To estimate demand and plan locations, packages, and games.
• To operate the referral programme and calculate queue position.
• To prevent spam, fraud, and abuse.
• To send you the launch updates you consented to receive.

Legal basis: we rely on your consent for launch marketing, and on legitimate operational needs (such as security and abuse prevention) where applicable. Final wording is subject to legal review.

4. Email verification

We send a verification email with a single-use link. We store only a one-way hash of the verification token, never the raw token. Verification links expire after 24 hours. Only verified entries count toward the public counter and the queue.

5. Referral tracking

If you arrive through a referral link, we record the referral code so your friend receives credit after you verify. We track referral clicks and verified conversions separately for abuse detection. We never expose the identities of referrers or referred members publicly.

6. Security and abuse logs

To protect the waitlist, we record limited security events (such as rate-limit hits and bot checks) using hashed or coarse signals. These logs are kept to what is necessary and do not expose your email address or secrets.

7. Consent records

We keep a record of the specific consents you gave (age, terms, and marketing), including the version of each document and the time you accepted, so we can honour your choices and demonstrate compliance.

8. Service providers we use

• Cloudflare — hosting (Pages), the waitlist API (Workers), the database (D1), bot protection (Turnstile), and privacy-first Web Analytics.
• Resend — sending verification and transactional emails from our n4xion.net sender domain.
• Authorised N4XION operators who run the waitlist.

9. Cross-border processing

Our service providers may process data on servers outside the Philippines. We choose providers that offer appropriate safeguards, and we only share the minimum data needed to deliver the service.

10. How long we keep your data

• We delete unverified entries after 30 days.
• We retain verified waitlist data until launch plus a defined review period, after which we delete it or obtain renewed consent if continued processing is no longer justified.
• Unsubscribing stops marketing processing; we keep only records required for legal or accountability reasons.

11. Data security

We use HTTPS, server-side validation, prepared database statements, hashed tokens, rate limiting, and a strict content security policy. No system is perfectly secure, but we work to protect your data proportionately to its sensitivity.

12. Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your data is processed;
• access the personal data we hold about you;
• correct inaccurate data;
• object to processing;
• withdraw consent at any time;
• request deletion where applicable; and
• lodge a complaint with the National Privacy Commission (NPC).

To exercise any right, email [email protected]. You can also unsubscribe from marketing at any time using the link in our emails.

13. Complaints

If you believe your privacy rights have been violated, you may contact us first at [email protected], and you may also lodge a complaint with the National Privacy Commission of the Philippines.

14. Changes to this notice

We may update this notice as the service develops. Material changes will be communicated to verified members. This notice is subject to final legal review before N4XION accepts payments.