Last Update: March 22nd, 2026

This Privacy Policy describes how nightfall ("we", "us", "our", "nightfall", "https://nightfall.site") collects, uses, and protects your information when you use our website and services.

1. Information We Collect

We collect the following types of information:

  1. Account Information: When you register, we collect your username, password (stored in hashed form), and optionally your e-mail address.
  2. Hardware Identification: When you use our client software, we collect a hardware identifier (HWID) generated from your computer's components to enforce our licensing system.
  3. Transaction Data: When you purchase a membership or license, we collect information related to the transaction, including order details and payment references.
  4. Log Data: We may collect information that your browser or client sends whenever you visit our website, such as your IP address, browser type, and access times. This data is used solely for security purposes (e.g. brute-force protection).

2. Cookies We Use

Our website uses only strictly necessary cookies that are essential for the site to function. We do not use any tracking, analytics, advertising, or third-party marketing cookies.

The cookies we use are:

  1. Session Cookie (PHPSESSID): A temporary cookie that maintains your session while you browse the site. It is deleted when you close your browser. This cookie is essential for logging in, navigating between pages, and maintaining security.
  2. Remember Me Cookie (REMEMBERME): An optional persistent cookie set only when you check the "Remember Me" box during login. It keeps you logged in for up to 30 days so you do not have to re-enter your credentials each visit. You can opt out by simply not checking the "Remember Me" checkbox.
  3. CSRF Protection Cookie: A security cookie used to protect forms on the site from cross-site request forgery attacks. This is essential for the security of your account.
  4. Cloudflare Turnstile: We use Cloudflare Turnstile for bot protection on certain forms (e.g. registration). Cloudflare may set cookies necessary for this security service to function. These are strictly necessary for security purposes.

Because all cookies used on this site are strictly necessary for functionality and security, they are exempt from consent requirements under the ePrivacy Directive. However, we believe in transparency and want you to be fully informed.

3. How We Use Your Information

We use the information we collect for the following purposes:

  1. To provide, maintain, and improve our website and services.
  2. To authenticate your identity and manage your account.
  3. To enforce our licensing system and prevent unauthorized use of our software.
  4. To process transactions and manage memberships.
  5. To protect against fraud, abuse, and security threats (e.g. brute-force login protection, rate limiting).
  6. To communicate with you regarding your account or services, if you have provided an e-mail address.

4. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. Your data is not shared with any external parties except in the following limited circumstances:

  1. Payment Processors: When you make a purchase, your payment is handled by third-party payment processors. We do not store your payment card details.
  2. Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests.
  3. Security Services: We use Cloudflare for bot protection. Cloudflare processes certain request data in accordance with their own privacy policy.

5. Data Security

We take reasonable measures to protect your personal information, including:

  1. Passwords are stored using strong, industry-standard hashing algorithms and are never stored in plain text.
  2. Communication between your browser and our servers is encrypted via HTTPS/TLS.
  3. We implement rate limiting and brute-force protection on login attempts.
  4. CSRF tokens are used to protect all forms from cross-site request forgery.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your account information for as long as your account is active. If your account is terminated or deleted, we may retain certain data as necessary to comply with legal obligations, resolve disputes, or enforce our agreements. Session data and temporary security logs are automatically purged on a regular basis.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  1. Right of Access: You may request a copy of the personal data we hold about you.
  2. Right of Rectification: You may request that we correct any inaccurate data.
  3. Right of Erasure: You may request that we delete your personal data, subject to any legal obligations we may have to retain it.
  4. Right to Object: You may object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact our staff on nightfall.site's Discord group (link available on nightfall.site).

8. Children's Privacy

Our services are not directed to individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Update" date. Your continued use of the site after any changes constitutes your acceptance of the updated policy.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our staff on nightfall.site's Discord group (link available on nightfall.site).