Who is responsible
NightReveal is operated by Ihor Mudrak, an individual based in Portugal. Ihor Mudrak is the data controller for personal data processed through this website.
Privacy questions and data requests can be sent to privacy@nightreveal.com.
Data we process
Website delivery and security
When you visit NightReveal, our hosting provider may process technical request data such as your IP address, browser and device information, requested URL, and request time. This is necessary to deliver the site, prevent abuse, diagnose failures, and keep it secure.
Adult confirmation
The wiki asks you to confirm that you are at least 18. The current confirmation is stored only in your browser as nr_age_ok=1. We do not receive your date of birth or your exact age through this check.
Account and sign-in
If you create an account, we process your email address, a pseudonymous account identifier, the nickname you choose, an adult-confirmation record, and limited authentication and security events. Your email is used to deliver one-time sign-in codes and essential account messages.
Sign-up asks for your date of birth so we can check that you are 18 or older. The date is used for that check and is not stored: the account keeps only the fact that the check passed, when it happened, and the policy version in force at the time.
Launch waitlist
If you enter your email in the “notify me” form, we store that address and the date you gave it, so we can tell you once when NightReveal opens. Nothing else is stored with it, and submitting the form is entirely optional. If you already have an account, the form is not shown — the launch notice goes to account holders too, so there is nothing to add.
Messages you send us
If you contact us, we receive your email address and whatever information you choose to include in your message.
NightReveal does not collect payment details, legal names, physical sex, sexual preferences, or user-generated content, and does not retain the date of birth used for the one-time age check. We do not use advertising trackers or behavioural analytics. This policy will be updated before that scope changes.
Why we process it
- To provide and secure the website, based on our legitimate interests.
- To provide account access and requested OTP authentication, to deliver the service.
- To answer messages and privacy requests, based on our legitimate interests.
- To send one notice when NightReveal opens — to waitlist addresses on the consent you gave in the form, which you can withdraw at any time, and to account holders as an announcement about the service they signed up for.
- To comply with a legal obligation or establish and defend legal claims when necessary.
We do not send marketing email. The launch notice is sent once, to waitlist addresses and to account holders, and includes a way to unsubscribe. An address on both lists receives it only once.
Who receives data
Amazon Web Services provides our DNS, content delivery, hosting, storage, security logs, and email infrastructure. We disclose data only to service providers acting for us, when required by law, or when necessary to protect the service and its users. We do not sell or rent personal data.
We configure primary infrastructure in the European Union. A provider may process limited data elsewhere under applicable contractual and legal transfer safeguards.
How long we keep it
- The adult-confirmation value remains in your browser until you clear site storage.
- One-time sign-in codes expire within 1 hour and are deleted as soon as they are used or after a few failed attempts.
- A signed-in session lasts up to 30 days; signing out ends it and removes the session cookies immediately.
- Your account record — email address, nickname, and adult-confirmation record — is kept for as long as your account exists. You can ask us to delete it at any time.
- A waitlist address is kept until the launch notice is sent, or until you ask us to remove it — whichever comes first.
- Operational Lambda logs are retained for up to 30 days.
- Raw contact email is retained in encrypted AWS storage for up to 7 days.
- Contact correspondence is normally deleted within 24 months after it is resolved.
Data may be kept longer where the law requires it or a legal claim makes it necessary.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time. Email privacy@nightreveal.com to exercise these rights.
You may also complain to Portugal's data protection authority, the Comissão Nacional de Proteção de Dados.
Adults only
NightReveal is intended only for people aged 18 or older. We do not knowingly create accounts for or collect personal data from minors. If you believe a minor has provided us with personal data, contact us so we can investigate and delete it.
Policy changes
We will update this policy before introducing material new uses of personal data. The date at the top shows the latest revision. Where appropriate, we will provide additional notice or request consent.