Cookie and analytics choices: Basic page-view measurement runs where permitted. The first-visit banner offers Accept all for optional detailed tool-interaction analytics, Basic only for page-view measurement, or Reject optional to deny analytics storage and detailed events (limited cookie-less measurement signals may still be sent by Google Consent Mode). In the EEA, UK and Switzerland, analytics storage starts denied until a visitor makes a choice. You can reopen settings using Privacy choices in the footer. Advertising storage, Google Signals and ad personalization remain off. Your choice is stored in this browser.

LEGAL + PRIVACY

Privacy Policy

How NexusNova Tools and the optional NexusNova account experience handle information.

Last updated: 15 October 2026

Overview

Most NexusNova browser tools can be used without creating an account. Many calculations, conversions and file operations run directly in the visitor's browser. NexusNova also provides an optional Firebase-backed account experience and uses limited third-party infrastructure for security, analytics, supported account linking and, when enabled, advertising.

Plain-language privacy: When a tool says its core file processing is local or browser-based, the selected file stays on the device for that core operation. Basic page views can be measured with analytics cookies where permitted; detailed tool interactions require a separate opt-in. In the EEA, UK and Switzerland analytics storage starts denied until a visitor chooses. A tool may also load a third-party client-side library or language model that receives ordinary web-request information when fetched.

Local browser tools

Ordinary calculators, converters, timers and many utility pages process entered values in browser JavaScript to produce the displayed result. NexusNova does not require a login wall for normal public browser tools.

Images, OCR, QR and PDF tools

Core processing for many image and document utilities is designed to happen in the browser. Some tools load client-side libraries or language data from public content-delivery networks when needed. Requesting those libraries can expose ordinary web-request information such as IP address, browser information and the requested library URL to the relevant provider. Selected source files are not intentionally uploaded to a NexusNova application server for core local-processing functions unless a page clearly states otherwise.

Browser storage

Some tools can store drafts or preferences in browser storage. A pending referral code can also be stored temporarily so registration can complete without losing an invite. Browser storage is associated with the browser profile and may be removed when site data is cleared.

NexusNova account registration

If you create or sign in to a NexusNova account, Firebase Authentication processes the email address and password used for authentication. NexusNova website code does not store the plaintext password. Application profile data can be stored in Cloud Firestore, including the Firebase UID, display name, email address, verification-related state and other account fields needed by the current NexusNova experience.

Email verification

Verification email is handled through Firebase Authentication. The website can read the authenticated account's verified-email state to show truthful account and mission eligibility. A verified email does not automatically start mining or guarantee a reward.

Cloudflare Turnstile and abuse protection

Sensitive email/password authentication flows use Cloudflare Turnstile. The browser receives a public Turnstile site key, while the secret key remains server-side in encrypted Cloudflare Worker configuration. Turnstile tokens are verified on the server before the existing Firebase authentication handler is allowed to continue.

The authentication security endpoint also applies short- and longer-window request throttling using a one-way hash derived from network and browser request signals such as the connecting IP address and User-Agent. These controls are intended to reduce automated abuse and are not used as a rule that permanently limits a shared IP address to one account.

Temporary-email risk signal

The security service can flag a submitted email domain when it matches a known temporary or disposable-email domain list. This is a risk signal only. The current website does not claim that a browser-side flag by itself has issued, removed or changed an NVX reward or mining balance.

Telegram Mini App and account linking

When NexusNova is opened as the official @NexusNovaToolsBot Mini App, Telegram can provide launch data such as Telegram numeric ID, username, first and last name, language information and profile-photo availability when those fields are available. Server-side verification is required before Telegram identity data is trusted for account linking. A one-to-one Telegram-to-NexusNova mapping can be stored in Cloud Firestore. The Telegram bot token remains server-side and is not included in website source code.

Referral-attribution data use

A referral link can include a referral code. After authentication, the website can verify the referral-code record and create one pending referral relationship when eligible. Self-referrals are rejected, a referred account cannot simply switch to a different referral after attachment, and signup itself does not mint a referral reward. Any future value-bearing referral activation remains subject to server-side verification and eligibility rules.

NVX and mining information

The Web App can display real account fields that are available from the authenticated Firebase profile. The website must not invent balances, mining rates, stages or countdowns. Account creation does not auto-start mining, and unavailable live halving or mining data is shown as unavailable rather than fabricated.

Google Analytics

The website uses Google Analytics 4 with measurement ID G-YLPFKWSS12. Basic page-view measurement runs by default where permitted, except when a visitor has opted out or the browser signals Global Privacy Control. In the EEA, UK and Switzerland, analytics storage starts denied until the visitor chooses. The first-visit banner offers Accept all (page views plus optional detailed tool-interaction events), Basic only (page views), and Reject optional (analytics storage and detailed events denied; limited cookie-less measurement signals may still be sent). Detailed events include selected run, copy and download interactions and are sent only after Accept all. Advertising storage, Google Signals and ad personalization remain denied. Account analytics events do not intentionally include passwords or verification secrets. Visitors can reopen and change these settings through Privacy choices in the footer. This policy describes the current implementation and is not legal advice for every jurisdiction.

Advertising, cookies and consent

NexusNova may use Google AdSense to display advertising. When Google advertising tags are active, third-party vendors, including Google, may use cookies to serve and measure ads based on a visitor's prior visits to NexusNova and/or other websites where permitted. Google and advertising partners may also use technologies such as cookies, web beacons, IP addresses or other identifiers as part of ad serving, measurement, security and fraud prevention.

Google's use of advertising cookies enables Google and its partners to serve ads based on visits to this site and/or other sites on the Internet. Visitors can manage or opt out of personalized advertising through Google Ads Settings. More information about how Google uses information from sites that use its services is available on Google's partner-sites privacy page.

If other approved third-party ad vendors or ad networks are used through the advertising provider, their cookies or similar technologies may also be involved in serving or measuring ads. Visitors can use the relevant vendor controls where available. Where consent is required, including applicable advertising traffic in the EEA, the UK and Switzerland, NexusNova will use the applicable Google-certified consent mechanism for personalized advertising as required by Google policy and applicable law.

NexusNova advertising must remain visually distinct from site navigation, download controls, system messages and NexusNova feature buttons. Advertising is not presented as a guaranteed reward, mining result or required step for using ordinary public browser tools.

Account and data deletion

NexusNova account holders can request permanent account and associated-data deletion through the Account Deletion page. Ownership may be verified before deletion. Limited records may be retained where reasonably necessary for security, fraud prevention, dispute resolution or legal compliance.

Security and sensitive data

No online service can guarantee absolute security. Never share passwords, verification codes, API keys or recovery phrases. NexusNova secrets used by server-side integrations are not intended to be stored in browser JavaScript or public repository content.

Questions and changes

This policy may change as NexusNova adds or materially changes services. Material changes will update the date above. Questions can be sent through the Contact page. For technical details, see Tool Methodology.