Privacy Policy

1. Scope

This Policy applies to netom.me and Netom features including authentication, Connected Accounts, Community, Nest, and related web interfaces. External services also apply their own terms and policies.

2. Information we handle

We handle information needed to operate Netom, including:

• Authentication identifiers, provider information, and session data.
• Username, display name, bio, location, activity types, theme, avatar, banner, and appearance settings.
• Links, Pickups, games, achievements, works, devices, PC details, photos, and Showcases submitted by users.
• Follows, blocks, friendships, Community content and reports, Nest progress, inventory, and action records.
• Connected Account identifiers, display details, profile URL, visibility, verification state, and sync times.
• Logs, timestamps, errors, and security information needed to prevent abuse and investigate incidents.

3. Purposes

We use information to provide and display profiles, authenticate users, verify external-account ownership, operate social, Community and Nest features, store images, support users, prevent abuse, resolve incidents, compile service metrics, improve Netom, and meet legal obligations. We do not sell Connected Account data or repurpose it for unrelated AI training.

4. Profile visibility and search

Netom intentionally keeps an account's existence and basic profile shell discoverable.

• For public, friends-only, and owner-only profiles, basic profile and appearance information may remain visible in profile pages and search results, including username, display name, bio, location, activity types, theme, avatar, banner, and profile level.
• Links, Pickups, games, achievements, works, photos, Showcases, Connected Accounts, and other detailed content follow the selected visibility. Friends-only detail requires a mutual follow; owner-only detail is available only to the owner.
• Blocks, enforcement restrictions, and item-level visibility may further limit access.
• Search engines and social platforms may retain cached pages or Open Graph images after settings change.

5. Connected Accounts

We process the minimum information needed for ownership verification and profile display. Verified does not mean legal identity verification, KYC, or endorsement by the provider. Steam and other synchronization runs server-side; secret keys are not exposed to browsers. Integrations may change or stop when provider rules, review status, availability, or security needs change.

6. Google and YouTube data

YouTube connection may store a channel ID, title, handle, profile URL, and provider-supplied icon to verify channel ownership and display a Connected Account. We do not sell Google user data or use it for advertising, data brokerage, unrelated analytics, or unrelated AI training. Apart from operational processors, we do not unnecessarily disclose it. Users may request deletion through available disconnect/delete controls or by contacting us. Google Privacy Policy (https://policies.google.com/privacy) also applies to YouTube API Services.

7. Images and Storage

Uploaded images may be converted and resized, then stored in Netom-managed Storage. File, pixel, and count limits apply. Deleting a managed photo or Pickup is designed to delete its related stored images. Game Showcase images are not user-entered URLs; synced Steam information supplies them automatically. Because public Storage URLs may be accessible to someone who knows the URL, do not upload secrets.

8. Processors, disclosures, and international processing

Cloud providers may process data for database, authentication, Storage, hosting, email, monitoring, and security operations, including in other countries. We disclose information only as needed for those operations or where permitted or required by law, safety needs, abuse response, disputes, or a business transfer. We do not sell personal information.

9. Cookies, logs, and metrics

Cookies or similar technologies maintain login, security, language, and service settings. We may keep owner-facing aggregate counts such as profile views and link clicks. Infrastructure logs may temporarily contain IP addresses or similar data for security and incident investigation.

10. Retention and deletion

We retain information while an account exists and for as long as needed for the stated purposes. Community timeline posts are generally removed in batches after 90 days, while thread bodies and replies are retained for as long as the thread exists. Account deletion removes associated profile data and managed images. Hidden posts, unresolved report evidence, and limited records may remain for a reasonable period in backups, security and enforcement records, legal compliance, and disputes. We cannot immediately remove external-service or search/social cache copies.

11. Security and incidents

We use reasonable measures including authentication, Row Level Security, server-only secrets, access controls, input/file/rate limits, and protected logging. No internet service can guarantee absolute security. For a significant incident, we investigate, contain, notify, and report as required by law.

12. User choices and requests

Users can edit data, change visibility, disconnect supported accounts, and delete their account through available controls. For access, correction, suspension, deletion, or other legally available requests, contact support@netom.me. We may verify identity and the scope of the request.

13. Minors

Minors must obtain guardian consent where required by applicable law. Do not publish home addresses, school details, direct contact details, or other unnecessary safety-sensitive information.

14. Changes and contact

We may revise this Policy as features, processors, or laws change. Material changes will be announced by reasonable means. Contact support@netom.me for privacy, deletion, operator information, or provider-review questions.