Nebula
Privacy Policy
Last updated: November 1, 2026
This policy explains what Nebula collects, why, and what you can do about it. Nebula is made by UEFN Collective Inc. ("we", "us").
The short version: we collect what we need to run your account and improve Nebula. We don't sell your data, and we don't use ad trackers. Your chats and projects stay on your PC.
1. What stays on your PC
Your chats, settings and project files stay on your computer. Your Nebula key is stored there too, encrypted with Windows' own encryption. We don't upload your projects or your chat history.
2. What we collect
Your account (when you sign in with Discord):
- your Discord ID, display name and profile picture;
- whether you're in the UEFN Collective server, and which of its roles you hold, checked each time you sign in. We use these to give you free shards and student plans.
Using Nebula:
- Shard usage: how many steps Nebula took for your account, and your balance.
-
Knowledge cards: which cards your account received each day. We use this for daily limits and to stop copying.
- To pick cards, Nebula sends your message text and the names of the UEFN tools it's using to our server. We use the text to match cards and don't store it.
- Tool errors: when a UEFN tool call fails, its name and error text. We count these without linking them to your account, and remove file paths and numbers first.
- A PC identifier: a scrambled code made from your PC's Windows ID, so each PC gets the free shards only once. It can't be turned back into your Windows ID.
Things you choose to send:
- Crash reports: on by default, and you can turn them off in Settings > Privacy. They include what crashed, your PC's memory, and Windows' crash records. We remove your Windows user name. Never chat content or your files.
- Diagnostics reports: only when you click Send in Settings > System tools.
- Voice dictation: your recording is turned into text by Cloudflare's speech service, and it isn't kept.
- Uninstall feedback: the reason you pick on the goodbye page, with no account or IP address attached.
When you buy a plan or a shard pack: you pay through Link, Stripe's checkout, under Link's privacy policy. We receive your email address, what you bought, and a Stripe customer ID. We never see or store your card number.
Our website: a sign-in cookie keeps you signed in to your dashboard for up to 30 days. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you to other sites. No ad trackers.
3. Claude Code and Anthropic
Nebula runs Claude Code under your own Anthropic account. What you send to Claude goes to Anthropic, and Anthropic's own terms and privacy policy cover it. We never see your Claude password or sign-in tokens.
4. Discord Rich Presence
If Rich Presence is on (Settings > Discord), Nebula shows that you're using it on your Discord profile, through the Discord app on your PC. You can turn it off anytime.
5. Who we share data with
We only share data with the services that run Nebula for us:
- Cloudflare: hosting, our database, speech-to-text and website visit counts. Like any website host, it processes IP addresses to deliver the service.
- Discord: sign-in.
- Stripe and Link: payments and receipts.
We may also share data if the law requires it, or to protect our rights or people's safety. We don't sell your personal information, or share it for advertising.
6. How long we keep it
- Account data: for as long as your account is open.
- Usage and card records: as long as we need them for limits and abuse checks.
- Crash and diagnostics reports: as long as they help fix problems.
- When you delete your account, we delete or anonymize your data, except what we must keep for legal, tax or fraud reasons.
7. Your choices and rights
- Ask us for a copy of your data, to correct it, or to delete your account: email support@nebulafn.dev.
- Turn off crash reports and Rich Presence in Settings.
- Depending on where you live (for example the EU, UK or California), you may have more rights under local law. Contact us and we'll help.
8. Children
Nebula is for people 13 and older. We don't knowingly collect data from children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.
9. Security
Keys are stored as one-way hashes on our server, and encrypted on your PC. Sign-in links and codes expire within minutes. No system is perfectly secure, but we work to protect your data.
10. Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.