1. Who is responsible for your information
NationQ Studio operates the Services and is the controller of the personal information described in this policy. Privacy questions and requests may be sent to [email protected].
Steam is operated independently by Valve. Valve handles your Steam account and Steam-side information under the Steam Privacy Policy. We never receive your Steam password.
2. Information we handle
Steam sign-in and account information
When you sign in through Steam, Steam confirms your Steam ID. Depending on your Steam privacy settings and the availability of the Steam Web API, we may also receive your public Steam persona name, avatar, community profile URL, and whether ownership of National Transit was confirmed. We create an internal account ID and store account status, role, profile URL slug, sign-in dates, and related administrative records.
The game may send a short-lived, one-use Steam Web API authentication ticket to ntgg.me. We send that ticket to Valve to verify the Steam ID and then issue a short-lived ntgg.me game token limited to Feedback and Share World. The game token does not create a website login cookie.
Session, device, and request information
For website sessions, we store a session identifier, expiry and revocation status, last activity time, IP address, and browser user-agent. Our servers and hosting providers may also process request timestamps, routes, response status, IP-derived security signals, and similar operational logs. We use account or network identifiers for rate limiting and abuse prevention.
Feedback, discussions, and messages
We process the material you submit, including bug reports, suggestions, titles, descriptions, categories, game version, uploaded images, comments, quoted guide text, reactions, votes, reports, messages, and moderation history. These records are associated with your account where you are signed in.
An in-game bug report also includes diagnostics generated for that report: game version and capture time; platform and language; logical processor count; graphics adapter description; viewport size and pixel ratio; optional JavaScript heap figures; up to 20 recent activity breadcrumbs; and up to 10 recent error messages and stack traces. Error text can sometimes contain information typed into or generated by the game, so please review the report description and avoid adding personal or confidential information.
Share World information
Share World sends a deliberately limited public snapshot, not your complete save file. A snapshot can include internal snapshot and timeline identifiers; game and simulation versions; in-game and real capture dates; nation name, abbreviation, capital, and description; total and settlement-level population and GDP; settlement names, tiers, map positions, and capital status; road, rail, air, and water links or routes and their map paths; and milestone identifiers. We also record the policy versions you accepted, the acceptance time, and whether publishing was manual or followed an exit save.
Share World does not upload your complete private save, Steam authentication ticket, ntgg.me token, Steam Cloud device identity, local diagnostics store, or unrelated local preferences.
Information we do not currently use for advertising
We do not currently run third-party advertising, behavioural advertising, or cross-site analytics on ntgg.me. We do not sell personal information.
3. How and why we use information
We use the information above to:
- authenticate users, maintain sessions, and connect game requests to the correct account;
- provide account profiles, discussions, Feedback, moderation, inbox, and Share World;
- publish world information you have affirmatively chosen to share;
- diagnose bugs, respond to reports, improve National Transit, and communicate progress;
- protect users and the Services, enforce rate limits and rules, investigate abuse, and keep audit records;
- operate, secure, test, maintain, and improve the Services; and
- comply with law and valid legal requests.
Where applicable law requires a legal basis, we rely on performance of our agreement with you to provide requested features; our legitimate interests in securing, supporting, moderating, and improving the Services; your consent or affirmative publishing request where applicable; and compliance with legal obligations. You may withdraw consent for future processing where consent is the basis, without affecting earlier lawful processing.
We do not use solely automated decisions that produce legal or similarly significant effects. Automated validation and rate limits may reject or delay a request, but moderation and account enforcement can be reviewed by a person.
4. Information you make public
Your Steam persona name, avatar, public World profile path, published comments, reactions, and Feedback that has completed initial staff triage may be visible to anyone. A newly submitted Feedback item starts visible only to its author and authorised staff; if staff moves it beyond the initial open status, its title, description, attachments, author display information, status, and public timeline may become public unless it is classified as internal or otherwise restricted. In-game diagnostics remain limited to the report author and authorised staff.
Images uploaded for Feedback are stored at unlisted public file URLs. We do not place a new report or its attachment links on the public Feedback board during initial triage, but anyone who obtains an attachment URL may be able to view and copy the image. Do not upload sensitive or private images.
A nation you publish through Share World is available at a stable public URL and its current published snapshot can be viewed without signing in. Public content may be indexed, copied, quoted, or retained by other people and services outside our control. Do not put real names, contact details, confidential material, or another person’s personal information into nation names, settlement names, descriptions, Feedback, comments, or images.
7. Retention
We keep account information while your account is active and for a reasonable period afterward when needed for security, dispute resolution, or legal obligations. Website session cookies expire according to their stated lifetime; server-side session and security records are kept only as long as reasonably needed to manage sessions and investigate misuse.
Feedback, discussions, moderation records, public World snapshots, and associated audit history may be retained while they remain useful to operate the community, maintain issue history, preserve publication integrity, and meet legal obligations. If content is deleted or an account is closed, we may retain limited records where necessary for these purposes. Residual copies may remain temporarily in backups and logs until they rotate. We use the purpose of processing, account status, community integrity, legal duties, security needs, and available deletion controls to determine specific retention periods.
8. Your choices and rights
You can sign out to revoke the current website session, change your World profile slug, choose whether to submit Feedback, and choose whether to enable Share World. Steam profile visibility and Steam Cloud controls are managed in Steam.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to certain processing; withdraw consent; or appeal a decision. You may also complain to your local data-protection authority. To make a request, email [email protected]. We may ask you to sign in with Steam or provide other information necessary to verify the request. Some rights are subject to legal exceptions and the rights of other people.
Removing content from ntgg.me does not remove copies already made by other people, search engines, or unaffiliated archives. Deleting an ntgg.me account does not delete your Steam account; Steam account requests must be directed to Valve.
9. Security and international transfers
We use technical and organisational measures intended to protect information, including encrypted HTTPS transport, HTTP-only authentication cookies, short-lived limited-scope game tokens, server-side Steam ticket verification, access controls, input validation, and rate limiting. No system is completely secure, and we cannot guarantee that loss, misuse, or unauthorised access will never occur.
We and our providers may process information in countries other than the one where you live. Where required, we use recognised transfer mechanisms and contractual safeguards. Contact us for information about safeguards relevant to your information.
10. Children
The Services are not directed to children under 13, and you must be at least 13 to use Steam. A higher minimum age or parental permission may be required where you live. If we learn that we collected personal information from a child contrary to applicable law, we will take appropriate steps to delete it.
11. Changes and contact
We may update this policy as the Services change. We will post the new version and effective date and provide additional notice where required. Share World may require you to review the current Privacy Policy and Terms again before a later publish.
Questions, privacy requests, and concerns: [email protected].