Privacy Policy
Last updated 9 November 2026
Who we are
Nebula Games is a free browser games site at nebulagames.dev. It is owned and run by Cognitara Ltd, company number 15832507, registered office 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.
Cognitara Ltd is the data controller for this site. That means we decide how your data is used and we are responsible for it.
This policy follows UK law, including the UK GDPR, the Data Protection Act 2018 and PECR. For any privacy question, email hello@nebulagames.dev.
What we collect
We collect very little. When you press Play, we record a play session against your play ID so we can count plays and hours played.
We also record rounds that a game reports while you play. Round results sent by games are never shown publicly.
When ads are shown, we keep simple ad records so we can pace how many you see.
The table below lists what we hold and why.
| What | Why | Legal basis | Where |
|---|---|---|---|
| Play ID | A random ID so we can count your plays and hours played when you agree. | Consent | Your browser on nebulagames.dev and our play records database. |
| Play sessions | To know that a game was played and how long the visit lasted. | Legitimate interests | Our play records database. |
| Rounds | To record rounds within a game. Results games send us are claims and are never shown publicly. | Legitimate interests | Our play records database. |
| Daily code and ad records | With consent, a daily code helps show fewer ads as you see more in a day. We also record when ads are granted. | Consent | Your browser on nebulagames.dev and our play records database. |
| Saves and personal stats | To keep game progress on your device and show your own play counts and time in the site. | Providing the game you asked for | Your browser on nebulagames.dev. |
| Site analytics | To see how fast pages load and how the site is used, without identifying you. | Legitimate interests | Vercel analytics services. |
| Google Tag Manager and Google tags | After you consent, to run analytics tags on site pages only. Games never load this. | Consent | nebulagames.dev pages in your browser. |
| Emails you send us | To reply to your message or report. | Providing the game you asked for | Our email. |
What we do not collect
There are no accounts on Nebula Games. We never ask for your name, email address or payment details.
We collect no health data or other special category data. We collect no precise location and no contacts.
We do not store IP addresses in our database. Our hosting provider handles each request and may keep short-lived logs for security.
Your play ID and your choices
Your play ID is a random code. It says nothing about who you are, and it lets us count plays and hours played.
If you agree, we keep your play ID in your browser so your plays add up over time. If you do not agree, we make a fresh random ID for each play and do not save it in your browser.
You can open Privacy settings from the footer at any time. There you can change your consent, drop your play ID, or choose a new play ID every time you play.
Saves on your device
Game saves are stored in your browser on nebulagames.dev. They are compressed and encrypted so they only work in our games.
We hold no copy of your saves and cannot restore one that is lost. Saves can be lost if you clear your browser data or switch browser or device. They can also be lost when we update, change or remove a game.
To keep a backup, use the game menu to export a save file to your computer. You can import it again later.
If a save comes from a version a game no longer supports, we keep it but do not load it. You can still export it.
Advertising and the roll-off model
When ads are shown, they are served by Google AdSense inside the game frame. Google and its partners may use cookies.
With your consent, we keep a daily code in your browser. It is random and changes every day.
We count how many ads that code has seen in each game that day. As the number grows, we show you fewer ads. We call this the roll-off model.
Without consent we cannot apply the roll-off model, and no daily code is stored. Ads then follow each game's fixed limits, in a limited form where Google's rules allow.
We never sell data.
Google Tag Manager and Google tools
Google Tag Manager loads on nebulagames.dev pages only after you consent. It may run Google Analytics and other Google tags set up in it.
Google Tag Manager never runs inside games. Games contain no tracking of their own.
If you change your mind, open Privacy settings from the footer and withdraw your consent.
Tools we use
Vercel hosts the site. Vercel Web Analytics and Speed Insights are cookie-free and do not identify you, and Vercel BotID helps block bots when a play starts.
Supabase stores play records. Google provides Tag Manager, the tags it runs and, when ads are shown, AdSense.
Nothing you do in a game is sent to an AI service. We do not use play data to train AI models.
The table below lists each provider and what it does for us.
| Tool | What it does | Data | Where | Needs consent | Links |
|---|---|---|---|---|---|
| Vercel | Hosts the site and runs Web Analytics, Speed Insights, and BotID. | Page views, performance metrics, and signals used to block bots when play starts. | May be processed outside the UK with approved safeguards | No | |
| Supabase | Stores play records. | Play ID, session timing, rounds, and ad grant records. | May be processed outside the UK with approved safeguards | No | |
| Google Tag Manager and Google Analytics | Loads on nebulagames.dev only after consent. May run analytics and other tags you configure. | Site usage and measurement when tags are enabled. | May be processed outside the UK with approved safeguards | Yes | |
| Google AdSense | Serves ads inside the game frame when ads are enabled. | Ad delivery and partners may use cookies when you consent. | May be processed outside the UK with approved safeguards | Yes |
How long we keep data
Play sessions, rounds and ad records are kept for up to 180 days. After that they are deleted.
Data in your browser stays until you clear it. That includes your play ID, the daily code and your saves.
The table below sets out how long each kind of data is kept.
| Data | How long | Why |
|---|---|---|
| Play sessions, rounds, and ad records | Up to 180 days | We delete these after that period. |
| Browser storage on nebulagames.dev and play.nebulagames.dev | Until you clear them | You control browser data on your device. |
| Emails you send us | As long as needed to deal with your message | We keep correspondence only while it is needed. |
Transfers outside the UK
Some of our providers may handle data outside the UK. Where they do, the transfer relies on approved safeguards.
Email hello@nebulagames.dev if you would like to know more.
Security
Games run in a sandbox on a separate address, play.nebulagames.dev, and make no network calls. This keeps them apart from the rest of the site.
We hold no names, email addresses or payment details, and we do not store IP addresses in our database. The less we hold, the less there is to lose.
Your rights
Under the UK GDPR you can ask to see the data we hold about you, correct it or have it deleted. You can also ask us to restrict or stop using it, or to give you a copy to take elsewhere.
Where we rely on your consent, you can withdraw it at any time in Privacy settings.
To make a request, email hello@nebulagames.dev. Include your play ID, which you can find in Privacy settings, because we cannot find your records without it.
We reply within one month.
Children
Nebula Games is for people aged 13 and over. It is not directed at children under 13.
If you are a parent with a question, email hello@nebulagames.dev.
Changes to this policy
We may update this policy when the site or the law changes. Each legal page shows the date it was last updated, so you can see when something changed.
Complaints
If you are unhappy with how we handle your data, please email us first so we can look into it.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection. You can reach them at ico.org.uk.