Privacy Policy
1. Introduction
This policy explains how NeuroShrub ("we", "us", "our") handles personal information when you use the NeuroShrub website and game.
2. Information we collect
We collect information you give us, information created when you play, and limited technical information. The sections below list each category. We only collect the categories described here.
3. Account information
- Email address (also your sign-in name) and a securely hashed password — we never store your password in readable form.
- An internal account and player ID, your sign-up date and your most recent sign-in time.
- Account security data such as failed sign-in counters and temporary lockouts.
- Account status, such as a suspension or a withdrawal restriction, with the reason.
- Your acceptance of the crypto risk acknowledgement shown before crypto deposits: the version you accepted and when.
- Your acknowledgement of the prepaid Deposit Balance terms before each payment: the version you accepted, when, and the language of the page.
- Your agreement to the Terms of Service and acknowledgement of this Privacy Policy and the Risk Disclosure, at registration and whenever a new version is published: the version of each document, when you accepted it, and the language of the page.
4. Game activity
Your company name, level, reputation, servers, buildings, research, contracts, game transactions, settings such as automation preferences and your preferred language, and leaderboard statistics. Your company name and public statistics are visible to other players on leaderboards and, for players you invited, in their referral network view.
5. Transaction information
If you use the optional real-money features: deposit and Game Credit history, Reward Points, reward allocations, vesting and cashable balances, withdrawal requests and their status, fees, and the related ledger entries.
6. Crypto wallet information
- The deposit addresses and destination tags assigned to you, blockchain transaction hashes, networks and amounts.
- Withdrawal destination addresses you enter.
Blockchain transactions are public by nature: anyone can see them on the blockchain. We never ask for, and you should never share, a seed phrase or private key.
7. Technical information
Our servers process your IP address and basic request information to deliver the website and to limit abuse (for example rate limits on sign-in and the contact form). We do not store your IP address. When you register or sign in we store keyed one-way hashes of your network (an IPv4 address without its last part, or the first three groups of an IPv6 address) and of a random device identifier kept in an essential cookie (see the Cookie Policy). Our hosting provider may keep standard server logs.
8. Referral information
Your referral code, the player who invited you (if any), the players you invited, referral commissions, and automated risk signals about referral activity (for example suspected self-referral or multiple accounts).
9. Contact and support messages
When you use the contact form or email us: your name, email address, the category, subject and message, and our handling status. Staff may add internal notes to an account when handling support or risk reviews.
We keep a record of the service emails we send you, such as payment notices and security alerts: their type, language, time and delivery status.
11. How we use information
- To create and run your account and the game.
- To process deposits, Game Credits, rewards, referral commissions and withdrawals, and keep accurate financial records.
- To answer support requests and send service messages, in the language you chose.
- To prevent fraud and abuse, and to keep the platform secure.
- To meet legal and regulatory obligations.
- To improve and balance the game using aggregated statistics.
10. Security and fraud information
We use account, transaction, referral and withdrawal information to detect abuse, such as multiple accounts sharing a withdrawal address or circular referrals. Automated signals are reviewed by people; they do not by themselves remove funds.
Fraud prevention and reward integrity. To detect multiple accounts and protect the Reward Pool, we compare across accounts: the hashed network and device identifiers described above, payout destinations (as keyed fingerprints), referral relationships, patterns of game activity and, once identity verification is available, a keyed hash of the identifier the verification provider assigns to a person (never your documents or document data). A shared network on its own never restricts an account. Matches can hold reward vesting or withdrawals until a person reviews the account.
Withdrawals may require identity verification or other checks. Where this applies, verification may be carried out by a specialised provider, and we will tell you what is needed at that time. We may share information with authorities when legally required.
12. Service providers
We share information only as needed with providers that help us run NeuroShrub, such as hosting, crypto payment infrastructure, email delivery, and identity verification providers where used. Fonts, icons, scripts and stylesheets on the website are served from our own servers, not from public content-delivery networks. We do not sell personal information.
NeuroShrub may use third-party payment processors, including hosted payment services, to process deposits. When you pay on a payment provider's own page, that provider processes the payment and the information you enter there, subject to its own terms and privacy practices.
13. Analytics
NeuroShrub does not currently use third-party analytics or advertising tools. We look at aggregated game statistics (for example the total number of companies) to run and balance the game. If this changes, we will update this policy and, where required, ask for your consent first.
15. Data security
We use measures such as hashed passwords, encrypted connections, access controls for staff tools and an audit log of administrative actions. No online service can be guaranteed to be completely secure, so please also protect your own account, email and devices. See the Risk Disclosure.
16. Data retention
We keep account and game information while your account exists. Financial and ledger records, audit records and risk records may need to be kept for longer to meet accounting, legal and fraud-prevention obligations, and are kept only as long as those purposes require.
Hashed network and device identifiers are deleted 180 days after they were last seen. Risk assessments and administrator decisions about an account are kept while the account exists and afterwards only as long as fraud-prevention, accounting or legal obligations require.
17. International processing
Your information may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for such transfers.
18. Your rights
Depending on where you live, applicable privacy law may give you rights such as access, correction, deletion, restriction, objection or data portability, and the right to complain to a data-protection authority. Some information may need to be kept even after a deletion request, for example financial records we are legally required to keep. To make a request, contact privacy@neuroshrub.com.
19. Children's privacy
NeuroShrub is not intended for anyone under 18. If you believe a child has created an account, contact us and we will take appropriate steps.
20. Changes to this policy
We may update this policy. The effective date and version at the top show the current version. We will give notice of significant changes.
21. Contact
Privacy requests and questions: privacy@neuroshrub.com