Last updated: August 24, 2026
Nexus8 (nexus8.8bitsecurity.com) is an independent project run by an individual under the name 8Bit Security — not a registered company. For any question about this policy or your data, contact us at [email protected].
Account data. Email address and a hashed password when you register. If you enable two-factor authentication, your TOTP secret is stored encrypted at rest.
Billing data. If you subscribe to Premium, payment is processed entirely by Stripe, acting as merchant of record — we never see or store your card number. We only keep the Stripe customer/subscription identifiers needed to know your subscription is active.
Product configuration. Watchlist rules you create, API keys you generate (stored hashed, never in plain text), and preferences such as whether the weekly digest is enabled.
Technical data. Your IP address is processed transiently to enforce rate limits and prevent abuse — it is not stored long-term or linked to your account beyond that purpose. If an unexpected error occurs, minimal technical details may be captured by our error monitoring tool to help us fix it.
Communications. If you email us for support, we keep that correspondence to resolve your request.
We don't use advertising trackers, cross-site cookies, or sell your data to third parties. Our analytics (Plausible, self-hosted) is cookie-free and only ever reports aggregate, anonymized traffic patterns — it cannot identify you individually.
We process your data to: provide the service you signed up for (account access, watchlist alerts, the weekly digest, API access); process payments and prevent fraud; secure the service against abuse (rate limiting); and respond to support requests. Where processing is based on your consent (e.g. the weekly digest), you can withdraw it at any time from your account settings.
We use a small number of processors, each limited to what they need to do their job:
If you configure a Discord/Slack/webhook alert channel in your watchlist, the alert content is sent to the URL you provided — that's a destination you chose, not a third party we share data with independently.
We use a single essential cookie to keep you signed in — see our Cookie Policy for details. We don't use any advertising or tracking cookies.
We keep account data for as long as your account is active. If you stop using Nexus8, your data remains associated with your (inactive) account until you request deletion. Billing records are kept as required by applicable tax and accounting law.
If you're in the EU/EEA (or a jurisdiction with similar protections), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. We don't yet have a self-service deletion button in the product — to exercise any of these rights, email [email protected] and we'll act on it promptly.
Some of our processors (notably Stripe) may process data outside your country, including the United States, under appropriate safeguards required by applicable law.
Nexus8 is intended for professional and adult use. It is not directed at, and we do not knowingly collect data from, children under 16.
We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above; if a change is significant, we'll do our best to let active users know directly.
See also our Terms of Service.