NMX Account | Privacy Policy
© New Media XP
|
website
|
email
|
Reference
The privacy policy that you are reading can be accessed at https://docs.newmediaxp.com/legal/privacy-nmx-account
The terms of service for the NMX Account are at https://docs.newmediaxp.com/legal/terms-nmx-account
Last updated: 7 November 2026
About
The NMX Account is the account that apps and websites by New Media XP (“NMX”, “we”, “us”) share. It keeps your purchases, in-app balances and progress, and lets you use them on every device where you sign in.
This policy covers the NMX Account: the sign-in pages and the account page at https://id.newmediaxp.com, and the data that NMX apps keep in your account. Each app also has its own privacy policy, which covers what happens inside that app, including any third-party services it uses, such as ads. You can find them all at https://docs.newmediaxp.com.
NMX is an independent developer, not a registered company. NMX decides how the data described here is used, and you can reach us at the contact details at the end of this page.
Guest Accounts And Full Accounts
- Guest account: when an app first needs an account, for example to record a purchase, it creates one for you without asking you to sign in. A guest account has no sign-in method and nothing that names you. It lives on one device.
- Full account: signing in is optional. When you sign in with Apple, Google, Facebook or Discord, your account becomes a full account, which you can use on any device. The sign-in methods on offer can differ between apps and platforms.
Your account
- An account ID: a random code we create. Its first part records when the account was made.
- The account’s status (active, banned, merged or deleted), and the reason for a ban.
Your sign-in methods (full accounts only)
- Which provider you signed in with, and the user ID that provider gives us for you. We use that ID to recognize you.
- A label that helps you and us tell your sign-in methods apart:
- Google: your email address.
- Apple: your email address, or the private relay address Apple makes if you choose to hide your email.
- Facebook: your name.
- Discord: your display name.
- When you added the sign-in method.
- Apple only: a token from Apple, stored encrypted. We use it only to tell Apple to disconnect NMX from your Apple account when you delete your NMX Account.
We never get your passwords. We don’t ask Facebook or Discord for your email address.
The devices you’re signed in on
- For each app install that’s signed in: a random ID the app creates when it’s installed (not your device’s hardware ID or advertising ID), the platform (such as Android, iOS or the web), which app it is, and when it signed in and was last used.
- A one-way scrambled copy (a hash) of the secret that keeps that install signed in.
Your purchases
- For each purchase from the Apple App Store, Google Play or our webshop: the store, the store’s ID for the purchase, the app and the item, its date, when a subscription ends and whether it renews, whether it was refunded or cancelled, and its price and currency.
- Items given to you by NMX support.
We never see your card or other payment details. The store takes the payment.
Your in-app balances
- Your balance of each app’s in-app currencies, such as coins or hints, and the last 20 changes to each app’s balances.
Your app data (full accounts only)
- What an app saves to your account so you can carry on from another device, for example your saved puzzles and settings in Shaolin Sudoku. Each app’s privacy policy says what it saves.
Your Unity players
- Some apps use Unity’s online services, for example for purchases from our webshop. For those apps, we create a Unity player for your account, which Unity knows only by your NMX Account ID, and we keep that player’s Unity ID.
Your account history
- A record of events that would otherwise leave no trace: merging two accounts, removing a sign-in method, deleting an account, and actions by NMX support, such as giving you an item or banning an account.
Technical information
- Your IP address, used at the moment of each request to limit how many requests one address can make. We don’t save it in your account.
- Cloudflare, which hosts the NMX Account, keeps logs of requests for a few days. They include the IP address, the address requested, and browser or app details. We use them to fix problems and stop abuse.
Cookies and browser storage
- Our sign-in pages set a cookie that holds the state of one sign-in, for up to 10 minutes.
- When you sign in to an NMX website that uses single sign-on, a cookie on
id.newmediaxp.com keeps you signed in to NMX for up to 180 days after you last use it, so other NMX websites can sign you in without asking again.
- The account page keeps its sign-in in your browser tab until you close the tab.
- Cloudflare may set its own cookies to protect the site from bots and attacks.
All of these are needed for sign-in and security. We don’t use cookies for advertising or analytics.
How We Use It
- To create your account, sign you in and keep you signed in.
- To give you your purchases, balances and progress on every device where you sign in, and to restore your purchases.
- To combine two of your accounts when you choose to merge them. If you restore a purchase that belongs to a guest account, that guest account is combined into the account you’re using.
- To keep the service secure and to prevent fraud and abuse, such as too many requests, or refunds of items that were already used.
- To answer your questions and fix problems.
- To keep the purchase records that refunds, accounting and tax rules need.
We don’t sell your information, use it for advertising, or use it to track you across other companies’ apps and websites.
Legal bases (for users in the European Economic Area, the United Kingdom and places with similar laws):
- Contract: running your account and giving you what you bought.
- Legitimate interests: security, preventing fraud and abuse, fixing problems, and answering refund requests.
- Legal obligation: keeping purchase records where the law requires it.
Who We Share It With
- Cloudflare hosts the NMX Account and its database and protects it from attacks.
- The sign-in provider you choose (Apple, Google, Meta for Facebook, or Discord). You sign in on their page, so they know that you signed in to NMX.
- The Apple App Store and Google Play. We ask the store to confirm each purchase. Before a purchase, the app gives the store a code made from your account ID, and the store gives it back with the purchase, which helps us spot fraud.
- Apple, when you ask Apple for a refund. If you ask Apple to refund an in-app purchase from an NMX app, Apple may ask us about it. We tell Apple whether the item was delivered and, for items such as coins, how much of it you used. By buying in-app items in an NMX app from the App Store, you agree that we can share this with Apple.
- Unity, for apps that use Unity’s online services. Unity knows your player by your NMX Account ID. When you buy from our webshop, Unity tells us about the order so we can deliver it.
We don’t share your information with anyone else, unless the law requires it, or it’s needed to protect our users or NMX from fraud or abuse. If NMX or its apps ever pass to a new owner, the NMX Account would move with them, and this policy would still apply to your information.
Privacy policies of these companies:
Where It’s Stored
The NMX Account runs on Cloudflare’s network, and the companies above are mostly based in the United States. Your information may be processed outside your country. When it leaves the European Economic Area or the United Kingdom, these companies protect it with the safeguards the law requires, such as the European Commission’s standard contractual clauses.
How Long We Keep It
- Your account: until you delete it.
- Guest accounts: a guest account that hasn’t been used for 180 days and has no purchases is deleted automatically, along with its Unity players.
- Signed-in devices: an install stays signed in until you sign out, or until 180 days after it was last used. We delete its record 30 days after that.
- Cloudflare’s request logs: a few days.
- Backups: copies of the database are kept for up to 30 days.
Deleting Your Account
You can delete your account in any NMX app that uses it, or on your account page at https://id.newmediaxp.com/account. You can also ask us by email.
When you delete your account:
- We delete your sign-in methods, the devices you’re signed in on, your app data and your balances straight away, and tell Apple to disconnect NMX from your Apple account.
- We ask Unity to delete your Unity players. That usually takes minutes, and we keep retrying until it’s done.
- We keep your purchase records, which no longer link to you, because we need them to handle refunds and for accounting and tax. We also keep your account ID marked as deleted, with its history, which no longer leads to you.
- Copies in our backups are gone within 30 days.
Deleting your account doesn’t cancel a subscription. Cancel it in the App Store or Google Play, or the store will keep charging you.
Removing one sign-in method: you can remove a sign-in method on your account page, as long as you keep at least one. If you stop using Sign in with Apple for NMX in your Apple account settings, or remove NMX from the apps in your Facebook settings, we remove that sign-in method from your NMX Account. When you stop using Sign in with Apple, we also sign your account out on all your devices.
Your Rights
Depending on where you live, you can ask us to:
- tell you what information we have about you, and give you a copy;
- correct it;
- delete it;
- limit or stop some uses of it;
- give it to you in a form you can move to another service.
Your account page shows your sign-in methods and what you own, and lets you add or remove sign-in methods and delete your account. For anything else, email us. We’ll ask you to show the account is yours, for example by signing in, and we’ll answer within one month.
You can also complain to the data protection authority where you live.
Children
NMX apps are for everyone. Signing in with a provider is for people old enough to agree to this policy themselves: at least 13, or older where the law in their country requires it (up to 16 in some EU countries). Younger children should use NMX apps without signing in. If you think a child has signed in without a parent’s permission, contact us and we’ll delete the account.
Security
All connections to the NMX Account use HTTPS. The secrets that keep you signed in are stored only in scrambled form, and Apple’s token is encrypted. Only NMX can see account data, through a protected admin site. No system is perfectly secure, so if a breach affects your information, we’ll tell you as the law requires.
Changes
This privacy policy may be updated from time to time. When it changes, the date at the top changes too. If a change is significant, we’ll also say so in our apps or on our website before it takes effect.