Legal
User data is processed only through Nebula's proprietary server and Nebula's Firebase project. Nebula never sells user data and never uses it for advertising, profiling, or purposes unrelated to providing, securing, maintaining, and supporting Nebula.
An account may contain your email address, display name, username, authentication provider, and Firebase UUID. Firebase processes email/password and Google sign-in.
Nebula's server does not receive or store your Google or email-account password.
Nebula stores an Android-scoped device ID, readable device name, authorization time, last-active time, and sessions. These records remain until the device is removed, it logs out, or the account is deleted.
Removing a device immediately deletes its sessions.
Information is used only for:
Accounts and sign-in · user-confirmed account linking · device authorization ·
authenticated NebulaCompat downloads · updates · the mod catalog and licenses ·
service security · failure diagnosis · support · requested deletion.
Ordinary mod downloads are not authentication-gated.
Operational error and service logs are retained for no more than seven days and are used only to diagnose failures and maintain the service.
Nebula submits a bug report only after you review the diagnostic description and press Submit. A report may contain your description, recent Nebula and BepInEx logs, app/Android/game/mod versions, device model, and your account UUID.
Credentials, tokens, email addresses, and activation keys are automatically redacted before submission. Bug reports are retained for up to 90 days or until your account is deleted.
Authentication tokens are encrypted with Android Keystore and excluded from backup. Logging out removes the cached NebulaCompat component but keeps local mods and game files.
Account records remain until you select Delete Account. Deleting your account immediately removes your Firebase identity, submitted bug reports, and all Nebula records tied to your UUID. Local mods and game files remain on the device.
| Data type | Retention period |
|---|---|
| Account records | Until Delete Account is used |
| Operational logs | 7 days maximum |
| Bug reports | 90 days, or until account deletion |
| Local mods & game files | Remain on device — not affected by account deletion |
Settings lets you review or remove authorized devices, revoke their sessions, log out, and permanently delete your account.
Android app settings can clear all Nebula data stored on the device.
Account deletion cannot be undone.
Nebula uses authenticated sessions, confirmed-account checks for protected downloads, Android Keystore token encryption, and private Android app storage.
Protect your device and remove any device you no longer control.