Privacy Policy

Nimia Games / Nimia Studio (“Nimia Studio,” “we,” “us,” or “our”) is an independent creative studio operating from Indonesia, building original games, animation, and digital assets. Nimia Studio is currently operated by its founder and is in the process of being registered as a limited liability company under the name PT Nimia Digital Production (or a successor legal name). Once registration is complete, that entity will become the data controller described in this policy without any change to how your information is handled.

This policy applies to nimiagames.com and studio.nimiagames.com (together, the “Sites”), and to the production services ordered through them (the “Services”).

We collect information in the following ways:

Account information. When you create an account to order a Service, we collect your email address and any name you provide, via our authentication provider (Supabase Auth).

Order information. When you submit an order, we collect the details you provide about the project (service type, brief, requirements, budget, timeline, reference files) and the messages exchanged during negotiation with our team.

Files you upload. Reference files, briefs, and other attachments you upload as part of an order are stored with our media provider (Cloudinary) and linked to your order.

Payment information. Nimia Studio accepts payment in cryptocurrency only. We collect the network, currency, transaction hash, and amount you report when submitting a payment, so our team can verify it on the relevant public blockchain. We do not collect, and never ask for, your private keys or wallet seed phrase.

Usage & device information. Like most websites, our hosting provider (Vercel) automatically logs standard technical information such as IP address, browser type, and pages visited, for security and reliability purposes.

We use the information above to:

Create and manage your account; process, negotiate, and fulfil your orders; verify cryptocurrency payments and flag discrepancies; send transactional emails about your order (order confirmation, negotiation updates, payment status); respond to support or contact requests; maintain the security and proper functioning of the Sites; and comply with applicable law.

We do not use your information for third-party advertising, and we do not sell your personal data.

We only share information with service providers that help us run Nimia Studio, and only to the extent needed for them to perform their function:

Supabase — database hosting, authentication, and file-access permissions (Row Level Security).

Cloudinary — storage for files you upload as part of an order.

Resend — delivery of transactional emails related to your order.

Vercel — hosting and infrastructure for the Sites.

CoinGecko — public, non-personal exchange-rate data used to calculate cryptocurrency pricing; no personal information is sent to this provider.

These providers may process data on servers located outside Indonesia (see Section 9). We do not otherwise share your personal information with third parties, except where required by law, to protect our rights, or with your explicit consent.

We use only the minimal cookies strictly necessary to keep you signed in and to operate the Sites (authentication session cookies set by Supabase Auth). We do not currently use advertising or third-party tracking cookies. If this changes, we will update this policy.

We keep account and order information for as long as your account is active and for a reasonable period afterward, to meet legal, accounting, and dispute-resolution obligations (including proof of payment and delivery for completed orders). Uploaded files tied to an order are retained alongside that order’s records. You may request deletion of your account and associated data as described in Section 8, subject to the retention needs above.

We apply access controls at the database level (Row Level Security) so that order and payment data is only readable by the client who owns it and by authorised Nimia Studio staff. Payment verification is performed manually by our team against public blockchain records. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to use commercially reasonable safeguards appropriate to the data we hold.

Depending on your location, you may have rights under applicable data protection law — including Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, “UU PDP”) — to:

request access to the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to our legitimate retention needs described in Section 6; object to or restrict certain processing; and request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details in Section 12. We will respond within a reasonable time.

Because we rely on providers such as Supabase, Cloudinary, Resend, and Vercel, your information may be processed on servers located outside Indonesia. Where this happens, we rely on those providers’ own security and compliance safeguards, and we only work with providers that are appropriate for the type of data described in this policy.

Our Services are intended for businesses and individuals capable of entering into a binding contract, and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time as our Services evolve. Material changes will be reflected by updating the “Last updated” date above, and, where appropriate, by additional notice such as an email to registered clients.

Questions about this Privacy Policy or how your data is handled can be sent to contact@nimiagames.com.