Nyxoria is committed to protecting the privacy and security of your personal information. This policy explains what we collect when you use nyxoria.net, why we collect it, who processes it, and the choices you have. By using the website you consent to the practices described here. The short version: we collect what the ticketing experience needs, and we run no advertising or third-party tracking.
Last updated · 20 July 2026
1. Information we collect
- Account details: name, email address, password (stored as a secure hash by our authentication provider), date of birth, phone number and address, provided voluntarily when you register.
- Order and ticket data: the events, ticket types and quantities you buy, order status and totals, and each ticket's QR code and check-in record.
- Payment information: card payments are handled entirely by our payment partner PayHere, a trusted third-party processor. Your card number never touches our servers and we cannot see or store it. We keep only the order amount, status and a payment reference.
- Technical basics: standard server logs (such as IP address and browser type) kept by our hosting provider for security and reliability, and the essential cookies described below. We do not run analytics, advertising or fingerprinting scripts.
2. How we use it
- To operate your account, process and fulfil your orders, deliver tickets and verify them at the door.
- To communicate with you about your purchases, order confirmations, tickets, refunds and account messages, and to respond to support requests. We do not send marketing email without a separate opt-in.
- To detect and prevent fraud, unauthorised activity and abuse of the ticketing system (for example, matching a scanned ticket to its holder).
- To improve the website and our events based on how they are used.
- To meet legal obligations such as accounting records.
3. Information sharing
We do not sell, trade or rent your personal information. It is shared only:
- With trusted service providers who operate parts of the platform on our behalf (listed below), each bound by their own security and privacy commitments.
- When the law requires it: in response to valid legal requests or orders.
4. Who processes it
- Supabase: our database and authentication platform, which stores account, order and ticket data.
- PayHere: processes card payments securely; we receive only the payment outcome, never card details.
- Resend: delivers our transactional email.
- Vercel: hosts the website and keeps standard server logs.
5. Cookies
Nyxoria uses essential cookies only: secure authentication cookies that keep you signed in, and a session-activity marker that signs you out after six hours of inactivity. Your browser's local storage remembers small preferences (such as having seen our intro animation or dismissed the cookie notice). None of these track you across other sites, and there are no advertising cookies to opt out of. You can disable cookies in your browser, but signing in and buying tickets will not work without the essential ones.
6. Device permissions (camera and microphone)
Two optional features ask your browser for a device permission. Both are entirely opt-in, both only ever prompt after you choose them, and neither records, stores or transmits anything.
- Microphone, sound-reactive visuals.On desktop you can turn on “Vibe to sound”, which lets the animated visuals on our homepage react to music playing in your room. The audio is analysed live on your own device to measure loudness only. It is never recorded, never saved, and never sent to us or to anyone else. Switch it off at any time with the same control, and your browser releases the microphone immediately.
- Camera, ticket scanning. Our door staff use the camera to read ticket QR codes at an event. Only the scanned ticket code is used; no images are stored.
7. How long we keep it
Account data is kept while your account is active. Order and ticket records are retained as long as needed for accounting and legal purposes, then removed or anonymised.
8. Your choices and rights
- You can view and update your name, phone number, address and date of birth in Account → Settings.
- You can change your password at any time via the reset flow.
- You can request a copy of your data, or deletion of your account and data (subject to records we must keep by law), by emailing [email protected].
9. Security
Data is transmitted over HTTPS, passwords are hashed by our authentication provider, database access is protected by row-level security, payment card data never reaches our systems, and ticket QR codes are long random tokens that cannot be guessed. No method of transmission or storage is 100% secure and we cannot guarantee absolute security, report any concern to [email protected].
10. Changes and contact
We may update this policy at any time; the date above shows the current version, and we encourage you to review it periodically. Privacy questions: [email protected]. General support: [email protected].
See also our Terms & Conditions and Refund Policy.