Privacy Policy

Norium operates the website at norium.co and related Discord community services. For privacy questions, contact abuse@norium.co.

We collect only the data needed to run the service:

• Account data: email address, password hash, and profile information you provide during sign-up.
• Discord data: when you link Discord, we receive your Discord ID, username, avatar, and server membership status so we can assign roles and channels.
• Order data: products purchased, license keys delivered, payment status, wallet balance, and order history.
• Payment data: we do not store card numbers or wallet addresses. Payments are handled by NOWPayments; we receive only transaction status, amount, and order reference.
• Technical data: IP address, browser type, and device information through standard server logs and essential cookies used for authentication and security.

• To create and secure your account.
• To process orders, deliver keys, and manage wallet balances.
• To link your Discord identity and provision access to private channels.
• To send transactional emails such as order confirmations, key delivery, and password resets.
• To enforce our Terms of Service, Anti-Leak policy, and Acceptable Use policy.
• To detect fraud, abuse, and unauthorized access.

Processing is based on the performance of our contract with you (account and order fulfillment), our legitimate interest in keeping the service secure, and your consent where required (for example, when you accept policies at sign-up or checkout).

We do not sell personal data. We share limited data with subprocessors necessary to operate the service:

• Lovable Cloud / Supabase: database, authentication, and backend hosting.
• NOWPayments: payment processing for crypto and card transactions.
• Discord: role assignment, channel access, and community notifications when you link your account.

Each subprocessor is contractually bound to use data only for the purpose of providing their service to Norium.

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Any analytics we run is limited to aggregated, non-identifiable usage patterns.

We keep account and order data for as long as your account is active and for a reasonable period afterward to meet legal, tax, and fraud-prevention obligations. You can request deletion of your account by opening a ticket in Discord.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact abuse@norium.co or open a ticket in Discord. We will respond within a reasonable timeframe.

We use industry-standard measures to protect your data, including encrypted connections, hashed passwords, row-level security on database access, and role-based access controls for staff. No system is perfectly secure, and we encourage you to use a strong, unique password and enable Discord-linked account protections.

Norium is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us and we will delete it.

We may update this policy as our practices evolve. The latest version will always be posted at norium.co/privacy with the updated date at the top.

For privacy questions, data requests, or security disclosures, email abuse@norium.co or reach out through our Discord ticket system.