Privacy Policy
Last updated: November 3, 2026
NNA (the No Nut Association) operates NNA Warfield and is the data controller for the personal data described here.
Data we collect and why
- Account data (email, login credentials, Google sign-in identity) — to create and secure your account. Basis: contract.
- Profile data (callsign, @username, country, reasons and goals) — to run the challenge and leaderboards. Basis: contract.
- Check-in answers (daily debriefs, streaks, XP) — to provide the Service. Basis: contract.
- Messages and SOS posts — to deliver chat and support between soldiers, and to moderate content. Basis: contract and legitimate interests.
- Usage and device data (IP address, browser, logs) — for security, fraud prevention and improving the Service. Basis: legitimate interests.
Who we share data with
- Service providers that host and run the app (hosting, database, authentication).
- Paddle.com, our Merchant of Record, for selling Premium+, managing subscriptions, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
Your callsign, username, country, streak and rank are visible to other signed-in soldiers. We never sell your data.
International transfers
Some providers may process data outside the UK/EEA. Where that happens we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.
Retention
We keep your data while your account is active. When it's no longer needed, or you delete your account, we delete or anonymise it, except where the law requires us to keep it.
Your rights
Under GDPR you can access, correct, erase, restrict or export your data, object to processing, and withdraw consent. You can also complain to your local data protection authority. We respond to requests within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit and strict access controls.
Cookies
We use only essential browser storage to keep you signed in and remember preferences. We do not use advertising cookies.