PRIVACY
Dark Nova Info minimizes unnecessary tracking. The site now uses a first-party email signup and privacy-light aggregate traffic counts. It does not use advertising trackers, cross-site behavioral profiles or cookies for analytics.
Last updated: October 10, 2026.
Email updates
If you join the Dark Nova Signal, we store the email address you enter, the page where you subscribed, your subscription status, and timestamps. The address is used only for Dark Nova Info updates and audience administration. The signup form uses Cloudflare Turnstile to limit automated abuse. A short-lived daily keyed hash derived from your IP address may be used for rate limiting; the application does not store your raw IP address in its database.
Email delivery is handled by Resend. When Dark Nova sends an email, Resend processes the recipient address and delivery-related metadata needed to deliver and troubleshoot that message. Every Dark Nova Signal email includes an unsubscribe link. Unsubscribing changes the address status in the Dark Nova database so future Signal mail is suppressed unless that address joins again.
First-party aggregate analytics
The site records daily counts by page and broad traffic source such as “direct,” a referring hostname, or a campaign source. These records contain a date, page path, source label and view count. They do not contain cookies, a visitor ID, an email address or a raw IP address. Browsers sending a Do Not Track signal are skipped by the pageview script. Aggregate traffic rows are scheduled for deletion after approximately two years.
Comments and reports
Comments collect a display name, comment text, discussion page, timestamps, and moderation status. No email address is requested. Approved comments and display names are public; pending and rejected comments are visible only through authenticated moderation.
Reports store the comment ID, selected reason, optional details, timestamp, and a daily changing keyed hash derived from your IP address. Short-lived rate-limit records use that hash too. The application does not store your raw IP address in its comment database. Cloudflare receives network information when serving the website and validating Turnstile security checks. Cloudflare may process its own security logs under its policies.
Opening a comment or report form loads Cloudflare Turnstile. On submission, the server validates the security token with Cloudflare. Read Cloudflare’s privacy policy.
Pending and rejected comments are removed after 30 days without a moderation change. Reports are removed after 90 days. Rate-limit records expire within two hours and are removed by daily maintenance. Approved comments remain until moderation changes their status. These periods depend on the scheduled maintenance job running.
Use Contact to request review or removal, identifying the discussion and comment. Do not include sensitive personal information in comments or reports. Moderation may reject spam, harassment, personal information, or off-topic content.
Purchases and payment processing
When you buy a Dark Nova digital product, checkout and digital delivery may be provided by Payhip, with payment processing provided by Stripe or another payment method you choose at checkout. Dark Nova Info does not receive or store your full payment-card number. Those providers process purchase information under their own privacy terms and may provide us with order details needed to fulfill or support the purchase.
For internal sales reporting, Payhip may send Dark Nova Info a signed transaction webhook after a successful purchase or refund. The Dark Nova sales database stores the Payhip transaction ID, currency, order amount, refund amount, reported processing fees, payment-method category, product name/key, quantity, transaction status and timestamps. Dark Nova intentionally does not store the buyer email address, buyer IP address, or card details from this webhook.
Product measurement
First-party product events count actions such as opening a public case, searching the library, sharing, or completing an investigation. These are daily aggregate counts, not unique users. Event payloads contain only a fixed event name, never investigation text, case identifiers, email addresses, login links or ownership tokens. We honor Do Not Track and Global Privacy Control for first-party page and event measurement. Abuse controls use a daily rotating IP hash. Aggregate measurement is retained for up to two years.
Claim research and verification
When you explicitly run a scan, your submitted question or claim is sent to Tavily for source retrieval. Deep Scan also sends the claim and retrieved excerpts to Cloudflare AI for synthesis and claim-level verification. Do not submit passwords, payment details or information you are not authorized to share. A private saved case restricts access on Dark Nova; it does not mean research happens only on your device. Cases retain the captured evidence assessed by the service.
Investigation credit infrastructure
Investigation credits can be purchased through Stripe where checkout is enabled. The credit system associates server payment references, purchase status, credit activity and investigation IDs with your private account. Dark Nova does not store card details. Stripe processes credit payments separately from existing Payhip book purchases. Private payment and credit APIs are not cached for offline use. No email, raw investigation question, evidence contents or payment secret is included in monetization analytics.
Private investigation materials
The private workspace stores links, documents, photos and videos you explicitly submit in Cloudflare R2. Materials are account-scoped, have no public download or sharing link, and remain separate from verified evidence. Intake does not send their contents to an AI or research provider and does not start a paid investigation. Files are stored as supplied; this preview does not malware-scan, extract or analyze them.
Received materials expire after 30 days and unfinished transfers after one day. Scheduled cleanup may take longer during service interruptions. You can request permanent deletion in the workspace. Storage failures leave deletion queued for cleanup; a limited deletion record is retained for up to 30 days to prevent interrupted transfers restoring the object. Limits are 16 MiB per file, 20 materials and 64 MiB per account.
Optional public-page reading
After sign-in, selecting Read page sends the public HTTPS link to Tavily, our existing retrieval provider, to extract page text. No account cookie, email, private uploaded file or question is sent in that request. Use only public links you have permission to share; do not submit private access links or secrets. Tavily controls how it retrieves the page, including redirects. The editable excerpt is unverified and may be incomplete. Dark Nova does not persist this extracted text on the server or start an investigation; the browser tab holds your review and a ten-minute draft. Link-reading request fences and counters retain hashed account/IP identifiers and an opaque request ID for up to 24 hours, subject to scheduled cleanup. Page reading can incur provider usage but does not debit a Deep Scan credit. An explicitly started investigation separately sends the submitted draft to research providers. Pages requiring sign-in or otherwise inaccessible may fail.
Optional short-clip reviews
After sign-in, local preparation supports selected MP4 or WebM clips up to 60 seconds and 8 MiB. A separate permission-and-sharing consent and Send action sends the whole original clip, including its visible content, voices and metadata inside the file, and a locally extracted soundtrack where present, to Cloudflare Workers AI. Whisper transcribes the soundtrack; Clef-omni assesses a question about the clip using sampled video at 2 frames per second. Recognition and assessments can miss or invent details and do not establish identity, authenticity or verified evidence. Some containers or codecs cannot be prepared.
This action does not start research, debit a Deep Scan credit or save the clip in private materials. It can incur provider usage. Dark Nova does not persist the submitted clip, transcript, question or review result through this route. The browser tab holds the editable result and any ten-minute research draft. Request fences and counters retain hashed account/IP identifiers and an opaque request ID for up to 24 hours, subject to scheduled cleanup; unconfirmed or canceled requests are not automatically repeated. Cloudflare processes the submitted media under its own service and privacy terms. Save privately separately sends the original to private storage. Explicit Load and Run separately send only the reviewed draft words to research providers. Submit only media you have permission to share, and review faces, voices and metadata before sending.
Optional photo descriptions
The owner photo pilot sends a reduced, metadata-stripped JPEG to Cloudflare Workers AI only after a separate photo-sharing consent and Send action. The prepared preview lets you inspect visible content before sending. Removing EXIF and comments does not remove details visible in the picture. Built with Llama, using Llama 3.2 Vision. Its output is an editable, unverified description; it does not establish identity, authenticity or verified evidence.
This step does not save the photo in private materials or start research. Dark Nova retains the description, account association, request ID, image hash, dimensions, submission and expiry times, provider latency and outcome privately for up to 24 hours for response recovery and a daily attempt limit. Scheduled cleanup may take longer during interruptions. The selected original stays on your device unless you separately save it privately. Cloudflare processes the prepared copy under its own service and privacy terms. A one-time owner agreement acknowledgment and activation outcome are retained for the lifetime of the pilot to prevent repeated activation calls. If the owner explicitly authorizes a separate single-use activation recovery, Dark Nova also retains its opaque request ID, account association, approval version, times, latency and safe numeric provider status/code for the lifetime of the pilot. The original attempt remains recorded; raw provider messages and agreement response text are not retained.
Share only material you have permission to submit. Contact darknovainfo@gmail.com for privacy or deletion assistance.