Legal

Legal Contact / Representative

Privacy / Data Processing

Nova AntiCheat uses an online license and authentication backend to validate licenses, prevent abuse, detect unauthorized redistribution and keep licensed installations secure.

License capacity is tracked using separate host-machine identities (HWIDs) and active server-instance identities. Several running Minecraft servers on one host may share one HWID while each live Nova server session uses its own active instance allowance. Offline instance records may remain visible as history without consuming active capacity.

During license authentication and normal service operation, the plugin may transmit the following data to the Nova backend:

• license and configured account details
• server, plugin, release and Java runtime information
• the latest metadata-only list of plugins registered with Bukkit at server startup, including names, versions, enabled state, main classes, declared authors and dependencies
• host environment information needed for licensing, including operating-system and hardware characteristics
• generated machine, server-instance and integrity identifiers
• network and session metadata, including IP address and port

The registered-plugin inventory is an authenticated support diagnostic. Nova sends metadata reported through Bukkit only; it does not upload plugin JARs, configuration files, filesystem paths or plugin contents. Each server instance keeps only its latest startup snapshot, replacing the previous snapshot instead of building an unlimited startup history.

The data is used only for license validation, device/session management, abuse prevention, security checks, support and service reliability.

Pro engine processing

Combat Engine and Crystal Engine process ordinary live fight scoring inside the server plugin. Access to required licensed resources is authenticated online, but live fight scoring is not sent to a cloud model.

Optional Cloud Sync

Cloud Sync is included with Standard, Pro and Enterprise, disabled by default, and only runs when an entitled server owner enables it. It may process player identifiers, detection and reputation data, and server/session context. When the server owner selects global scope, recent reputation derived from other participating licenses may be returned to participating licensed servers for short-lived enforcement decisions. Cloud Sync is separate from local engine scoring.

The server owner chooses whether to enable Cloud Sync and which scope to use, and is responsible for any player notice or lawful basis required for that server. Players should contact their server operator first about a specific in-game event.

Nova Guard / Client-Side Anti-Cheat

Nova Guard is the Windows client-side anti-cheat included with Nova Pro, which a server owner may enable as Optional or Required. For its control plane, the Nova backend processes the player name and UUID supplied authoritatively by the live server, an ephemeral launch public key and fingerprint, Guard version/protocol facts, pairing and assignment state, server endpoint/session identifiers, timestamps and ordinary network metadata such as IP address. Guard does not receive a Nova plugin license key or unrelated backend secrets.

Physical-input activity such as bounded mouse movement aggregates, held-control counts, transition totals, sequence numbers, timestamps and capture-health state is encrypted directly to the game server or its Nova Guard Velocity gateway. That continuous telemetry does not pass through or enter a telemetry table on the central Nova website backend. The server operator may process resulting Guard evidence, alerts and violation history in its own Nova installation under the operator’s rules and retention practices.

At launch, Guard sends one-way SHA-256 digests for up to four stable hardware components. Raw hardware serials are not sent or stored. The launch digests are temporary; for each participating Nova license the backend derives separate keyed tags that cannot be compared directly across customers. An authorized server administrator may create a permanent or timed Guard device ban from an active assignment. The opaque license-scoped tags remain only while that ban is active and are erased when it expires or is revoked. Redacted ban reason, player identity at the time of the action and audit metadata are normally retained for up to 30 days after expiry or revocation. Device bans are server-access policy and are enforced only when Guard is required; they are not cheating violations.

A Guard launch is ephemeral and has an absolute 24-hour maximum. Normal close invalidates it immediately; a short control-heartbeat timeout invalidates a disappeared launch sooner. Launch/pairing identity and temporary hardware digests are removed when the launch ends, encrypted assignment secrets are erased on close or expiry, and closed assignment metadata is normally removed within about 15 minutes. Hardware-derived tags copied into a Guard device ban are erased on ban expiry or revocation, while expired or revoked administrative history is normally removed after 30 days. Hashed replay/tombstone material may remain until the launch’s 24-hour security window ends so an ended identity cannot be resurrected.

Guard locally classifies only the foreground Minecraft context needed for capture quality, checks the foreground process ID against transient Windows TCP-owner metadata to authorize and pin the actual server endpoint, and tracks bounded control identities to deduplicate held-state counts. Typed text, exact key identities, PIDs, socket rows, connection history, window titles and process names are not transmitted or persisted. A server owner enabling Guard is responsible for player notice, a lawful basis or consent where required, local retention, access requests and compliance with applicable employment, monitoring, child-safety or communications law. Players should contact their server operator first about server-side Guard processing.

Optional NovaMLCollector

NovaMLCollector is a separate plugin and is not required for Nova AntiCheat or Pro engine processing. When a server owner installs, configures and enables the collector, it uploads compressed training records. These records may contain hashed player identifiers, combat and movement telemetry, network context, collector labels and server metadata. The collector backend also receives the source IP of the connection.

Website fonts and service providers

This website loads fonts from Google-hosted domains. A visitor’s browser therefore makes a request to Google and sends normal connection data such as the visitor’s IP address and browser user agent.

Hosting, infrastructure, email, Discord and other service providers may process the minimum data needed to deliver their service. Data may also be disclosed where required by law, to establish or defend legal claims, or to investigate fraud and security incidents.

License authentication traffic is protected using encrypted transport. However, the backend must process the submitted data to validate the license and operate the service.

Active license and device records are normally retained while the license is operated. Session, authentication, security and support records are retained only as long as reasonably needed for service operation, abuse investigation, dispute handling and legal obligations. Webhook details remain until the customer removes them or the related license data is deleted. Exact periods can vary where an incident, dispute or legal duty requires longer retention.

Under normal operation, Cloud Sync reputation events are removed after 24 hours; closed sessions and webhook delivery history after 14 days; dormant server-instance and inactive device history after 30 days; and backend audit history after 30 days. A server instance’s latest registered-plugin snapshot replaces its previous snapshot and is removed with the related dormant instance record. Finite record limits may remove older history sooner. NovaMLCollector training records are kept separately within a 50 GiB storage limit until an administrator deletes them; collection stops when that limit is reached instead of growing without a bound. A collector server’s last connection address is cleared after 7 days without contact. A legal obligation, active dispute or security incident may require specific records to be held longer.

Purposes and legal grounds

Where the GDPR or similar law applies, license activation, downloads, the License Panel, purchase delivery and requested support are processed as needed to perform the license agreement or take requested pre-contract steps. Security logging, fraud prevention, service reliability and abuse investigation are processed for Nova’s legitimate interests in protecting customers, software and infrastructure, except where overriding rights require otherwise. Records required for tax, accounting or legal compliance are processed to meet those obligations. Optional processing that legally requires consent is performed on that basis and can be stopped prospectively.

International processing

Nova and its service providers may process data in countries outside the visitor’s or player’s country. Where applicable law requires a transfer mechanism or safeguard, the transfer must rely on the legally available mechanism for the provider and destination. Contact Nova for information about the safeguard relevant to a particular request.

Your privacy rights

Depending on applicable law, a person may request access, correction, deletion, restriction or portability of personal data, object to processing based on legitimate interests, or withdraw consent for future processing. A person may also complain to the competent data-protection authority. These rights can have legal limits, including where data must be retained for security, claims or statutory duties. Send requests to cerialnova@gmail.com; Nova may ask for reasonable identity verification before disclosing account or license data.

Website, License Panel and support data

When someone uses the License Panel or protected downloads, Nova may process the submitted license username and key, request IP address, requested action, download details, device or instance selections, authentication history and related audit records. If a customer configures license alerts, Nova also stores the submitted Discord webhook URL and alert preferences.

Purchase and support conversations handled through Discord or email may include contact details, order information, payment references, license details and troubleshooting material supplied by the customer. These records are used to deliver purchases, provide support, resolve disputes, prevent fraud and maintain business records.

For privacy, licensing or data-related requests, contact: cerialnova@gmail.com

Business / Legal Inquiries

For legal, business, licensing or support-related inquiries, please contact us via the email address listed above.

Disclaimer

Nova AntiCheat is provided as a software product for Minecraft server owners. No anticheat can guarantee complete prevention of cheating, bypasses, abuse or malicious client behavior.

Detection results may depend on server configuration, Minecraft version, network conditions, client behavior and third-party plugins. The service and software are provided without guarantees of uninterrupted availability, perfect detection accuracy or compatibility with every server setup.

Users are responsible for configuring, testing and using Nova AntiCheat properly on their own servers.

Liability

We are not liable for damages caused by incorrect configuration, misuse, third-party plugins, modified server software, hosting issues, user actions or external services.

We may update, change or discontinue features where necessary for security, compatibility or product improvement.

Affiliation

Nova AntiCheat is an independent project and is not affiliated with, endorsed by or sponsored by Mojang Studios, Microsoft, Minecraft, SpigotMC, PaperMC or any other third-party platform mentioned on this website.

Contact

For questions regarding this legal notice, licensing or the website, contact: cerialnova@gmail.com