Last updated July 23, 2026

This policy explains what little data Nancy Drew Hub collects, why, and how it's used. In short: we don't sell data, we don't run ads, and we don't track you across the web.

We don't sell data or run ads

The Hub isn't a commercial product. We don't sell, rent, or trade any visitor data to anyone, and this site carries no advertising or ad-tracking scripts of any kind. Nothing described below is collected for marketing or advertising purposes -- it exists purely to make the site work correctly.

Cookies we use

Because none of these cookies are used for advertising or cross-site tracking, and all of them exist solely to run the site itself, we don't show a cookie-consent banner. Here's exactly what we set and why:

• nd_locale -- remembers your chosen language/region so the site doesn't ask again on your next visit. Expires after 1 year.
• nd_locale_dismiss_{locale} -- remembers that you dismissed a "switch language?" suggestion, so it doesn't reappear. Expires after 30 days.
• nd_session -- created only if you log into an account; an httpOnly, encrypted token that keeps you signed in. Expires after 7 days or on logout.

If you're signed into an account, your language/region choice is also saved to your account itself, alongside the cookie -- so it follows you to a new device or browser instead of resetting.

Where your country comes from

To suggest the right language/region on your first visit, our server reads a country code that arrives with the request through Cloudflare, which proxies traffic to our domain. We don't perform our own IP geolocation lookups, don't store your IP address, and don't log this country code anywhere -- it's read once, used to pick a suggested locale, and discarded. For transparency: the site itself runs on servers physically located in Kazakhstan.

YouTube trailers

Game pages embed trailers directly from YouTube. This means that when you open a page with a trailer, your browser contacts YouTube (and therefore Google) straight away -- before you press play -- and YouTube may set its own cookies and see your IP address and which page you came from.

We don't control what Google does with that data; it's covered by Google's own privacy policy. If you'd rather avoid it, browser extensions that block third-party embeds will stop the player from loading.

Account data

If you create an account, we store the minimum needed to run it: your email, a securely hashed password, and whatever profile info you choose to add (like saved favorites or a preferred language/region). This data is never sold, shared with third parties, or used for marketing.

You can request a copy, correction, or deletion of your account data at any time by contacting us -- see the Rightsholders page for our email.

Changes to this policy

If how we handle data changes meaningfully, we'll update this page and the "last updated" date above.