Privacy Policy

NB is a trading education community. This Privacy Policy covers the personal data NB collects when you use the NB website, the members area and NB Bot in the NB Discord server (together, the “Services”).

The Services are run by NB (“we,” “us”). This Privacy Policy does not cover services run by others, such as Google, Discord, brokers, trading platforms or prop firms, even when you reach them through the Services. Their own privacy policies apply.

1. Personal Data We Collect

Data you give us

• Account Data: When you create an account or sign in with Google or an email address, we collect your email address. If you sign in with Google, we also receive your name, profile picture and Google account ID. If you sign in with Discord, we receive your Discord Data (below) and no email address. While access keys are still in use, we also keep a fingerprint (hash) of the access key we gave you, to check it when you sign in.
• Discord Data: When you link Discord, we receive your Discord user ID, username, display name, avatar and the other basic profile details Discord shares with apps, such as your language setting. We also receive your member record in the NB Discord server, such as your roles, server nickname and the date you joined. We use it to check whether you have accepted the NB Confidentiality and Non-Disclosure Agreement (the “NDA”) and hold the Lifetime role. Linking Discord does not give us your direct messages with other people, your friends list or your other servers.
• Messages to NB Bot: NB Bot reads messages sent to it and messages posted in the NB Discord channels where it is active, so it can answer questions and react to posts. It does not keep what you wrote, except posts in the NDA channel (see NDA Records). Its activity log records your user ID and the kind of reply it sent.
• Server tag: Every few minutes, NB Bot checks whether you wear the NB server tag. It keeps the latest result, including the tag shown on your profile (which can be another server’s), and when that result last changed. It gives or removes access to the module channels based on that result.
• Access log: Each time NB Bot gives or removes access to the module channels, it logs your user ID, whether you wore the tag and passed the NDA check, what triggered the change and the time. When the access check was first switched on, NB Bot also saved a list of the members who already had access, with their user ID, username and display name, as the record of who bought access.
• NDA Records: When you accept the NDA through NB Bot, we record your Discord user ID and username, the full legal name and date of birth you enter, your age when you accept it, the acceptance option you chose, the name of your parent or guardian if you are under 18, the exact text you accepted, the time of acceptance, the version of the NDA you were shown, and our decision to approve or reject it. Anything you post in the NDA channel becomes part of this record.
• Payment Data: When you buy Lifetime access, we keep a record of the purchase: who paid, the amount, the date, the payment method and the payment reference. The payment service you use handles the payment itself, under its own privacy policy.
• Communication Data: If you contact us, through the contact form or in Discord, we collect your name, your contact details and what you write.

Data we receive automatically

When you use the Services, we receive the following technical data (“Technical Information”):

• Device and Connection Information: your IP address, browser and device type, operating system and referring page.
• Usage Information: the pages and tools your browser requests, which our hosting providers record in their request logs, and the ID of the session currently active on your account.
• Logs: our hosting providers keep server logs, error messages included.
• Cookies and local storage: only what it takes to sign you in and remember your settings. We do not use advertising or analytics cookies (the Cookie Policy lists every item).

What you must give us

To get access to the members area, you need to sign in with Discord (or with an email address or Google, and then link Discord), accept the NDA and buy Lifetime access. Without these we cannot give you access. Everything else is optional.

2. How We Use It

We use your personal data to:

• create and run your NB account, and sign you in;
• check, when you link Discord and each time you sign in, that you have accepted the NDA and hold the Lifetime role (a session lasts up to 24 hours, so access ends within a day of losing the role);
• run NB Bot, including its replies, the server-tag check and access to the module channels;
• record and check acceptance of the NDA, including age and, for members under 18, the consent of a parent or guardian;
• provide and support the members area under our Terms of Service;
• record purchases and keep accounting records;
• enforce the NDA and our Terms of Service, including limiting each account to one active session and preventing account sharing;
• prevent and investigate fraud, abuse, unauthorized access and other security incidents;
• answer your messages and requests;
• find and fix errors; and
• comply with the law, and establish, exercise or defend legal claims.

We do not sell, rent or buy personal data, or use yours for targeted advertising or to train AI models.

3. Who Receives It

• Service providers: companies that process personal data for us, only on our instructions. They are our website host (Vercel), our server host (Render), the host for NB Bot, the form service that passes contact-form messages to our inbox (Web3Forms), and our email provider.
• Google Fonts: when a page loads, Google receives your IP address to send the page’s fonts.
• jsDelivr: when the 3D chart in the members tools opens, your browser loads the font for its labels from the jsDelivr network, which receives your IP address.
• Discord: NB Bot keeps NDA Records and its log of access changes in private, staff-only channels of the NB Discord server, so Discord stores them. When you link Discord, Discord also processes your data under its own privacy policy.
• Google: the sign-in page loads Google’s sign-in script as it opens, so Google receives your IP address and browser details whether or not you go on to use it. If you sign in with Google, Google handles your data under its own privacy policy.
• Authorities and others: where we believe in good faith that disclosure is necessary to comply with the law or legal process, to prevent harm, to deal with fraud or security issues, or to enforce our Terms of Service and protect our rights.
• A new owner of NB: if NB or the members area is sold or handed over to someone else, this Privacy Policy continues to apply to your data.
• Anyone else, with your consent.

4. Your Rights

You have the following rights regarding your personal data:

• Access and portability: ask for a copy of the personal data we hold about you, in a portable format where this applies.
• Correction: ask us to correct personal data that is wrong or incomplete.
• Deletion: ask us to delete your personal data. Deleting your account or your Discord link ends your access to the members area. We keep NDA Records for the period in Section 6, and anything else the law requires us to keep.
• Objection: object to processing we base on our legitimate interests.
• Restriction: ask us to limit how we use your personal data in certain cases.
• Withdrawal of consent: where we rely on your consent, withdraw it at any time. This does not affect processing that took place before you withdrew it.
• Automated decisions: a person on the NB team decides who gets the Lifetime role. After that, the checks run automatically: access to the members area follows the Lifetime role, and NB Bot gives or removes access to the module channels depending on that role and the server tag. If you think a check is wrong, contact us and a person will review it.

To use these rights, contact us through the contact page or in the NB Discord. We may ask you to confirm your identity first. We answer within one month. For complex or numerous requests we may take up to two further months, and we will tell you if we do. If we cannot do what you ask, we will explain why. Using your rights does not affect how we treat you.

5. International Transfers

Some of our service providers, and the sign-in providers you choose, store or process data in the United States and other countries. When personal data of people in the European Economic Area (“EEA”) is transferred to a country outside the EEA, we rely on:

• Adequacy decisions of the European Commission under Article 45 GDPR, including the EU–US Data Privacy Framework for certified recipients; or
• Standard contractual clauses approved by the European Commission under Article 46 GDPR.

Contact us for more information about these safeguards, or for a copy of them.

6. How Long We Keep It and How We Protect It

• Account Data: while your account is open, and deleted within 30 days after it is closed.
• Discord Data: while you are in the NB Discord server. NB Bot’s record of your server tag is removed when you leave the server.
• NDA Records: while you have access, and after that for as long as claims under the NDA can be brought.
• Log of access changes, and the record of who bought access: for as long as NB runs the community, unless you ask us to delete them.
• Payment Data: for as long as tax and accounting law requires.
• Technical Information: up to 30 days, or longer only to investigate a specific security incident. Cookies and local storage stay in your browser for the times given in the Cookie Policy.
• Communication Data: contact-form messages for up to 24 months after our last exchange. Messages you send in Discord stay on Discord until you or we delete them.

When we no longer need personal data, we delete it or make it anonymous.

We protect personal data with technical and organizational measures, including encryption in transit, a signed session cookie that scripts cannot read, rate limiting, and access controls on our systems. No system is completely secure. Where the law requires, we will tell you and the relevant authority about a personal data breach.

7. Age

Members must be at least 14. Members aged 14 to 17 need the consent of a parent or guardian, and we may ask that person to confirm it; when such a member accepts the NDA, we record their date of birth and the parent’s or guardian’s name. Children under 14 cannot become members, and we do not knowingly collect their personal data. If a child has given us any, tell us through the contact page and we will delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy. For material changes, we will tell members by email or in the NB Discord before the changes take effect.

9. Contact

NB is responsible for the personal data described in this Privacy Policy. For questions about it, or requests about your personal data, contact us through the contact page or in the NB Discord.

You also have the right to complain to a data protection authority, in particular in the EEA country where you live or work, or where you believe the infringement took place.

10. Legal Bases