Privacy policy

Last updated October 18, 2026

Nascent is a free, open source rhythm game run as a hobby project. This policy explains what the game and this website collect, why, and what you can do about it. It covers the online features: accounts, leaderboards, profiles and replays. Playing offline sends nothing to our servers.

What we collect

Your account

  • Your username, which is public.
  • Your email address, which is private. We only use it to send password reset links and important notices about your account.
  • Your password, stored only as a one-way Argon2 hash. We can't see it.

Your plays

When you play a chart while signed in, the game sends the result to our server:

  • The score: accuracy, grade, judgements, combo, rate, key mode and the chart you played. If the server doesn't know the chart yet, the game uploads the chart file so its leaderboard can be built.
  • The replay: every key press and release and when it happened.
  • Your gameplay settings: scroll speed, audio and visual offsets and mirror mode.
  • Technical details: the game version and build, your operating system and processor type, the audio system and its latency, how the game reads your keyboard, and frame timing.

Plays, replays and profiles are public. Anyone can view them on this website and download replays. We also work out a summary of how you play from your replays to help catch cheating.

Signing in and security

  • For each device you're signed in on, we store its IP address, the app or browser it reports, and when it was last used. You can see and sign out these devices on your account page.
  • When you ask for a password reset, we store the IP address the request came from.
  • We use IP addresses briefly to rate limit requests, and our web server keeps short access logs that include them.

What stays on your computer

Your settings, local scores, local replays and song files stay on your computer. Only plays you submit while signed in are sent to us.

How we use it

We use this information to run leaderboards, profiles and replays, keep accounts secure, catch cheating, reset passwords and fix bugs. We don't show ads, sell your data or use analytics or tracking cookies. This website keeps you signed in using your browser's local storage.

Other services

  • Our hosting provider runs the server, and Cloudflare may sit in front of it to protect it from attacks.
  • An email delivery provider sends password reset emails.
  • The game checks GitHub for updates and downloads them from there.
  • When you download songs in the game, it fetches them directly from beatmap mirrors (catboy.best and osu.direct by default), which see your IP address.
  • If Discord Rich Presence is on (it is by default, and you can turn it off in the options), the game shows what you're playing in your Discord status.
  • This website loads its scripts and styles from the jsDelivr CDN.

How long we keep it

  • Your account, plays and replays stay until you delete your account.
  • Signed in device records are deleted once they expire or you sign them out.
  • Password reset links are deleted after they expire.
  • Database backups are kept for 14 days, so deleted data can remain in a backup for up to 14 days.

Your choices

  • Download your data: your account page has a button that downloads everything we store about your account.
  • Delete your account: also on your account page. This permanently deletes your account, plays, replays and signed in devices. Charts you uploaded stay, because other players' scores are on them, but they're no longer linked to you.
  • For anything else, contact us below.

Children

Nascent's online features aren't meant for children under 13. Please don't create an account if you're under 13.

Changes

If this policy changes, we'll update this page and the date at the top.

Contact

Questions or requests: open an issue on GitHub.