This notice explains how the NeuroShrub identity verification service processes your information. It applies only to identity verification; your NeuroShrub game account is covered by NeuroShrub's own privacy policy.
What we collect
- Photos or scans of the identity document you upload (front and, where needed, back).
- A photo of you, only where the verification asks for one and you consent to it separately.
- Information read from the document: names, date of birth, document number, issuing country, document type and expiry date.
- Technical information about the verification, such as times, image quality results and the outcome.
We do not receive or process your NeuroShrub game data.
Why we process it
- Identity verification
- Fraud prevention
- Security
- Compliance with legal obligations
Legal basis
The legal basis for each purpose is stated here once it has been confirmed. Your explicit consent is recorded when you start the verification.
Automated processing
Automated systems may assist with document classification, text extraction, image-quality analysis and fraud indicators. Automated output may be reviewed or supplemented by additional checks where necessary.
No external AI service provider is currently configured.
Automated output never permanently rejects a verification on its own. You can ask for a human review of an automated outcome through the privacy contact.
How your data is stored
Documents and the information read from them are encrypted and stored in a separate database, apart from your NeuroShrub game account.
How long we keep it
- Documents of a verification that is not completed are deleted 30 days after it ends.
- Documents of a completed verification are deleted 30 days after it is verified.
- A minimal record of the verification and its audit log is kept for 730 days after it is no longer valid.
- Keyed pseudonyms of the document number and of your name and date of birth, and a keyed image fingerprint of each uploaded photo (not the photo itself), are kept for 730 days to detect duplicate identities.
- Identity documents are not backed up. Encrypted database backups are kept for at most 9 days.
- Deleted data becomes unrecoverable at the latest 99 days after deletion.
- Web server logs are kept for 14 days.
Security
Data is encrypted, access is limited to authorised reviewers, and every view of a document is logged.
Who receives your data
- NeuroShrub receives the result of the verification, which can include the outcome that the minimum age was not met.
- For a verified identity, NeuroShrub also receives a pseudonymous person reference. It is the same for every account of the same person and is used to detect multiple accounts of one person. It contains no name, document number or image. NeuroShrub keeps it under its own privacy policy.
- The configured AI service provider receives document images for analysis, where one is configured.
- There is no advertising or tracking on these pages.
Your rights
Where applicable, you can ask for access to your data, its deletion, object to the processing, withdraw your consent, and ask for a human review of an automated outcome.
Contact
Privacy questions: privacy@neuroshrub.com
Support: support@neuroshrub.com
NeuroShrub's privacy policy: https://neuroshrub.com/Privacy