Your personnel file.
Effective September 5, 2026.
Information the game uses
Nepo stores the name, title, optional company name and website, character appearance, floor, reporting position, office tier, and purchase totals you provide or generate. These game details and recent HR memos are public. We store a username and salted password hash for login, plus a hash of your optional private recovery key to identify your account; the key itself is shown only when you join.
Cookies and security
An essential, HTTP-only session cookie keeps you signed in for up to one year. No advertising cookies or third-party analytics are installed in this version. Hashed network identifiers are used for short-lived rate limits. Vercel may retain operational request logs to deliver and secure the service.
Payments and hosting
Stripe collects and processes payment details on its hosted checkout. Nepo does not receive or store full card numbers. Nepo retains order IDs, checkout references, amounts, statuses, and fulfillment records to deliver purchases and handle retries and refunds. Vercel hosts the application and Upstash Redis stores game records.
Office activity and sponsor logos
Recent character positions and cosmetic interactions are shared with visitors to the same floor. Presence expires after you leave; gesture and note effects are temporary. Uploaded sponsor logos are resized and re-encoded to remove metadata, then publicly served with their placement. Unused uploads expire after seven days.
Support requests
Contact HR stores the email and message you submit, plus your employee ID if signed in, in a private operator inbox for up to 180 days. That email is used to respond to your request, not displayed on your badge.
Sharing and retention
Sharing a badge or HR memo is optional. Downloaded images contain the public information shown in the preview. Following a company link or posting to X takes you to a separate service with its own privacy practices.
Game records persist while your account or the service operates. Purchase records may be retained longer for accounting, dispute handling, and legal obligations. For account or privacy requests, use Contact HR to reach the operator; do not send your full card details or recovery key.