Privacy & data

Publisher and scope

Project NJOL, BOREALIS (previously njol for Windows) and NORDIC 5 are published by Marco Marfè, controller for the processing described here. Contact for privacy and security: admin@projectnjol.com. This notice covers projectnjol.com, messages to the publisher and the two programs’ external services. It does not replace the policies of visited websites or games. Updated 24 October 2026.

Website connections and cookies

projectnjol.com is delivered directly through Cloudflare Workers. Cloudflare receives connection information such as IP address, requested resource, time and browser information to deliver and protect the site. The site code contains no advertising tracker or audience analytics. Infrastructure may still produce operational and security logs. Fonts, images and videos are served with the site. The demonstration search sends your query to DuckDuckGo only when submitted. The home page also requests the latest public BOREALIS release from the GitHub API, which receives your IP and request. Download links lead to release files hosted on GitHub, which receives the same connection data when you download. Security cookies may be used by infrastructure where the relevant protection features are enabled. Cloudflare cookie information.

Direct contact and older feedback forms

For support, ideas or feedback, write to gunko@tuta.com. The website provides an email link and a copy button, with no feedback form or FormSubmit submission. Opening the email link opens your email application; you choose what to send. Copying the address sends no message. Tuta hosts the receiving mailbox. Privacy and security requests remain available at admin@projectnjol.com.

Starting with BOREALIS 0.3.72, the in-app feedback form and FormSubmit transport have been removed. The contact panel only shows gunko@tuta.com with Open email app and Copy address. It has no message fields, automatic diagnostics, attachments or automatic submission. You compose and send email in your own email application. Versions before 0.3.72 may still send optional feedback through FormSubmit to gunko@tuta.com. Those forms send category, title and message, with an optional reply address; version diagnostics are added only if selected. Browsing history, passwords, cookies, screenshots and profiles are not attached automatically. FormSubmit also receives connection data including IP and documents a 30-day submission archive. Opening a legacy form does not submit it. Uncertain submissions are not retried automatically. Direct email avoids FormSubmit.

Removing a form does not erase past submissions or mailbox copies. Do not send credentials or unnecessary sensitive data. Legacy FormSubmit privacy · FormSubmit documentation · Tuta privacy.

Purposes, legal bases and retention

For processing controlled by the publisher, the purposes are operating and securing the site, handling voluntary support and feature requests, and investigating vulnerabilities. The intended basis is legitimate interest (GDPR Article 6(1)(f)): delivering the requested service and responding to people who contact the project, with limited data and no marketing reuse. Applicable legal obligations use Article 6(1)(c). In older builds, the form confirmation acknowledges the requested transmission; it is not consent to marketing or a waiver of rights. Messages should be retained only while the request, associated fix or a specific legal need remains active, then deleted or stripped of identifying details. No universal mailbox deletion deadline or automatic purge has been implemented; requests for deletion can be sent to the contact above. Exact infrastructure log retention and some provider-contract details remain under verification; available references appear below. Supplying feedback is optional and does not affect use of the browser; without a reply address a personal response is not possible.

Providers, contracts and transfers

Cloudflare describes its handling of personal information, subprocessors and international transfer arrangements in its Privacy Policy and Data Processing Addendum. These hosting services are separate from AI tools used to develop the website. A previous copy published through OpenAI Sites is retained for rollback and may still be reachable. It is no longer updated and may show outdated notices or downloads; projectnjol.com is the current source.

Account-specific terms and operational log retention still need confirmation. The legacy feedback service is formsubmit.co, presented as a Devro LABS product: its public notice does not fully establish the contracting entity, processing agreement, countries, subprocessors or transfer safeguards. We do not attribute another similarly named product’s contract to this service. Older builds may still use this service; we do not claim EU-only processing or a completed assessment. The mailbox uses the paid Tuta Legend plan. Tuta’s public terms allow professional use on paid plans, but the actual account configuration and applicable processing agreement still need to be documented. Tuta’s privacy statement dated 13 November 2025 states that mail server logs are retained for a maximum of 7 days and contain no customer IP addresses; this does not cover mailbox message copies or establish deletions performed by the publisher.

The FormSubmit 30-day archive is separate from the mailbox copy. Deleting one does not establish deletion of the other; the reviewed API documentation provides no deletion command. Contact the publisher about these copies. The publisher can provide the information available and involve the relevant provider.

Your rights

For personal information controlled by Marco Marfè, contact admin@projectnjol.com to request access, correction, deletion, restriction, or to object to processing based on legitimate interest. Portability applies where its legal conditions are met. Where consent is used, it can be withdrawn without affecting earlier lawful processing. These rights have legal conditions and exceptions. Requests normally receive a response within one month; a permitted extension must be explained within that month. You can complain to the Italian Garante or your competent supervisory authority. njol does not make automated decisions producing legal or similarly significant effects about feedback senders. Local browsing data is not held by the publisher and cannot be retrieved by emailing support.

Windows browser: local data and external services

The currently distributed browser uses Microsoft Edge WebView2, based on Chromium. It is not the separate full-Chromium project. Profiles, Pins, bookmarks and preferences are local; njol state uses Windows DPAPI, while WebView2 manages website cookies, storage and saved passwords. There is no njol cloud account or synchronization. Microsoft SmartScreen and WebView2 can send reputation, diagnostic and crash information to Microsoft. Automatic njol updates contact GitHub unless a local update channel is configured. Online address-bar search suggestions, enabled initially, send search-shaped text and connection information to DuckDuckGo after a pause; you can disable them in Preferences. Confirmed searches go to the selected engine. AI shortcuts open external services; their own terms apply. The mood clock uses local time, not geolocation. Detailed offline notices and original component licenses are available in Preferences → Privacy and licenses. Browser data notice shipped with 0.3.74 · Microsoft WebView2 privacy · GitHub privacy.

NORDIC 5: local library and connections

NORDIC 5 stores discovered or added games, game paths, preferences, profiles, ratings and operation backups on your PC. Launcher state is normally under %LOCALAPPDATA%/Gunko or your selected location; installing add-ons, including the separate Jata capture component, also writes to the selected game folders. These files are not an encrypted password vault: do not put secrets in them. Skellig reads local process, frame-performance and hardware-sensor information for its overlay; it is not website audience analytics. Jata saves screenshots as PNG files in the chosen folder and, only if you enable it, an additional HDR JPEG XR (.jxr) copy. In the reviewed architecture these data are not sent to the publisher; this does not certify data flows of third-party drivers, runtimes or other software.

For artwork, the launcher may contact the Steam CDN and store API using a game’s app ID. Valve and its providers therefore receive that ID and connection data, including IP, even without a Steam login. Images are cached locally. Launcher update checks contact GitHub and launcher downloads require confirmation. From Launcher 0.5.76, installed game add-ons update automatically by default while the launcher remains open, respecting saved update preferences and waiting for running games to close. In the reviewed code these flows do not upload the full library, local paths or profiles to the publisher. This is not a claim of no external connections. Steam privacy · GitHub privacy.

The interface uses Microsoft WebView2, including its Microsoft data flows. An imported NVIDIA runtime and the display driver have separate terms; this notice does not certify their data flows. Logs such as Gunko.log and GPU crash reports can include local paths, hardware details and video-memory use. Review logs and profiles for paths, usernames and personal data before sharing them. Removing the launcher does not establish that all copies, backups and components in game folders have been removed.