Brewtendo Network: Privacy Policy

Version 1.0
Last updated: July 14, 2026, 6:40 PM
Privacy Officer: Thom. Contact via [email protected] or [email protected]

Quick Summary

This section is a plain-language overview, not a replacement for the full policy below. If anything here seems to conflict with a later section, the full section governs.

• What we collect depends on which service you use (account, eShop, Badge Arcade, Friends, Brewverse, Discord), but generally includes account details, gameplay/purchase data, and anything you choose to post. Full breakdown in Section 2.
• We don't sell your data, don't share it with Nintendo, and only use it to run the services, keep accounts secure, and respond to support requests. Section 3.
• Your data lives on servers in Canada, Australia, the US, and Finland. We assess each location for data protection before relying on it. Section 4.
• We only email you promotional content if you've opted in. Account-status emails (like restriction notices) are separate and not tied to that setting. Section 5.
• We don't auto-delete your data. Email [email protected] or [email protected] to request deletion or a copy of your data. Requests must go through email, not Discord. Section 6.
• You must be 13+ (or your region's minimum) to use Brewtendo. Age is self-reported. If you're later found to be underage, your account is restricted (not deleted), and you can appeal once with a parent/guardian's help. Section 8.
• Questions or requests: [email protected] or [email protected].

1. Who We Are and What This Covers

Brewtendo Network ("Brewtendo," "we," "us") is a non-profit, independently operated project providing revived online services for the Nintendo 3DS, including the BNID account system, an eShop-equivalent, Badge Arcade, a Friends List service, SpotPass, a Nintendo Video applet content-delivery service, Brewverse (our social platform), and the Brewtendo Discord community and its bot, BrewBot.

Brewtendo Network is not affiliated with, endorsed by, or sponsored by Nintendo Co., Ltd. or its subsidiaries.

This Privacy Policy explains what information we collect across these services, why, where it's stored, and what rights you have over it. Brewtendo is operated from Quebec, Canada, and this policy is written primarily to meet Quebec's Act respecting the protection of personal information in the private sector ("Law 25"), alongside Canada's federal PIPEDA and, where applicable, GDPR (for EU-based processing of some of our infrastructure).

2. Information We Collect, By Service

Account (BNID)

Username, password (hashed), birthdate, gender, country, language/timezone, email address and verification status, marketing-email preference, Mii name/image/data, linked device identifiers (console serial number and MAC address, both stored as one-way hashes rather than in readable form), and access tokens used to keep you signed in.

eShop

Console-linked wallet balance, full purchase/transaction history (type, amount, balance before/after, timestamp), wishlist entries, and, if you complete our optional in-app survey, your provided age, gender, and free-text answers, linked to your console.

Badge Arcade

Game play progress and save-data for the Badge Arcade minigame, linked to your account.

Friends List

Your friend list and pending requests, presence information visible to friends (online status, currently favorited game, last-online time), and profile fields you set (region, language, favorite title, profile comment).

Brewverse

Anything you choose to post: text posts, drawings, screenshots, replies, direct/group messages (including read receipts), your profile (screen name, country, birthday month/day, profile comment/image, "systems owned," "favorite genres"), your follows and community memberships, and, if you report content or are the subject of a report, the report itself and any resulting moderation record (ban/restriction status, reason where disclosed, staff notes).

Brewtendo Discord / BrewBot

Standard Discord data handled per Discord's own terms. BrewBot itself temporarily buffers your last few messages per channel (kept in memory only, cleared automatically, never written to a database) to catch attempts to evade our word filter. If you're a staff member using error-code management commands, your Discord username is recorded as the person who added or edited an entry.

Support Email

If you email [email protected] or [email protected], we retain your message, your email address, and our reply, for as long as needed to resolve your request and per our general retention policy below.

3. Why We Collect It

We use this information to operate the services (authenticate you, run gameplay features, deliver friend/social functionality), to maintain account security, to respond to support requests, to enforce these Terms and moderate content, and, only where you've opted in, to send you optional emails (see Section 5).

We do not sell, trade, or rent your personal information, and we do not share it with Nintendo.

4. Where Your Data Is Stored

Because Brewtendo's infrastructure spans several locations, here's where data actually lives:

• Our primary servers (account, eShop, Badge Arcade, Friends, Brewverse) are located in British Columbia, Canada, operated by a member of our team.
• A second, actively-serving copy of these same services is currently being set up in Australia, primarily to serve users in that region, kept continuously synchronized with the primary servers.
• BrewBot is hosted in the United States (Texas), with a planned secondary backup location in Prince Edward Island, Canada.
• Our support and account-related email is hosted on infrastructure located in Finland (an EU member state), operated under a GDPR Data Processing Agreement.

Because our servers are located outside Quebec, this involves a transfer of your personal information across provincial and international borders. We assess these transfers for comparable data protection before relying on them, and maintain records of that assessment. If you'd like more detail on a specific transfer, you can request it via [email protected].

5. Email Preferences

We separate two kinds of email:

• Optional/marketing email (e.g., eShop purchase receipts): sent only if you've opted in via your account's marketing-email setting. You can disable this at any time from your 3DS system settings under your Nintendo Network ID settings.
• Account-status email (e.g., restriction/ban notices): sent independent of the marketing-email setting, since these relate directly to your account's status rather than being promotional. See Section 8 for how this applies to age-based restrictions specifically.

6. Data Retention

We do not automatically delete your data when you stop using our services. Data is retained until you specifically request deletion.

To request deletion of your account and associated data, email [email protected] or [email protected]. We process deletion requests manually after verifying the request. We cannot process deletion requests made through Discord. We require a retained, verifiable record of the request, which Discord messages don't reliably provide; requests made there will be declined.

You may also request a copy of your data in a portable, commonly-used format (such as CSV or JSON) rather than deletion, via the same email addresses.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about your account
• Correct inaccurate information
• Request deletion of your account and data (see Section 6)
• Request your data in a portable format (see Section 6)
• Object to or request restriction of certain processing

To exercise any of these rights, contact [email protected] or [email protected].

8. Age Requirements and Restricted Accounts

You must be 13 or older, or meet the minimum age for social-media-equivalent services in your jurisdiction, to use Brewtendo Network. Age is self-reported at signup, and we do not independently verify it at that stage.

If an account is later identified as belonging to someone under the applicable minimum age, we restrict (rather than delete) that account's access to certain features. You'll receive a one-time email explaining what's restricted and why; if you attempt a restricted feature afterward, you may receive a reminder email, capped at once per day regardless of how many attempts occur.

This restriction may be appealed once, by replying to the notice or emailing [email protected] / [email protected]. As part of the appeal, we'll ask a parent or guardian to confirm their relationship to you and your actual age by email. We review this information and make a final decision: restriction lifted, upheld, or, if we believe the information provided was false, a separate and more serious action may follow instead. This is a good-faith verification process, not a guarantee of accuracy.

Data belonging to a restricted account is retained under the same policy as any other account (see Section 6); restriction does not trigger automatic deletion.

9. Moderation Data

If your account is banned or restricted for any reason (not limited to age), we retain a record of that action, which may include a staff note about why. We may or may not disclose the specific reason to you, except where Section 8 requires it for age-based restrictions.

Automated (AI) moderation actions are provisional: they take effect immediately but are reviewed by a human staff member when available, and that human review is the governing decision.

10. Security

We take reasonable measures to protect your information, appropriate to the service and infrastructure involved. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If we experience a data breach that creates a real risk of harm to you, we will notify affected users and, where legally required, the relevant regulator (such as Quebec's Commission d'accès à l'information).

One specific note on NEX-protocol credentials: because of how Nintendo's original online authentication protocol works, some of our systems require a recoverable form of your linked game-service credential (rather than a one-way hash) in order to authenticate you to game servers and encrypt communications. This is a requirement of the protocol itself, not a shortcut on our part, and is handled the same way by other projects implementing this same protocol.

11. Third Parties and Sub-Processors

We use third-party infrastructure providers to operate our services (server hosting, email hosting). Where a provider processes personal data on our behalf, we maintain an agreement covering their data protection obligations. We do not share your information with these providers for any purpose beyond operating Brewtendo's services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of Brewtendo Network after changes take effect constitutes acceptance of the updated policy.

13. Contact

• General privacy questions, data requests, or deletion requests: [email protected] or [email protected]
• Not via Discord. See Section 6.