There is very little to say here, because Nebula collects almost nothing. The blockchain, on the other hand, remembers everything.
Nebula has no sign-up, no email field, and no password. There is no user record anywhere because there is no server holding one. Connecting a wallet does not create an account; it grants this browser tab permission to ask your wallet to sign things.
Every deposit and withdrawal is a public transaction on Stellar, permanently and by design. Your address, amounts, and timing are visible to anyone, through this site or any block explorer. Nebula does not make that data public: the chain does, and nothing can make it private after the fact.
Treat a wallet address as pseudonymous rather than anonymous. If an address is linked to you elsewhere, its Nebula activity is linked to you too.
We measure page views and how far people get through the deposit flow, so we can tell where the interface loses them. That data is aggregated, and it is not connected to your wallet address.
Deposit and withdrawal amounts are recorded as size bands rather than exact figures, because an exact amount and a timestamp would point at one specific transaction on a public ledger.
This uses PostHog, served from our own domain rather than theirs. It stores an anonymous identifier in your browser to tell one visit from the next. Clearing site data clears it, and disconnecting a wallet issues a new one.
Errors are recorded so that broken states get fixed. Error reports include what the interface was doing, not who was doing it.
If you submit feedback, we keep what you wrote. If you choose to include your wallet address, we keep that alongside it so we can follow up. Both are used to improve the product and, in aggregate, to show that real people tested it.
We do not sell data, run advertising trackers, ask for personal information, or attempt to identify who is behind an address.