Privacy Policy

What we collect

Account email address and password (hashed, via Supabase Auth). If you sign in with GitHub, Google or Apple, that provider shares your email address and basic profile with us. If you enable two-factor authentication, a TOTP secret. Billing details are handled directly by Stripe — norc never stores your card number.

Job and machine data you choose to sync: crontab entries, job names and schedules, machine names, and run status. This is the data you're already managing on your own systems — norc relays and stores it so you can view and edit it from web, desktop, and mobile.

If you use AI Studio, the prompts you write and, if you bring your own API key, that key (encrypted at rest with AES-GCM) to call your chosen AI provider on your behalf.

If you use shared environment variables, the names, descriptions and values you save. Values are encrypted server-side with your account's key, are never shown again after saving, and are sent only to your own machines that run jobs bound to them. Deleting a variable removes it from your account permanently; archiving keeps the value so you can restore it. Each machine keeps its last cached values until it next syncs. Variables are deleted, including from backups, when you request account deletion.

Messages you send us, by email or through the in-app request forms, with the plan and usage details the form attaches.

If you send feedback while signed in, we always store the message, its type (bug, idea or question), the app and platform you sent it from, the name of the screen you were on, your plan, your account and user ids, the app version and operating system version where the app can read them, and your account email address so we can follow up. The email address is never sent to Slack. The dialog also has an "Include diagnostics" box. It starts ticked for bug reports and unticked for ideas and questions, and you can change it. Only when it is ticked do we attach a small fixed set of diagnostics: your language, whether you were online, and, in some apps, a count of your machines or jobs. Diagnostics never include your jobs, commands, environment variable values or keys. Feedback is visible to norc operators. Your own feedback list shows you its status and any public note we add. It is deleted when you delete your account.

Standard operational logs (timestamps, IP address, error traces) for debugging and abuse prevention.

What we don't do

We don't use ad tracking or advertising cookies anywhere, and we don't sell or share your data with data brokers. Google Analytics on norc.app runs with Google's advertising features turned off, and you can opt out of it at any time.

Cookies and analytics on norc.app

norc.app uses Vercel Web Analytics and Speed Insights for aggregate page-view counts and load performance. They set no cookies, don't track you across sites, and don't build individual profiles.

norc.app also uses Google Analytics, so we can see which pages and buttons people find useful. It runs for every visitor unless you opt out. There is no cookie banner. We rely on the UK exemption for analytics cookies, which requires us to tell you what they do and to make opting out easy.

What Google Analytics records: the pages you view, the buttons and product links you click, how far you scroll, links you follow off the site, the page that sent you here, and your device type, browser, screen size, language and approximate location (country and city), which Google derives from your IP address. It does not get your name or email address, and it is not linked to your norc account. Google's advertising features (ad storage, ad personalisation and ad user data) are turned off.

The cookies it sets on norc.app are _ga and _ga_ZLYQGP848H. Both hold a random identifier so that repeat visits count as one visitor. They expire two years after your last visit. They are set for norc.app only, so the vault never reads them.

Google keeps the event data for the retention period set on our Analytics property, which is at most 14 months, and then deletes it. Aggregate reports, such as page-view totals, are kept after that.

To opt out, use Opt out of Google Analytics in the site footer or the button below. We save the choice in your browser's local storage (or in a preference cookie if local storage is blocked) and check it before Google Analytics loads. If your browser can keep neither, Google Analytics stays off. Once you opt out, nothing from Google loads on norc.app and the cookies above are deleted. The choice applies to every page and tab in that browser until you clear your site data. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as an opt-out too. To block Google Analytics on every site, use Google's opt-out browser add-on.

Analytics in the apps

The vault web app (vault.norc.app) uses Vercel Web Analytics, which is cookieless. It also uses Google Analytics, which sends product usage events to a separate Google Analytics property: the pages you open (with ids removed), the controls you click, and key actions such as pairing a machine, creating a job or upgrading, linked to a pseudonymous account id. As on norc.app, it runs unless you opt out and no banner opens by itself. A Global Privacy Control or Do Not Track signal counts as an opt-out until you make a choice; a choice you have already made stays in force. The vault saves your choice in your browser's local storage, or in a preference cookie if local storage is blocked; if neither is available it keeps Google Analytics off. To switch it off or back on, use Cookie settings under Settings > Account in the vault. Our servers also send some events to that property directly. They set no cookies, so they don't depend on that setting: account creation, pairing a machine and creating a job (from the vault), and AI generations, checkouts and subscription changes. Each carries your account id as a pseudonymous identifier, plus the machine or job id for pairing and job events. None of these events include your commands, job names, hostnames or email address. You can switch analytics off for your whole account: turn off Share Analytics in the mobile app's settings, or email hello@norc.app and we'll do it for you. That stops the vault's Google Analytics and the account, pairing and job events. AI generation, checkout and subscription events are still sent.

norc uses Statsig for feature flags and kill switches. Our servers check flags against your account id; the vault web app sends your user id and email address instead, and Statsig keeps a record of each check (the flag, the result and those identifiers). The mobile app's Statsig client checks flags with an anonymous device identifier.

Who else sees it

These services process data on our behalf, each under its own privacy and security terms:

• Supabase: database, authentication, the realtime relay and our server functions. Holds your account, job, machine and AI Studio data.
• Stripe: billing and payments. Gets your email address, payment details and subscription history.
• Vercel: hosts the marketing site and runs the vault's web server, Web Analytics and Speed Insights. It processes your account and job data in transit, as well as request data such as IP address, browser and the pages you load.
• Cloudflare: email routing for our norc.app addresses (the emails you send us).
• Google: Google Analytics on norc.app (on unless you opt out, as described above), and in the vault (on unless you reject it in Cookie settings; usage events and a pseudonymous account id).
• Statsig: feature flags. Gets your account id (from the vault web app, your user id and email address instead) and, from the mobile app, an anonymous device identifier.
• Resend: sends account and service emails (sign-up confirmations, sign-in links, request replies). Gets your email address and the message content.
• Slack: requests you send from the app reach our team's Slack workspace, with the message, your plan and usage, and a shortened account id. New feedback may also post to the same workspace, with its type, platform, app version, your plan and the message (shortened if long), but not your email address.

If you bring your own AI provider key, your prompts go to that provider (e.g. OpenAI, Anthropic) under their terms, not ours. That provider is your choice, not one of ours.

How long we keep it

Each category, for as long as your account is active, then deleted (including from backups) when you request account deletion:

• Auth record, password, and TOTP secret
• Synced job and machine data
• AI Studio prompt history and any BYOK key you stored with us
• Feedback you sent, including the diagnostics you attached

Two exceptions: billing records are retained by Stripe as required by law regardless of account deletion, and operational logs (timestamps, IP address, error traces) are kept only as long as needed for debugging and abuse prevention, deleted on a rolling basis independent of whether your account is still active. If you used a BYOK AI provider, that provider retains your prompts under its own terms — deleting your norc account does not delete anything already sent to them.

Your controls

Use Opt out of Google Analytics in the norc.app footer to switch Google Analytics off on norc.app. In the vault, use Cookie settings under Settings > Account to accept or reject the vault's Google Analytics at any time.

Email hello@norc.app to export or delete your data, to opt out of analytics in the apps, or to ask any question about this policy.