This policy describes what Nocturne does and does not collect when you use the service.
If you choose to sign up for an account, the server stores: a username, a scrypt-hashed password (never the plaintext), session tokens, and your per-account cookie storage (capped at 50 MB). You can change your password or delete your account at any time. Account deletion removes all associated data immediately.
Nocturne stores the following in your browser (localStorage). None of this is transmitted to the server:
All local data is cleared when you clear your browser storage for this site.
To enforce content policy and prevent abuse, the server temporarily logs each search query along with the username (if signed in), IP address, and timestamp. These records are automatically deleted after 1 hour via a server-side prune job that runs every 5 minutes — they are never retained beyond that window. Only the operator account can view these logs while they exist, and they may also be cleared manually at any time.
The server may retain short-lived standard connection logs (IP address, timestamp, request path) for abuse prevention and debugging. These are not the content of proxied traffic — they are the same kind of logs any web server produces.
If abuse is detected (such as searches for prohibited content), the offending IP address and/or account may be temporarily or permanently blocked from accessing Nocturne. See the Terms of Service for the full policy.
Nocturne uses Google Analytics on its shell pages (home, apps, code, legal) to understand basic usage — page views, country-level geography, and browser/device type. It does not track what you browse through the proxy. You can opt out with any standard tracker-blocker (uBlock Origin, Privacy Badger) or Firefox's Enhanced Tracking Protection.
Nocturne loads fonts from Google Fonts, the Monaco editor from jsDelivr CDN, and the analytics tag from Google Tag Manager. Those providers may see that your browser requested those assets.
For privacy questions or abuse reports, contact the operator on Discord: Midnightsweat.