Skip to content

NOCTIS Privacy Policy

Version 2.0, effective 2026-10-25

This policy explains what data NOCTIS, the website noctisdb.com and our license server process, and why.

Controller

[LEGAL NAME, ADDRESS, COMPANY ID] is the controller of the personal data described here. Contact: privacy@noctisdb.com.

What stays on your computer

NOCTIS is a desktop application. It connects directly from your computer to your databases. We never receive:

Passwords and other secrets are stored in your system’s credential store (Windows Credential Manager). Where it isn’t available, they are encrypted in the settings file with a random key stored next to it.

MCP server

If you connect an AI client such as Claude Desktop, Claude Code or Cursor to the NOCTIS MCP server, that client can read schemas and data from the connections you allow, and send them to its AI provider. This happens between your computer, the client and its provider, under their terms. NOCTIS keeps an activity log of these calls on your computer only.

What we process

License activation and checks

When you activate a license and once a day afterwards, NOCTIS sends our license server:

We store, for each license, the computers it is activated on (the hashed identifier, activation date and the last time the license was checked) and a log of license events such as activations, deactivations and key changes. We use this to provide the license, to limit it to the computers you paid for and to prevent misuse.

Purchases

Stripe processes your payment as the merchant of record through Stripe Managed Payments. Stripe collects your payment details, billing address and tax information under its own privacy policy (stripe.com/privacy). We receive from Stripe your email address, the Stripe customer and subscription identifiers, the plan, the number of seats and the billing periods. We don’t receive your card details.

Your account

Your account on noctisdb.com is identified by your email address. We store that address, your licenses and their computers. License keys, activation tokens, sign-in links and session cookies are stored only as cryptographic hashes. Sign-in links expire after 15 minutes and sessions after 7 days.

Email

We send license keys and sign-in links through Amazon Simple Email Service (Amazon Web Services). We don’t send marketing email.

Website

noctisdb.com is served by Cloudflare. It uses no analytics, advertising or tracking cookies. The only cookie is the session cookie of your account, set when you sign in.

Updates

NOCTIS checks GitHub for new versions and downloads updates from GitHub. GitHub receives your IP address and the application version as part of these requests.

We process this data to perform our contract with you (licenses, account, email), to meet legal obligations (tax and accounting records kept by Stripe and us), and for our legitimate interest in preventing fraud and license abuse.

Processors

Some of these providers may process data outside the European Economic Area, under the European Commission’s standard contractual clauses or an adequacy decision.

Retention

We keep license and account data for as long as your license exists, and afterwards as long as needed for tax, accounting and legal claims. Computers you deactivate are kept in the license history. You can ask us to delete your account once you no longer have an active license.

Your rights

You can ask for access to, correction, deletion or export of your personal data, object to or restrict its processing, and complain to your data protection authority. Write to privacy@noctisdb.com from the email address of your account.

Children

NOCTIS is not meant for children under 16, and we don’t knowingly process their data.

Changes

We will publish changes to this policy on noctisdb.com and announce material changes in NOCTIS or by email.