Privacy & reporting

What data does Noarka collect?

We collect: profile information (name, email, profile photo), authentication data (password hash, OAuth tokens), session data (IP address, browser info, login timestamps), product access records, and audit logs for security purposes.

Is my data encrypted?

Yes. Your data is encrypted at rest and in transit using TLS 1.3. We follow GDPR compliance standards.

How do I export my data?

Go to Account → Privacy → Export Your Data. Click "Export Data" to download a JSON file containing your profile, linked accounts, sessions, product access, and audit logs (last 100 entries). Session tokens and OAuth tokens are excluded or masked.

What's included in the export?

Your export includes: user profile (id, email, name, image, role, timestamps), linked accounts (provider, account ID, scopes — tokens excluded), sessions (IP, browser, timestamps — tokens masked), product access, audit logs (last 100), and organization memberships.

What does the activity log show?

Go to Account → Activity. The log shows all security events: logins, failed logins, password changes, 2FA changes, new device logins, profile updates, and more. Each entry shows the action, timestamp, IP address, and browser/OS.

How far back does the activity log go?

The activity log retains your full history. When exporting data, the last 100 entries are included in the export file.

How do I delete my account?

Go to Account → Privacy → Delete Account. Type "DELETE" to confirm, then click "Permanently delete account". This removes all your data, sessions, linked accounts, and product access. The action is permanent and cannot be undone.

What gets deleted when I delete my account?

In a single transaction, we delete: SSO authorization codes, audit logs, organization memberships, product access, sessions, linked accounts, and your user record. You'll be signed out and redirected to the login page.