Privacy notice
Who is responsible
Bala Danmeri operates Noor Indexer under the Noor Intelligence name. Contact info@baladanmeri.com for privacy questions, access, correction, deletion or objections. This notice describes the free beta as deployed on 9 November 2026.
What is processed
When you request an audit, the service processes the URL you enter and public responses from that site. Do not submit private, signed, personal or password-bearing URLs. The server uses the requesting IP address for short-lived per-instance abuse limits. Hosting infrastructure also processes ordinary request and security logs. The audit is returned to your browser; this release has no application database holding audit reports.
Purpose and legal basis
Requested audits and exports provide the service you ask for. Necessary request processing supports that service; proportionate security and abuse prevention rely on legitimate interests. Optional tracking is not installed. Explicit local saving stores reports on your device, not in a cloud account. Support correspondence is processed to answer your request.
Storage and recipients
The consent preference is stored as noor-consent-v1. If you click Save, up to ten reports are stored as noor-audits-v1 until deleted or browser data is cleared. Reports may contain public URLs that you should review before sharing. Hosting is provided through Vercel; an authorised IndexNow submission sends the submitted URLs and ownership key to IndexNow infrastructure and participating engines. Hosting-log retention and international-transfer terms require provider-account review; no fixed retention period is claimed here.
Your choices and rights
Delete local audit history in the workspace or clear this site’s browser data. Contact us about personal data in support correspondence or infrastructure logs; requests are assessed under applicable law. You may complain to the UK Information Commissioner’s Office. Do not submit sensitive information. If you choose to connect Google, Google Identity Services requests read-only Search Console permission. A short-lived access token stays only in memory in this tab and is sent directly to Google APIs. It is not sent to our application server or stored in localStorage, reports or logs. Your property list and inspection results are processed in your browser. Explicit report saving/export can retain inspection results, but never Google access tokens. Disconnect clears current Google access and asks Google to revoke it; existing saved/exported reports must be deleted separately. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google data or use it for advertising or model training.