Privacy

What we store

• The files you publish, their names and sizes, and when each publish happened.
• Your account id from Hexclave, the sign-in service NoCodeExport also uses. Your email address and name stay with Hexclave; ncehost's staff can look them up there when handling your account or a report.
• A keyed hash of your network address, never the address itself, when you publish without an account or send a report. It counts how many temporary sites and reports come from one network each day.
• Billing state: your Stripe customer and subscription ids, your plan, its status and when the paid period ends. Card details go to Stripe and never reach ncehost.
• Reports: the address reported, the reason, the details written, and the email address the reporter chose to give, if any.
• Plans from NoCodeExport: when you have a NoCodeExport plan, NoCodeExport tells ncehost which plan and until when.

In your browser

Hexclave keeps your session in a cookie. When you publish without an account, your browser keeps the site's claim key so that signing in can add the site to your account; while you choose a plan and sign in, it remembers that choice for up to 15 minutes. ncehost runs no analytics or advertising scripts, and Hexclave's session recording is turned off.

Visitors to sites on ncehost.page

ncehost's database stores nothing about the people who visit the sites it hosts; Cloudflare's request logs cover those visits like any other request. The sites themselves may run their own scripts; their owners are responsible for those.

Who else handles data

• Cloudflare runs ncehost: its Workers serve every page and site, D1 holds the database and R2 the files. Its logs record requests for troubleshooting.
• Cloudflare Turnstile checks that a person, not a script, publishes without an account or sends a report.
• Hexclave handles sign-in and email verification.
• Stripe handles payments and the billing portal.
• NoCodeExport publishes previews here for its users and reads their ncehost plan and usage.

How long we keep it

A temporary site stops being served after 72 hours, and it and its record are deleted 30 days later. A site you delete stops being served at once and is usually deleted from the database within hours; files no site uses any more are deleted from storage after about a week. Each site keeps its latest 20 publishes. Reports and the record of actions taken on them are kept to handle abuse.

Changes

We may change this notice; the date at the top shows the latest change. The rules for using ncehost are in the terms of service.

To see, correct or delete your data, or for any other privacy question: write tohello@nocodeexport.com.