Privacy policy
Last updated: 24 October 2026
Nocturne is a connected digital home made by Lunar Computing, Inc. (“we”, “us”). This policy explains what Nocturne keeps, why, who can see it, how long we keep it and how to have it deleted. It applies to the Nocturne web app at nocturne.lunarcomputing.org and the Nocturne app for iPhone.
What Nocturne keeps
- Your account: your name, your email address, and, if you sign in with Google, GitHub or Apple, the identifier that service gives us for you and the email it shares. For passkeys we keep only the public key and a name for each device; your private key never leaves your device.
- Signing in: a record of each signed-in device (a hashed session token, a device label and when it was last used), and short-lived one-time codes when you sign in by email.
- What you put in Nocturne: your spaces and their layout, pages, notes, journal entries, tasks, collections, templates and images you upload. Entries you mark private stay private within your workspace.
- Connections you make: the settings for each service you connect and the credentials it gives Nocturne. Credentials are encrypted at rest (AES-256-GCM) and only ever used on our server; they are never sent to your browser or to widgets. To show and search quickly, Nocturne also keeps the most recent results it read from each connection.
- Activity records: a log of what AI assistants you connect did in your workspace (the action and its outcome, never the words of your content), and a log of sign-in events for security.
- On your device: your theme choice, unsent drafts and a copy of your recent workspace data are kept in your browser’s storage, so Nocturne loads quickly and works offline. Clearing your browser’s site data removes them.
Nocturne uses only essential cookies: one keeps you signed in, one remembers which workspace you are in, and a short-lived one protects signing in with Google, GitHub or Apple. There is no advertising, no tracking across other sites and no third-party analytics.
Why we keep it
Only to provide Nocturne to you: to sign you in, to show and save your spaces and content, to show what your connected services hold when you ask, and to keep the service secure. We do not sell your data, use it for advertising, or use it to train AI models.
Google user data
You choose whether to connect Google, and which kinds of access to give. Nocturne asks for the least access that does what you chose.
| If you choose | Nocturne can | Why |
|---|---|---|
| Sign in with Google | See your Google account identifier, name and email address | To sign you in and to show who you are signed in as |
| See my calendar | Read your calendar’s events | To show your upcoming events in your calendar widgets |
| Add and change events | Create and change events in your calendar | So you can add or reschedule an event from Nocturne. It only does this when you ask, and never invites guests |
| Read my email subjects | See who wrote, subject lines and labels, not the message itself | To show important mail and follow-ups in your inbox widget |
| Read whole emails | Read the messages in your mailbox | To show a whole conversation when you open it, and to search your mail from Nocturne |
| Tidy my inbox | Archive, mark as read and star messages | So you can tidy your inbox from Nocturne when you choose to. Nothing is ever deleted |
| Write drafts for me | Save drafts in your Gmail | So you can start a reply in Nocturne. Drafts wait in Gmail; Nocturne has no ability to send mail |
| See my recent files | See the names of your Drive files and when they changed, not what is in them | To show your recent files |
| See my contacts | Read your contacts | To show the people you work with alongside your calendar and mail |
How Google data is handled:
- It is shown only to you, and to people you have invited into the same workspace through the widgets in it. A connection made in a shared workspace can be used by everyone in that workspace; only the person who made it, or an owner, can change or remove it.
- If you connect an AI assistant such as ChatGPT or Claude to your workspace and allow it to search private content, it can read what your connections last returned, because you asked it to.
- It is never sold, never used for advertising, never used to train AI models and never transferred to anyone else, except as needed to provide the features above, to comply with the law, or as part of a merger or acquisition with your notice.
- Nobody at Lunar Computing reads it, unless you ask us to (for support), it is needed for security or to investigate abuse, or the law requires it.
- Access tokens are held in memory only. The refresh token Google issues is stored encrypted. When you disconnect Google, Nocturne revokes its access at Google and deletes the credentials.
Nocturne’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who else processes data
Nocturne runs on a computer operated by Lunar Computing. A few services help deliver it:
- Google, GitHub and Apple, when you choose to sign in with them or connect them.
- Resend, to send sign-in codes and invitations.
- Cloudflare, which carries traffic to nocturne.lunarcomputing.org.
- Apple iCloud, which holds encrypted copies of our backups.
The computer that runs Nocturne is in the United Kingdom.
How long we keep it
- Your content and connections: until you delete them, or your account is deleted.
- Earlier versions of pages and spaces are kept so you can restore them; they are deleted with the page or space.
- Signed-in sessions end after 30 days without use, or when you sign out or remove the device. Email sign-in codes expire within minutes.
- Backups are encrypted and kept on a rolling basis: the oldest are deleted as new ones are made.
- Error reports are deleted after 14 days. The record of what AI assistants did is kept in your workspace so you can check it, and is deleted with the workspace. Sign-in events are kept for security; when an account is deleted they no longer say whose they were.
Deleting your data
You can delete any page, space or connection yourself at any time, and download a copy of everything you own (Markdown, JSON and your original files) from Account › Your data. You can also delete your whole account there. Deletion waits 14 days, so you can change your mind; then your account, sign-ins and the workspaces only you own are deleted, the access Nocturne had to your connected services is revoked, and it leaves our backups as they are replaced. You can also email us at [email protected].
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict how we use it, and to complain to your data protection authority (in the UK, the Information Commissioner’s Office). Email us at [email protected] to use any of these rights.
Children
Nocturne is not meant for children. You must be 16 or older to use it.
Changes
If we change this policy in a way that matters, we will tell you in Nocturne or by email before the change takes effect.
Contact
Lunar Computing, Inc. · [email protected]