NORIA privacy policy

NORIA is a private dashboard at noria.youssefwilliam.com for one person, Youssef William. Only the owner's approved Google account can sign in. There are no other users and no public accounts.

Signing in shares only the Google account identity: email address and account id.

When the owner connects a Google account, NORIA asks for read-only Google Calendar access (calendar.events.readonly and calendar.calendarlist.readonly) to show the owner's calendars and events. It never creates, changes or deletes anything in Google.

Data is stored in a private database hosted by Railway in the EU (Amsterdam). Access tokens are encrypted at rest with AES-256-GCM, using a key kept outside the database. All traffic uses HTTPS.

Google user data is used only to show the owner their own information in this dashboard. It is not sold, shared with third parties, used for advertising, or used to train AI models.

NORIA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting a Google account from the dashboard's settings can delete its synced calendar data. Access can also be revoked at any time from Google account permissions.

Questions about this policy: youssef.william997@gmail.com