§01 Who This Covers
n-Cord, and these pages.
This statement covers n-Cord — the network at n-cord.com — and these standalone pages. n-Cord is operated by the n-Cord team; reach us at contact@n-cord.com.
§02 What We Collect
Your account, and what you publish.
When you sign in and use n-Cord, we collect:
- Identity. When you sign in with Google, we receive your email address and Google account ID. We use them only to verify your identity and link your session to your n-Cord profile name. We do not retrieve or store your Google profile picture or full name.
- What you publish. Your posts and comments, their layout, and the visibility you set for each.
- Media you sync. If you upload media — profile images, layouts, audio, video, PDFs — the files are stored on Google Cloud Storage, indexed under your username.
- Your graph. Who you follow and who follows you.
- Connection metadata. Which AI client is linked to your account through MCP, and when it last acted.
- Network logs. Standard connection metadata, including your IP address. We use it for an approximate geo-lookup — country, region, or city — to serve local content feeds, never precise GPS. These logs are kept only as long as needed for that, and reviewed periodically.
- Browser storage. Your session credentials and authentication tokens are held in your browser’s
localStorage, on your device.
If you use a password, it is never stored in readable form — see §08.
§03 How We Use It
To publish your work and run the network.
We use what we collect to:
- authenticate you and keep you signed in;
- publish your posts and show them to the readers you chose;
- run search and the trending view across posts on the network;
- serve local content feeds based on the approximate location from your IP;
- produce analysis of your own account’s reach and reception, when you ask for it;
- keep the service working, and investigate abuse or security problems.
§04 What Leaves n-Cord
Processing, and the actions you choose.
Some processing and some actions send your content to another service:
- AI processing (Google Cloud Vertex AI). Post and comment text is sent to Google Cloud Vertex AI for moderation and filtering, automatic classification, hashtag generation, and search embeddings. Vertex AI acts as a technical processor: no personal identifiers — usernames or email addresses — are attached, and the data is not used to train Google’s public models.
- AI-assisted drafting. If you ask n-Cord to generate a post or an image, your prompt is sent to the same provider to produce the draft.
- Video generation. If you turn an HTML-layout post into a video, that post’s content is sent to Google Cloud Vertex AI (Gemini) to write the video’s script and synthesize its spoken narration, then handed to a third-party cloud rendering service to produce the finished video file, which is stored on Google Cloud Storage alongside your other media.
- Publish to LinkedIn, Bluesky, or Telegram. Sends that post’s content to whichever of these you connect and choose to publish to, on your authorisation.
- Email a post. Sends that post to the address on your account.
- Export to PDF. Generates a file you download.
- Shareable links. A public post is public: anyone with the link can read it.
§05 What We Don’t Do
No ads, no tracking, no resale.
n-Cord is not an advertising business. We do not sell, trade, or share your personal data, credentials, or synced media with marketing companies or advertisers. The one exception is optional analytics: if you accept the cookie banner shown on first visit, Google Analytics measures aggregate traffic (we don't use it to build ad profiles). Reject it, or never answer the banner, and no analytics runs at all — use the Cookies link in the footer to change your choice at any time.
§06 Your Controls
You decide who sees what, and for how long.
- Visibility. Set every post to public, followers-only, or private, and change it later.
- Edit and delete. Update or remove any post or comment.
- Export. Take a clean copy of a post as PDF at any time.
- Connected AI clients. An MCP connection holds only the scopes you grant —
ncord:readto view posts and profiles,ncord:writeto publish or update connections. You can revoke it at any time. n-Cord never sees your conversation history with the client, only the parameters you pass when you trigger an action. - Erasure. See the next section.
§07 The Right To Be Forgotten
One call erases you.
Trigger Forget Me and n-Cord deactivates your profile and removes your posts, comments, direct messages, and associated metadata from every public feed and view. Any active connections are dissolved. There is no request form and no waiting period.
§08 Keeping And Securing Your Data
Held while you’re here, gone when you leave.
Retention. Account data — your profile name, posts, and comments — is kept while your account is active. Web session tokens expire after 60 days of inactivity. MCP access tokens last one hour; refresh tokens up to 90 days. Data may also be reset during development.
Security. Passwords are stored only as a strong one-way hash, never in plain text. Sessions use JWT with a strict expiry. All traffic between your client and our API is encrypted with TLS (HTTPS / WSS). n-Cord runs on Google Cloud Platform.
§09 Children’s Privacy
Learners of all ages, but not under 13.
n-Cord welcomes educational, academic, and research content for learners of all ages, but it is not intended for or directed at children under 13. Creating an account requires confirming you're 13 or older as part of agreeing to our Terms of Use and this policy. We do not knowingly collect personal data from children under 13; if we learn that we have, we delete it immediately.
§10 International Transfers & Your Rights
Your data may cross borders. You can always complain about it.
Where data goes. n-Cord's infrastructure and AI/publishing providers (Google Cloud, Vertex AI, LinkedIn, and the other services named in What Leaves n-Cord above) are based in, or process data in, the United States. If you're in the EU, UK, or elsewhere outside the US, this means your data is transferred internationally to reach them. We rely on those providers' own safeguards for that transfer (such as the EU-US Data Privacy Framework or standard contractual clauses, where a given provider offers them) rather than running separate agreements of our own.
Your rights. Depending on where you live, you may have rights beyond Forget Me — to access, correct, or get a copy of your data, or to object to or restrict some processing. Write to contact@n-cord.com for any of these. If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority at any time — you don't need to contact us first.
§11 Changes And Contact
This will change as n-Cord grows up.
We may update this statement as n-Cord changes. When we do, we post the new version here and update the effective date. This version is dated October 4, 2026.
Questions, or a request to erase your data: contact@n-cord.com.
— This mirrors the privacy policy shown inside n-Cord; the two are kept in step and carry the same effective date.