Privacy Policy
Last updated: 15 October 2026
Nolindra is provided by Çınar Çağlar, Ankara, Türkiye ("we", "us"), who is the data controller for the personal data described here. This policy explains what data Nolindra handles, why, and what you can do about it. Questions: privacy@nolindra.com.
The short version
- We keep your account (email address) and how many credits each task used.
- We do not keep your messages, your code or your scenes on our servers. They pass through our server to our AI model provider, Anthropic, to produce the agent's answers.
- Your chats stay on your computer.
- We don't use cookies, ads or analytics on our website.
What we collect and why
| Data | Why | Where it lives |
|---|---|---|
| Email address, password (stored only as a secure hash by our sign-in service) | To give you an account and let you sign in | Our database (EU) |
| If you sign in with GitHub or Google: your email address, name and profile picture link from that account | To create your account and sign you in | Our database (EU) |
| Credit balance and purchases | To run the credit system and billing | Our database (EU) |
| Usage records: time, number of tokens processed, credits charged, and whether a request succeeded | To charge the right number of credits, prevent abuse, and keep the service reliable | Our database (EU) |
| Invite records: which account invited which account | To give invite rewards | Our database (EU) |
| Payment details | Handled by our payment provider and reseller, Paddle.com — we never see your card number | Paddle |
Usage records contain numbers only — not what you asked, not your code, not your scene contents.
What happens to your project content
When you ask Nolindra to do something, the app reads what the task needs from the Unity Editor (for example a script, a list of objects in a scene, or a screenshot of a view) and sends it, together with your message, through our server to our AI model provider, Anthropic (Claude models), to generate the response. Our server checks your account and credits and passes the request on; it does not store the content. The provider processes it under commercial terms that do not allow it to train its models on this data.
Before anything is sent, the Unity plugin removes absolute file paths (such as your Windows user folder) from error messages. File paths inside your project (for example Assets/Scripts/Player.cs) are kept because the agent needs them.
Data on your computer
- Chats are saved in your user folder (
%APPDATA%\Nolindra\app). Each account that signs in on the computer has its own chats. You can delete them in Settings → Privacy & data. - Your sign-in session is stored encrypted with Windows' own data protection.
- Before Nolindra overwrites or deletes a script, the plugin keeps a backup copy in
%APPDATA%\Nolindra\backups, so changes can be reverted. - The Unity plugin only listens on your own computer (
127.0.0.1) and only accepts the Nolindra app on this computer.
Who we share data with
We don't sell personal data. We share it only with the service providers that run Nolindra:
- Hosting and database / sign-in: Supabase — EU (Ireland).
- AI model provider: Anthropic, PBC (United States) processes task content to generate responses, as described above. Under Anthropic's commercial terms this data isn't used to train its models.
- Payments: Paddle, which acts as the merchant of record and handles payment data under its own privacy policy.
- Account emails (sign-up confirmation, password reset): Resend, which sends them from the EU (Ireland).
- Website hosting and our email inbox: Cloudflare.
- Sign-in with GitHub or Google (only if you choose it): GitHub or Google confirm your identity under their own privacy policies.
This is the complete list of service providers (subprocessors) that handle personal data for Nolindra. We'll update this page before we add a new one. Unity Technologies is not one of them: the Nolindra Unity package works locally in your editor and sends nothing to Unity.
Studios and other business customers can ask for our data processing agreement (DPA) at privacy@nolindra.com.
Where data leaves the EU/EEA, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
- Account and credit records: while your account exists. When you delete your account, its credit records, usage records and invite records are deleted with it. Purchase and invoice records required by tax law are kept by Paddle, our reseller, under its own policy.
- Content of tasks: not stored on our servers.
Legal bases (EU/UK)
Running your account, credits and purchases: performance of our contract with you. Preventing abuse and keeping the service reliable: our legitimate interests. Accounting records: legal obligation.
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account and data, by writing to privacy@nolindra.com from your account's email address. In the EU/UK you can also object to processing, ask for restriction or portability, and complain to your data protection authority.
Security
Connections between the app, our server and our providers are encrypted (HTTPS). Access to our database is limited to what each part of the service needs, and your sign-in session on your computer is encrypted by Windows. If we learn of a breach that affects your data, we'll tell you and the relevant authorities as the law requires.
Children
Nolindra is not meant for children under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll say so in the app or by email before the change takes effect.