Privacy

Updated 28 September 2026

Noda Terminal is a local-first application. Your workspace, settings, watchlists, journal, notes and research live in a database on your own computer. There is no Noda account for the application itself, no analytics, no crash reporting and no usage tracking. What follows is everything that leaves your machine, and why.

Provider credentials

Market data, brokerage and AI features work with keys you obtain from the providers yourself. Those keys are kept in an encrypted vault on your computer; the key that seals the vault is held by your operating system's credential store (Windows Credential Manager or the macOS Keychain). Keys are sent only to the provider they belong to, when the application makes a request on your behalf. They are never sent to Noda.

Data providers

When you use a widget, the application talks directly to the provider it is configured for: for example Alpaca, Polygon, Finnhub, Interactive Brokers, Yahoo Finance, the SEC's EDGAR system, and the news and filing feeds the news widgets read. Each provider sees the requests the application makes with your key (such as which symbols you look up) and handles them under its own privacy policy. Noda is not in the path.

Some widgets can send text to an AI provider you have connected (OpenAI, Anthropic, Google Gemini or xAI). Nothing is sent to an AI provider unless you ask for it, and only the content of that request is sent.

Update checks

On launch the application asks nodaterminal.com whether a newer version exists. That request carries the version you are running and your platform, and nothing else. The site is hosted on Vercel, whose servers keep ordinary request logs (IP address, time, path) for a short period. Downloading an installer from this site goes through the same host.

The community

The community (chat, presence and the research library) is the one part of Noda that has an account. If you choose to join:

• Sign-in is by email. Your address and the sign-in codes sent to it are handled by Supabase, which hosts the community, and the emails are delivered through Resend from noreply@nodaterminal.com.
• Payment is handled by Stripe in your browser. Noda never sees your card number. Stripe tells us the subscription's status, the plan, and the email it was paid under, which is what opens the door.
• Messages, files and images you post, and your presence, are stored on the community server and are visible to other members. Your display name is whatever you set it to.

Cancelling the subscription ends access at the end of the paid period. To have the account and its data deleted, write to the address below.

Updates by email

If you leave your address on the front page, it is stored with Resend, which sends the emails, and used for one thing: telling you about Noda releases. It is not shared or sold, and it is not joined to a community account even if you have one. Every email carries a link that takes you off the list at once. To have the address deleted outright, write to the address below.

This website

This site sets no cookies. It counts visits with Vercel Web Analytics, which records the page you viewed, the site that linked you to it, your approximate location (country, region and city), and your browser, operating system and device type. Visitors are told apart by a hash of the request that is discarded after 24 hours, so a visit is never tied to a person or an IP address. The page font is loaded from Google Fonts, which sees the request for the font file.

Contact

Questions about any of this: support@nodaterminal.com.