Privacy
What each project collects, who else sees it, and how long it is kept. Written to be checked against what the software does rather than to reassure. Everything here is in beta, and this page changes when the software does.
Lead Generation Service
- Your email address
- Identifies you and is where alerts are sent. It is stored until you ask for it to be removed.
- Your connections
- First and last name, company, position, profile URL and connection date, for each connection in the list you provide. These are stored until you replace them or ask for them to be removed. The email address column in the LinkedIn export is not read and is not sent.
- The file itself
- When you upload from the sync page, the CSV is read by your browser and only the fields above are transmitted. The file is not uploaded and no copy of it exists on the server. If you ask us to set you up manually and send the file another way, that copy exists wherever you sent it and is deleted from the server after it is processed.
- Before you confirm
- Between an upload and the click on the confirmation link, the parsed connections sit in a file on the server readable only by the web user. It is deleted when you confirm, and in any case after 24 hours.
- Alerts you are sent
- The five most recent alert emails are kept in full, so a message can be resent or checked against what you actually received.
- Which cases you were told about
- A record of docket numbers already sent to you, so the same case is not sent twice.
- The sync check
- "See if I'm synced" answers only about the address you type, and reports whether connections are on file. It is rate limited by a hashed form of your IP address, kept ten minutes.
Patent Progeny
- No account
- Searching asks for nothing about you. There is no sign-in.
- What you search for
- Application, patent and publication numbers are sent to the USPTO Open Data Portal, which is a public records system operated by the United States government.
- Retrieved documents
- Families and the file wrappers built from them are cached on the server and are removed as the cache fills. They are public records, and anyone who requests the same number receives the same documents, so the cache is not private to you.
- Your history
- The "recently searched" list is held by your browser. It is not sent anywhere and clearing your browser data removes it.
Donations
- Payment details
- Card numbers are entered on Stripe's page, not ours, and are not seen by this site at any point.
- What we can see
- Through Stripe's dashboard: your name, email address, billing address, the amount, and whether a monthly donation is still running. Stripe's own handling of that data is governed by their privacy policy.
- Link between a donation and a service
- A donation records which project it was for. It is not connected to any connections list or search history, and paying is not required to use anything here.
Everything on these sites
- Server logs
- The web server records IP address, time, requested address, referrer and browser string for each request, in the ordinary way. These rotate and are discarded within weeks.
- Cookies
- None on the public pages. The admin area sets one session cookie. There is no analytics and no advertising code on any page.
- Fonts
- Typefaces load from Google Fonts, which means Google receives the request and therefore your IP address when a page loads.
- Where it is held
- On one server rented from Hetzner, in Germany. Mail is sent through Titan and through that same server. Payments run through Stripe. Those four, plus the USPTO for searches, are the parties involved.
Removal, and asking what is held
Email noah@noahlot.com and say what you want removed. There is no automated deletion flow and no self-service export; both are done by hand. Stripe records tied to a payment are kept as long as the law requires them, which is not a decision made here.
Who runs this
Noahlot LLC. One person has access to the server and to everything described above. These are beta projects rather than a hardened product with a security programme behind it, and should be judged on that basis.
Last changed 6 August 2026.