Privacy Notice

Account information

Norexa stores account identifiers such as your name, username, email address, date of birth, verification state, plan, locale, and appearance preferences. Passwords are stored as password hashes, not readable passwords. Terms acceptance is recorded with a timestamp.

Security and sessions

Norexa stores authentication challenges as hashes, records security events, and tracks session metadata such as browser user-agent and session timestamps. IP addresses used for security and rate limiting are hashed before they are stored in authentication events or tracked sessions.

Email delivery records contain a keyed hash of the recipient, delivery status, event type, timestamp, and a safe provider error code. Provider credentials are not returned to the browser.

Website analytics and opt-out

Norexa automatically measures public page views and daily unique visitor records to understand which pages and countries are most visited. Admin and dashboard pages, search targets, and account details are excluded. The server immediately converts the connecting IP address into a keyed HMAC fingerprint for duplicate counting; raw IP addresses are not written to the analytics database or shown in the admin dashboard. When the hosting proxy does not provide a country, the server may send the IP address to IPWho.is to determine its country; the provider's own privacy and retention terms then apply. The fingerprint remains pseudonymous data, not anonymous data, and is deleted after 90 days. Aggregated page views and daily counts are retained for historical reporting; a daily visitor record counts an IP once on that day and does not represent a distinct person across longer periods. Shared networks can cause several people to count as one, and changing IP addresses can cause one person to count more than once. Country is approximate and may remain unknown if the proxy and geolocation provider cannot resolve it. You can disable future website analytics at any time using the control below. Analytics laws differ by region; consult applicable requirements for your deployment.

Research and providers

Search history and saved investigations can include the target, tool, status, summary, and result data needed to show your research. When you run a provider-backed search, the relevant target is sent to that provider to retrieve results. Provider availability and data handling are governed by the provider's own terms.

Exposure Intelligence email checks compute SHA-256 in your browser and send only its first 24 hexadecimal characters to Norexa and LeakCheck. Norexa does not receive or retain the original email for these checks. LeakCheck returns breach-source names, dates, and exposed-data categories, not leaked values. Review LeakCheck's Public API documentation at https://docs.leakcheck.io/public-api/lookup and privacy policy at https://leakcheck.io/privacy; provider processing is governed by its own privacy policy. Username breach-source lookups send the username to LeakCheck. Password strength checks stay in your browser and do not query a breach database. Domain-wide exposure and password-compromise API checks are not provided by this free integration.

Files are sent to VirusTotal only after the scanner consent step. Social connections store the profile details needed to display a connected account; provider authorization records may be handled by the authentication integration.

Email

Transactional email is sent through the configured Brevo API or SMTP transport. The delivery provider necessarily receives the recipient address and message contents to deliver an email. Norexa records delivery outcomes without storing the recipient address in its email event log.

Retention and requests

The product does not currently expose a self-service account deletion control. Records may be retained for account operation, security, audit, and legal requirements. Contact support@h4xstore.com to request access, correction, or deletion and to ask about applicable retention.

Contact

For privacy or security questions, contact support@h4xstore.com or security@h4xstore.com.