Privacy Policy
Last updated 2026-09-07 · NoirShield 1.0.0
In short: NoirShield has no accounts, sends no personal data to our servers and keeps no browsing history. The only data that leaves your device is the DNS lookup itself, encrypted, to the public resolver you selected.
1. Controller
The controller for this app is 7Stockapp OÜ (Estonia), registry code 16976938, registered at Ahtri tn 12, Kesklinna linnaosa, 15551 Tallinn, Harju maakond, Estonia. Privacy enquiries: [email protected].
2. How the app works
NoirShield is a network utility. It uses the operating system's local VPN interface solely to process DNS queries inside the device. All of your other network traffic flows over your ISP connection exactly as before. There is no remote exit node, relay or proxy; your IP address does not change and your HTTPS traffic is never decrypted.
3. Data we process
| Data | Status | Where | Retention |
|---|---|---|---|
| DNS queries | Processed on device | This device | Session |
| Blocked counters | Stays on device | This device | Session |
| Settings and rules | Stays on device | This device | Until you change it |
| Activity log | Stays on device | This device (memory) | Session |
| Diagnostics results | Stays on device | This device | Session |
| Account / email | Not collected | — | — |
| Crash logs | Not collected | — | — |
| IP address history | Not collected | — | — |
| Sites visited | Not collected | — | — |
| Traffic contents | Not collected | — | — |
| Blocklist and update requests | No identifiers sent | Our server | Not recorded |
| Address, technical delivery only | Seen, never stored by us | Cloudflare and host | 30 days maximum |
4. DNS resolvers
Your lookups go to the public resolver you select. These providers are independent controllers and handle those queries under their own policies:
- Quad9 — Quad9 Foundation (Switzerland) · policy
- Cloudflare — Cloudflare, Inc. · policy
- Google Public DNS — Google LLC · policy
We are not affiliated with, endorsed by or partnered with any of them, and you may use none of them by entering a resolver of your own. The app also contacts a small number of public endpoints for country detection and connectivity tests; those requests carry nothing that identifies you.
5. Blocked-name logging
By default the app records only how many domains were blocked. If you switch on "Log blocked names" in Settings, the names are recorded too, which turns the activity log into browsing history. That log lives in your device's memory only, is never sent to us, and is not retained across restarts unless you separately enable retention.
6. Our own server
The app contacts one server of ours, noirshield.7stock.app, and
only for these four things:
/api/v1/blocklists/latest/— downloading the signed blocklist tables./api/v1/config/— the app's own configuration, such as which list versions are current./probe/reachability— a connectivity check that returns a fixed, short answer./probe/where— a two-letter country code, used on your device to pick a compatibility profile. Your address is never returned and never stored.
These requests carry no account, no cookie, no device identifier and no advertising identifier, because the app has none. They say nothing about what you looked up, what you visited or what was blocked. No downloaded file is used unless its signature verifies against the public key built into the app.
As with any request to any website, our server necessarily sees the address a request came from. We do not write it to an application log, do not associate it with a person or a device, and never use it for analytics, profiling or advertising. Cloudflare, Inc., which serves this site as CDN and reverse proxy, and our hosting provider may keep short-lived connection logs for delivery, security and abuse prevention; both act solely as our processors and neither is given that data for any other purpose. Raw HTTP request logs are not retained on our plan, and nothing across these layers is kept for longer than 30 days. Beyond that we hold no server-side record about you at all, so there is nothing for us to retain, share or sell.
7. How this is disclosed to you
None of this is left to this page alone. Before the app can be used at all, a consent screen presents this policy and the Terms of Use and requires you to accept them; the accepted version is recorded, so a later change to the wording asks you again rather than resting on the old consent. Inside the app, Settings → Privacy shows the same inventory as section 3 above — each item, where it lives and how long it is kept — and states that no CA certificate is installed and no HTTPS traffic is ever decrypted. The DNS and Protection screens repeat in place that no lookup history is kept and that nothing is uploaded. The resolver picker links each provider's own privacy policy at the moment you choose one.
8. Your rights
Because we hold no records about you, there is no personal data for you to access, correct or erase on our side. Everything on your device is removed when you uninstall the app. For questions under the GDPR or Turkish KVKK, write to [email protected].
9. Children
The app is not directed at children and collects no personal data, including age.
10. Changes
If this policy changes, the date at the top is updated. Any change that widens what is collected will also be announced inside the app.