Northern Lights Labs App Store

Terms & Privacy

Effective September 9, 2026

Terms of Service

Using the NLL App Store

These terms govern access to tools.nlightlabs.com, its customer accounts, and software made available through the Northern Lights Labs App Store. Browsing the catalog means you may view the listings. Downloading requires a verified account and acceptance of these terms.

Accounts and access levels

Accounts are personal and must use an email address you control. New accounts begin as members. Administrators may publish and manage applications. The owner controls roles, account status, and administrative access. Do not share credentials or use another person’s identity.

Authorized downloads

Every application is visible to everyone, but downloads are limited to signed-in accounts that meet the application’s minimum role: member, admin, or owner. Access to one release does not grant access to every release or application. Northern Lights Labs may change availability or permissions and may suspend or ban accounts to protect the store, its users, or its software.

Software rights and acceptable use

Store access does not transfer ownership of Northern Lights Labs software, branding, source code, or other intellectual property. Any license or terms supplied with a particular application also apply. You may not bypass access controls, impersonate another person, interfere with the service, redistribute restricted releases, probe for vulnerabilities without written authorization, or use the store unlawfully.

Installer warnings and verification

Some NLL installers are not signed with a paid public code-signing certificate. Browsers may describe a download as uncommon and Windows may show “Unknown Publisher.” Keep normal device protections enabled. When a SHA-256 value is listed, it can be used to verify that the downloaded file matches the published release.

Availability and responsibility

Software and the store are provided on an “as available” basis. To the extent allowed by law, Northern Lights Labs disclaims implied warranties and is not responsible for indirect, incidental, or consequential loss arising from use of the store or its software. Nothing here limits rights or liability that cannot lawfully be limited.

Changes and contact

These terms may change as the store evolves. Material changes will appear here with a revised effective date. Questions may be sent to drminty17@gmail.com.

Privacy Notice

Information handled by the store

This notice describes information processed when you sign in to, administer, or download software from the NLL App Store. Browsing the public catalog does not require an account.

Information we process

Northern Lights Labs does not store your Google password, email one-time code, or raw IP address in the App Store account database.

How information is used

Information is used to authenticate accounts, enforce account bans and per-app role requirements, deliver downloads, show personal download history, operate the store, investigate abuse or failures, and preserve security and publication records. A download entry records that authorized delivery began; it does not prove transfer completion, installation, execution, or later use.

Service providers and sharing

Cloudflare provides authentication, application protection, Worker hosting, D1 database storage, and private R2 file storage. If you choose Google sign-in, Google authenticates your Google account and returns basic identity claims to Cloudflare. Northern Lights Labs does not sell App Store account data or use it for advertising.

Retention and requests

Account, download, and administrative records are retained as needed to operate and protect the service, maintain audit integrity, resolve disputes, and meet legal obligations. Banning an account prevents future protected access but does not erase its prior records. You may request access, correction, or deletion review by emailing drminty17@gmail.com. Some records may need to be retained for the purposes described above.

Service architecture

How the store operates

Cloudflare Access verifies customer and administrator identity before protected requests reach the App Store Worker. The Worker enforces NLL account roles and bans, stores account and activity records in D1, and delivers approved installer files from private R2 storage. Administrative image and installer uploads are verified before catalog publication, and catalog updates use concurrency checks to avoid silently overwriting a newer change.

Published releases use version-specific download paths. Rejected release artifacts may be retained so publication history remains reviewable. Operational logs and the download ledger are visible only to authorized account holders at the appropriate role.