Privacy policy

Last updated: 15 August 2026.

In this policy, "locwinn", "we", and "us" mean Bamahut LLC, a California limited liability company, which operates locwinn.com.

locwinn exists for people who want discretion, so this policy is written to be actually readable. The one-line version: we keep the minimum needed to sell you a license and honor your uninstall choice, and we never see your browsing.

What we never collect

• Your browsing. Blocking happens entirely on your own machine. The locwinn program does not send us the sites you visit, the things it blocks, or any usage telemetry — it has no channel for it.
• Your hardware identity. No hardware fingerprinting. An install is identified by a random ID the program generates, not by your machine's characteristics.
• Your card details. Payment goes directly to Paddle; card numbers never touch our systems.

What we store, and why

• Account: your email address and a sign-in identifier from Supabase Auth (the login service). Needed to know who bought what and where to send your key.
• Purchases and licenses: your plan, purchase records (amount, date, Paddle references), your license key, its status and expiry, and when it was last validated (once, at install).
• Install and removal records: when you install, a record of that install with your chosen removal mode and delay; for Nuclear mode, your removal password (encrypted) and, if you named one, your accountability partner's email address — used only to send them the removal password when your delay is up.
• Emails we've sent you: the license-key and removal-password emails, via Resend.

Who processes it (subprocessors)

• Paddle — payments, subscriptions, billing portal. Paddle is our authorized reseller and the merchant of record: it is the seller for your purchase and handles billing, invoicing, and sales tax/VAT.
• Resend — transactional email delivery
• Supabase — sign-in and account identity (Supabase Auth) and database hosting (Postgres)
• Render — website and API hosting
• GitHub — hosts the public installer download

Each processes data only to provide its service. No data is sold or shared for advertising — there are no ads, no analytics trackers, and no third-party marketing pixels on this site.

Cookies

Signing in stores a session token in your browser's local storage — that's what keeps you signed in. No advertising or analytics cookies, ever.

Deleting your data

You can delete your account yourself from your account — the Billing section has a delete control that removes your account and license records once you confirm. Prefer to have us do it? Email license@locwinn.com from your account address and ask. Either way, deletion is subject to what payment regulations require Paddle and us to retain (transaction records have legal retention periods). Note that deleting your account while a Nuclear removal delay is pending would strand that install's removal password — resolve the pending removal first.

Where and how long

Data is stored in the United States and kept while your account is active. If your license expires and stays inactive, you can request deletion at any time as above.

Changes and contact

If this policy changes materially, the "last updated" date changes and significant changes get announced by email. Questions: license@locwinn.com.