Privacy policy

Last updated: 13 October 2026.

In this policy, "locwinn", "we", and "us" mean Bamahut LLC, a California limited liability company, which operates locwinn.com.

locwinn exists for people who want discretion, so this policy is written to be actually readable. The one-line version: we keep the minimum needed to sell you a license and honor your uninstall choice, and we never see your browsing.

What we never collect

• Your browsing. The locwinn program does not send us the sites you visit, the things it blocks, or any usage telemetry — it has no channel for it. Part of the filtering is done by an outside family-safe filtering service, under its own privacy terms; it is not run by us, and we receive nothing from it.
• Your hardware identity. No hardware fingerprinting. An install is identified by a random ID the program generates, not by your machine's characteristics. (It does send your computer's name, so your account can show which device is which; see below.)
• Your card details. Payment goes directly to Paddle; card numbers never touch our systems.

What we store, and why

• Account: your email address and a sign-in identifier from Supabase Auth (the login service). Needed to know who bought what and where to send your key.
• Purchases and licenses: your plan, purchase records (amount, date, Paddle references), your license key, its status and expiry, when it was last checked during an install, and the time you agreed to the Terms when you bought.
• Install and removal records: when you install, a record of that install with your computer's name, your chosen removal mode and delay, and its removal password (encrypted for Nuclear mode). While locwinn is installed, it checks with our server whether your subscription is still active; that check sends the install's ID and nothing about your use, and we don't keep a record of it.
• Emails we send you, via Resend: sign-up confirmation codes and password resets, your license key, removal requests and passwords, renewal reminders, refund and payment-reversal notices, and notices when your plan is ending, has ended or is active again.
• Connection data: like any website, the services we use see your IP address when you connect. We use it only for a moment, to slow down abuse, and don't store it; our hosting and sign-in providers keep it in their own security logs.

Who processes it (subprocessors)

• Paddle — payments, subscriptions, billing portal. Paddle is our authorized reseller and the merchant of record: it is the seller for your purchase and handles billing, invoicing, and sales tax/VAT.
• Resend — transactional email delivery
• Supabase — sign-in and account identity (Supabase Auth) and database hosting (Postgres, United States)
• Render — website and API hosting (United States)
• GitHub — hosts the installer download
• Microsoft 365 — our support@locwinn.com mailbox, where the emails you send us arrive
• Anthropic — an AI assistant (Claude) that may help us answer a support email; a person reviews and sends every reply

Each processes data only to provide its service. No data is sold or shared for advertising — there are no ads, no analytics trackers, and no third-party marketing pixels on this site. AI is used only to help answer support emails, never in the product; see the AI policy.

Cookies

Signing in stores a session token in your browser's local storage — that's what keeps you signed in. A few small notes sit there too: that this browser has signed in before, when you agreed to the Terms at the buy button, and which expired licenses you hid in your account. Paddle's checkout window sets its own cookies when you pay. No advertising or analytics cookies, ever.

Deleting your data

You can delete your account yourself from your account — the Billing section has a delete control. First remove locwinn from every device (your account's Devices list shows them), so deleting can never leave a machine you can't remove it from. Deleting cancels any active subscription at the end of its paid period (no further charges), deletes your login, erases the per-device data we hold (device names, removal passwords) and removes your email address and login from the rest. What remains is kept that way: purchase and license records, which accounting rules require, and the timestamp of your agreement to the Terms at purchase, which auto-renewal law requires us to keep for three years. Prefer to have us do it? Email support@locwinn.com from your account address and ask. Either way, deletion is subject to what payment regulations require Paddle and us to retain (transaction records have legal retention periods). Paddle keeps its own record of your payments; ask Paddle about those.

Where and how long

Our database and servers are in the United States. Your data is kept while your account exists; we don't delete inactive accounts on a schedule, so if your license expires and stays inactive, delete your account or ask us to, as above. Paddle stores payment data under its own policy.

Changes and contact

If this policy changes materially, the "last updated" date changes and significant changes get announced by email. Questions: support@locwinn.com.