Privacy Policy
Last updated: October 25, 2026
This Privacy Policy explains how Glidvo, the operator of Winstis ("we", "us" or "our"), collects, uses and protects your personal information when you use the Winstis website, desktop application and related services (the "Service").
1. Information we collect
1.1 Account information
When you create an account we collect your email address. Your password is stored only in hashed form; we cannot read it.
1.2 Device information
To let you manage the devices signed in to your account, we may collect the device type, operating system version and computer name.
1.3 Usage and service records
For billing, abuse prevention and service quality, we record how you use account-linked features, such as cloud storage use, sign-ins, and requests to our servers.
1.4 Payment information
Payments are processed by our Merchant of Record, Paddle.com. We do not receive or store your full card number. We receive information about your order, such as the plan, amount, country, and the email on your receipt.
1.5 Approximate location
We infer your country from your IP address to calculate taxes and monitor service quality. We do not store your raw IP address as part of your profile.
2. What stays on your computer
- Plugins and their local data. Plugins run on your computer, and the data they store locally stays on your computer unless you choose to use cloud storage or a plugin sends it somewhere.
- Plugin activity log. Winstis keeps a log of what plugins do so you can review it. This log is stored locally.
- Cloud storage and hosted repositories. If you use these optional features, the content you put in them is stored on our servers so that we can provide them to you.
Plugins are made by independent developers. A plugin may connect to its own services; its developer, not us, is responsible for what it collects. The permissions screen shown at install time tells you what a plugin can access.
3. How we use information
- to provide, maintain and improve the Service;
- to process orders and send service-related messages;
- to provide customer support;
- to detect and prevent fraud, abuse and security problems;
- to comply with legal obligations.
We do not sell your personal information and we do not use it for advertising.
4. Security
We use industry-standard measures, including encrypted connections (TLS), hashed passwords and short-lived access tokens. No system is perfectly secure, and we cannot guarantee absolute security.
5. Service providers
We use trusted providers to run the Service. They process data only to provide services to us:
- Paddle.com for payments, tax and invoicing;
- hosting and content delivery providers for our servers and website;
- an email provider for account and service emails.
6. Sharing and disclosure
We share personal information only:
- with the service providers above;
- when required by law or a valid legal request;
- to protect the rights, property or safety of us, our users or the public;
- in a merger, acquisition or sale of assets, in which case we will notify you first.
7. Retention
We keep personal information as long as needed for the purposes above. When you delete your account, we delete or anonymize your personal data within a reasonable time, unless the law requires us to keep it longer (for example, transaction records).
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data by deleting your account;
- object to or restrict certain processing;
- receive your data in a portable format.
To use any of these rights, email us at the address below.
9. Cookies and analytics
Our website may use cookies and similar technologies to keep you signed in and, where we use them, to measure traffic in aggregate. You can control cookies in your browser settings. Blocking some cookies may affect parts of the site.
10. International transfers
Your information may be processed on servers outside your country. Where required, we use appropriate safeguards for such transfers.
11. Children
The Service is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes
We may update this policy from time to time. If a change is significant, we will let you know in the app or by email.
13. Contact
For privacy questions or to use your rights, email privacy@winstis.com.