Privacy Policy
1. Overview
WindowPin (the 'Software') collects no information that identifies you. Note content never leaves your PC, and apart from the optional news and update-check features described in sections 4 and 5 the Software contacts no server at all.
2. What we do not collect
No names, e-mail addresses, phone numbers, account credentials, precise location, advertising identifiers, contacts, file listings, screen contents or keystrokes. There is no sign-up and no sign-in.
3. Data stored on your PC
To provide its features the Software stores the following only in %APPDATA%\WindowPin on your computer: the note text and checklist items you type, each note's color, size, opacity and position, the window information used to re-lock a note (executable name, window class name, window title), and application settings. These are plain, unencrypted JSON files, so you should not keep passwords, government identification numbers, card numbers or similar data in notes.
4. News and announcements (optional, on by default)
When 'Receive news and announcements' is enabled in settings, the Software contacts the developer's server (api.windowpin.com) every six hours to fetch the list of items to display. Exactly four things are sent: your display language code (for example ko), the application version (for example 2.0.0), the operating system family (win), and a random string generated once at installation. That random value exists only to avoid counting the same item twice; it identifies neither a person nor a device and is never combined with any other data. Whether an item was shown, clicked or dismissed is recorded the same way. IP addresses are not stored. Note content is never transmitted under any circumstances. If you turn this setting off, none of this is sent; with the update check (section 5) also off, the Software contacts no server at all.
The same channel also reports, once each, that the Software was run for the first time, that a note was locked onto a window for the first time, and that the Software was still in use on day 1, day 7 and day 30 after installation. Which window or what was written on the note is never sent; only that such an event happened is counted. These values are likewise not sent if the setting above is turned off.
5. Update check (optional, on by default)
When 'Check for updates on start' is enabled, the Software contacts the same server to read the latest version number. No personal data is sent.
6. Website analytics (windowpin.com)
The website counts visits on our own server. It sets no cookies and includes no third-party analytics (no Google Analytics or similar). Opening a page sends four values and nothing else: the page language (for example ko), the path (for example /ko/), the referring domain only — never the full URL, so search terms are never stored — and a device class derived from window width (desktop, tablet or mobile).
To count unique visitors we store only a hash of the connecting IP and browser string combined with a random value that changes every day. The hash cannot be reversed to an IP address, and because the daily value changes, the same person produces a different hash tomorrow — so visitors cannot be followed across days. The IP address itself is never stored. Country figures use only the country code supplied by Cloudflare.
If your browser sends a Do Not Track or Global Privacy Control signal, nothing is sent at all. These visit records are deleted after 90 days.
7. Third parties
Because no personal data is collected, none is shared with or processed by third parties. The Software contains no third-party advertising network and no analytics SDK; announcements are written by the developer and served from the developer's own server.
8. System access
To keep a note locked to a window, the Software uses Windows accessibility events (SetWinEventHook) and window geometry APIs to observe window move, resize, minimize and close events and to read a window's title, class name and executable name. This is used only to compute where a note should appear on screen and is never transmitted. The Software does not log keystrokes and does not capture the screen.
Browser tabs: when 'Tell browser tabs apart' is on (the default), the Software uses Windows UI Automation to read the address bar of the active tab in a browser window (Chrome, Edge, Firefox and similar), so that a note pinned to a site appears only on that site's tab. Only the host name (for example github.com) is kept, as part of that note's attachment record. Page content is never read, and nothing is transmitted.
Local tool access: when 'Allow tool access (MCP)' is on (the default), the Software opens a named pipe that only your own Windows account on this PC can connect to. Tools you run yourself, such as an AI assistant connected through MCP, can use it to list open windows and to read, create, change or delete notes. It cannot be reached from the network and can be turned off in settings.
Team sync (licence required, off unless you set it up): when you choose a shared folder, each note you mark 'Share with the team' is written into that folder as a file — its full record, including the text, checklist, colour, tags and the details of the window it is pinned to (executable name, window title) — together with a random identifier for this installation, and shared notes that others wrote there are read back. Nothing passes through the developer's server. Who can read the folder is decided by you and by whoever provides it (for example a company network drive or a cloud storage service). Notes not marked as shared are never written there.
9. Retention and deletion
Notes remain on your PC until you delete them. Deleting the %APPDATA%\WindowPin folder after uninstalling removes all local data. Aggregate counters on the server are deleted after twelve months.
10. Your rights
All note data resides on your own computer, so you may view, edit or delete it at any time. News delivery and the update check can be switched off in settings at any time.
11. Children
The Software is not directed at children and collects no personal information from anyone.
12. Changes
If this policy changes, the document is updated with the release and the effective date is revised.
13. Android app (WindowPin for Android)
The Android app does not request the internet permission (android.permission.INTERNET). It therefore cannot talk to any server, and it has none of the news or update features described in sections 4 and 5. Note text and colour, the package name and display name of the app a note is pinned to, and the on-screen position of the note card are stored only in the app's private storage on your phone. If Android backup is turned on, the Android operating system may include the notes file in your Google account backup, which follows Google's policies. We cannot access that backup.
The app uses two special permissions, and only after you grant them. "Display over other apps" is used to float the note card above an app. "Usage access" is used only to check whether the app currently in front is one you pinned a note to; the app does not store or aggregate which apps you used, when, or for how long. While notes are on, Android requires a status notification to be shown. Uninstalling the app deletes all notes.