Privacy
What we collect, and what we don't.
The cwdio application has no telemetry. It contains no analytics SDK, sends no usage data, and does not contact any server in order to run. Your files, file names, search queries and terminal history never leave your machine. This page is about the website, which collects a little more than nothing — and says exactly what.
Last updated 31 July 2026.
Who is responsible
cwdio is the data controller for this website. You can reach us at hi@cwdio.com about anything on this page, including a request to see, correct, export or delete your data.
The application
- No telemetry, no analytics, no phoning home. There is no setting to turn off, because there is nothing running.
- Your credentials stay local. AI provider keys and SFTP/FTP server credentials are stored on your machine and encrypted by Windows. They are never uploaded.
- Crash reports are opt-in. If the app detects it closed unexpectedly it offers to open a pre-filled bug report. Nothing is sent unless you choose to send it, and your username, home directory path and email addresses are removed from the log excerpt first.
- Licences are verified offline. A licence is a signed token checked on your own machine, so registering never turns into a check-in when the app starts.
- Update checks. An installed copy asks our update server whether a newer version exists. That request necessarily reveals your IP address and the version you are running, as any download does. It contains nothing else, and the portable build does not do it at all.
The website
If you ask for a founding licence
We store the email address you enter, the date and wording of the consent you gave, and — once issued — the licence associated with it. We use this to send you a confirmation link, to send you your licence key when version 1.0 is released, and to send occasional short notes about what has shipped.
The legal basis is your consent. You can withdraw it at any time using the unsubscribe link in any email, or by writing to us — and doing so does not affect a licence already issued, because that licence works offline and independently of any record we hold.
We keep the record while the founding programme is open and for as long as you remain subscribed. If you unsubscribe we keep only what is needed to honour that (so we do not re-add you) and to evidence that a licence was legitimately issued.
Analytics
- Cloudflare Web Analytics runs for everyone. It sets no cookies and builds no profile — it counts page views and referrers in aggregate. This is why the site has no cookie banner for it.
- Google Analytics is off until you allow it. It sets cookies, so it loads only after you choose "Allow" in the banner. Choose "No thanks" and it never loads. Your choice is remembered in your browser's local storage, not on our servers, and you can change it by clearing site data.
- Download counts are aggregate. We count how many times a download link is used. No identifier is stored against it.
Server logs
Our host processes standard request data (IP address, user agent, requested URL) to serve the site and to protect it from abuse. This is the legitimate interest of running a website securely.
Who else processes your data
- Cloudflare — hosting, the database that holds registrations, and the download files. The registration database is created under Cloudflare's EU jurisdiction, which restricts storage and processing to the European Union.
- Resend — delivers the confirmation and licence emails, from its EU region (Ireland).
- Google — Google Analytics, only if you consented. This involves a transfer to the United States under the EU–US Data Privacy Framework.
- GitHub — hosts the released files and the issue tracker. Downloading a release or opening an issue is subject to GitHub's own privacy policy.
We do not sell your data, and we do not use it for advertising or profiling.
Your rights
If you are in the EEA or the UK you can ask us for a copy of your data, to correct it, to delete it, to export it, or to object to how we use it. Write to hi@cwdio.com and we will respond within one month. You also have the right to complain to your national data protection authority.
Cookies
The site sets no cookies of its own. Google Analytics sets cookies only after you consent. Your consent choice itself is kept in local storage, which is not sent to any server. With JavaScript disabled, nothing is set and no banner appears.
Changes
If this policy changes materially we will update the date at the top, and — where the change affects data we already hold — tell subscribers by email.