Privacy policy

The site sets no cookies and builds no visitor profile. Pages load Vercel Web Analytics, a cookieless script that counts page views, referrers, and coarse location in aggregate; it tells visitors apart within a single day by a rotating hash and cannot recognize you the day after. The site also counts three clicks — Download, Get Pro, and checkout opened — recording only the product name and where on the page the button sat. That is the complete event list. Vercel and Cloudflare, the hosts, process standard request logs (for example, IP address and requested path) to serve pages and downloads; Index9 reads aggregate counts from those logs, never individual entries.

Buying Pro opens Paddle's checkout in an overlay loaded from paddle.com. Paddle collects your payment details, billing address, and email directly, as the Merchant of Record. Index9 never receives or stores your card number. See Paddle's Privacy Policy.

When a purchase completes, Index9 records three fields tied to that transaction: the derived license key, the product name, and the Paddle transaction ID. No name, email, or payment detail is stored by Index9 — Paddle sends the receipt. This record lets the app verify a Pro key later. A refund deletes the record and revokes the key. Index9 does not sell this data.

Each app sends its license key to index9.dev to confirm it is still valid. The request carries the key only, no device name or identifier, and Index9 does not record which Macs use a key. There is no per-Mac activation.

Both apps check for signed updates at updates.index9.dev (Cloudflare). Sparkle system profile is off. Both apps may send content-free usage events via TelemetryDeck (EU); they are on by default and turn off in Whetstone's Settings → General → Privacy and Windrose's status menu (Windrose 0.5.1 and earlier send none). Either app may send a crash report to Sentry (US) only after you choose to send it — a post-crash prompt, Whetstone Settings, or the Windrose status menu. Those reports include a per-install ID and are retained for 90 days by default. Windrose's helper log stays on your Mac unless you export diagnostics. Whetstone has no diagnostics export; its local run-stats file never leaves the Mac. Neither app auto-uploads diagnostics.