Privacy policy

The product and marketing pages set no cookies and load no analytics, advertising, or tracking script. Vercel, the host, processes standard request logs (for example, IP address and requested path) to serve the site; Index9 does not read them for tracking.

Buying Pro opens Paddle's checkout in an overlay loaded from paddle.com. Paddle collects your payment details, billing address, and email directly, as the Merchant of Record. Index9 never receives or stores your card number. See Paddle's Privacy Policy.

When a purchase completes, Index9 records three fields tied to that transaction: the derived license key, the product name, and the Paddle transaction ID. No name, email, or payment detail is stored by Index9 — Paddle sends the receipt. This record lets the app verify a Pro key later. A refund deletes the record and revokes the key. Index9 does not sell this data.

Each app sends its license key to index9.dev to confirm it is still valid. The request carries the key only, no device name or identifier, and Index9 does not record which Macs use a key. There is no per-Mac activation.

Both apps check for signed updates at updates.index9.dev (Cloudflare). Sparkle system profile is off. Whetstone may send content-free usage events via TelemetryDeck (EU); they are on by default and turn off in Settings → General → Privacy. Windrose has no usage analytics. Either app may send a crash report to Sentry (US) only after you choose to send it — a post-crash prompt, Whetstone Settings, or the Windrose status menu. Those reports include a per-install ID and are retained for 90 days by default. Windrose's helper log stays on your Mac unless you export diagnostics. Whetstone has no diagnostics export; its local run-stats file never leaves the Mac. Neither app auto-uploads diagnostics.