Privacy
Short version: Winny stores your wins on your device. We don't have accounts and we don't run servers that hold what you write. The website measures how it is used, without cookies and without identifying you. The rest of this page is the long version, in plain words.
Last updated: 22 September 2026
The app
Everything you type into Winny (your wins, your streak, your history) lives in local storage on your iPhone. It never leaves the device unless you choose to share it, for example by taking a screenshot or sending text to a friend.
We don't ask you to make an account. We don't ask for your email, your name, or your contacts. We don't request location, microphone, camera, or health data. There is no analytics SDK, no crash reporter, and no advertising identifier inside the app.
Because your wins live on the device, deleting Winny deletes your data. There is no copy on a server for us to restore. Back up your iPhone if you want a safety net.
The website
getwinny.app uses PostHog to measure how the site is used. It counts page views and App Store badge clicks. Because each page view is paired with a page-leave event, it also records how long a page was open and how far down it was scrolled. It collects the performance timings your browser reports for the page as well: how quickly it loaded, how much it shifted while loading, and how fast it answered your first tap.
It runs in cookieless mode: no cookies, no local storage, nothing stored on your device, and no way to follow you across sites. Visitors are counted with a privacy-preserving hash calculated on PostHog's servers, which sit in the EU, where the data stays. Worth saying plainly, because it is the one part that leaves your browser: your IP address is sent to PostHog, hashed there, and dropped. It is not stored, and the hash cannot be turned back into it.
The site is hosted by Vercel, which records standard server logs (IP address, user agent, request time) for security and abuse prevention. Those logs roll off on Vercel's schedule.
We don't use Google Analytics, Facebook Pixel, or any advertising trackers.
The App Store
When you download Winny, Apple handles the transaction and may share aggregated, anonymous data with us through App Store Connect: downloads, crashes, region. That data is governed by Apple's privacy policy, not ours.
If you write to [email protected], we keep the thread in our inbox so we can answer you and remember the conversation if you write back. Ask us to delete it and we will.
Children
Winny isn't directed at children under 13 and we don't knowingly collect data from them. If you believe a child has sent us information, email us and we'll remove it.
Your rights
Under GDPR, CCPA, and similar laws, you have rights to access, correct, and delete personal data we hold about you. Since the app holds none and the website holds none tied to you personally, the practical version is: uninstall the app to delete your wins, and email us if you want any support correspondence removed.
Changes
If we change how Winny handles data, we'll update this page and change the date at the top. Material changes will be called out in the app or by email if you've written to us.
Questions
Email [email protected]. A real person reads it.