Legal
Effective April 15, 2026 · Winnow v1.0.0
The short version
Winnow collects nothing. Full stop.
No analytics. No crash reports. No tracking of any kind. No file names. No file contents. No IP address. No account. Winnow is a local tool that runs entirely on your machine — there is nothing to collect and nowhere to send it.
Winnow is a Windows desktop application that finds and removes duplicate files on your local machine. It has no network features, no backend, and no operator who could receive your data even if they wanted to.
This policy exists to be explicit about that — not because there's anything complicated to explain.
Nothing. Specifically:
Winnow makes zero outbound network connections during normal operation.
Winnow stores one thing on your machine: a SQLite database containing your scan history — file paths and their SHA-256 hashes. This database lives entirely on your own computer and is never transmitted anywhere.
Default database location
%APPDATA%\Winnow\winnow.db
This file contains scan reports (file paths and content hashes). It stays on your machine. Uninstalling Winnow removes the application; you can delete this file manually to remove all scan history.
Winnow includes no third-party SDKs, no analytics libraries, no advertising networks, and no tracking pixels. It does not use any cloud services. There are no third parties involved in the operation of Winnow — none.
Because Winnow collects no personal information from anyone, it is fully compliant with the Children's Online Privacy Protection Act (COPPA) by default. There is nothing to protect against — no data is collected from users of any age.
This policy may be updated if the software changes in a meaningful way. The current version is always at mywinnow.app/privacy. The effective date at the top of the page will reflect any changes.
Given that Winnow is designed to collect nothing, it's hard to imagine this policy ever getting more restrictive — only more permissive.
Questions about this policy? Contact SDK Tech, LLC directly: