Privacy Policy

FleaWinder is built to feel personal without turning your circus, your room, or your conversations into a data product. Most of the show runs locally on your device. The sections below explain the cases where data may leave your device because you choose a website feature, a purchase, a beta sync feature, or a public share.

Local circus activity

FleaWinder uses your typing, mouse, click, touch, tilt, shake, and similar input signals to wind the circus and animate the fleas. That raw input is processed locally in real time. We do not record your keystrokes, mouse paths, typed text, app contents, or per-keystroke history.

Flea memories, letters, and dialogue

Flea moods, memories, progression, letters, and short character moments are designed to stay on your device unless you enable an explicit sync or sharing feature. We do not store full letter bodies, full dialogue transcripts, speech bubbles, or the private text you type to a flea on FleaWinder servers.

Apple beta surfaces

FleaWinder may run on iPhone, iPad, Apple TV, Apple Watch, Mac, and supported spatial Apple devices. Apple TestFlight, the App Store, iCloud, CloudKit, and Apple payment flows are operated by Apple and are governed by Apple's privacy terms. Where FleaWinder uses iCloud or CloudKit, the data belongs to your Apple account and is handled by Apple's infrastructure.

Optional cross-device sync

Cross-device troupe sync is optional. When enabled, it can create an event log so your circus can remember progression across devices. That log may include facts such as a random troupe id, random device ids, device kind labels, optional device nicknames, timestamps, flea creation, XP, unlocks, milestones, and other circus state changes.

For Apple-side sync, data may live in your private iCloud/CloudKit account. For web or desktop pairing, FleaWinder may store the random troupe id, paired device rows, opaque bearer tokens, pair codes, and the event log in our server database. We do not derive those ids from your email, Apple ID, or name.

Public shares

If you create a public share link, the shared page may show the specific excerpt or aggregate circus information needed for that share page to work. Letter share pages use a short excerpt only; the full letter stays on the player's device. Public troupe share pages are intended to show aggregate counts rather than private event payloads.

Website telemetry

The website uses first-party, best-effort telemetry to understand basic site usage such as a visit, a download click, or a purchase flow event. It uses random anonymous and session ids stored in browser storage. We do not use third-party analytics SDKs or ad trackers.

The telemetry endpoint stores bounded event names, platform, app/site version, anonymous id, session id, timestamp, small scalar properties, and a hashed IP address for abuse prevention and rate limiting. If the database is unavailable, telemetry is accepted and discarded.

Contact forms and waitlists

If you submit the contact form, we receive the name, email address, message, locale, and page context you provide so we can respond. If you join an App Store or beta update list, we store your email address and list name so we can send the requested update.

Purchases, gifts, and license recovery

Optional website purchases are processed by Stripe. We receive purchase information needed to create, recover, and support your license, such as email address, payment confirmation, license tier, and gift recipient email if you buy a gift. We do not store your payment card number. Apple purchases and refunds are handled by Apple.

Retention and deletion

We keep purchase records as needed to provide license recovery, support, accounting, and fraud prevention. Waitlist and contact information is kept only as long as useful for the purpose you submitted it. Optional sync data can be deleted from the app's cross-device settings where that feature is available. Some infrastructure backups may persist for a short time before normal rotation removes them.

What we do not do

• We do not sell personal information.
• We do not run third-party advertising trackers.
• We do not record raw keystrokes or what you type in other apps.
• We do not store full private flea letters or dialogue transcripts.

Contact

For privacy questions, deletion requests, or support, use the contact page.