Legal
Privacy policy
What is stored, and what is not.
This describes the system that is actually running, field by field, rather than a template. Two things are separate and should not be confused: the product you download, and this website.
Last updated 16 August 2026.
The short version. The product sends nothing, anywhere, ever. The website counts visits without storing IP addresses, runs no third-party scripts, and only holds personal data if you choose to create an account or buy a licence.
1. Who is responsible
Davis Sneed is the data controller for this website. Contact for any privacy question, request or complaint: dlsneed1298@gmail.com.
2. The product sends nothing
AWO runs on your computer. It makes no call home — not for licensing, not for usage counts, not for crash reports, not on startup.
- No telemetry of any kind. There is no code path that reports anything about you or your use of AWO to us.
- No account is required to download or run it.
- Licence checks are offline. A key is a signed statement verified by arithmetic on your own machine, not a lookup against a server. We cannot tell whether a licence is in use, or where.
- Your workflows never leave your disk unless a step you configured sends something. When an AI step calls a model, that is your workflow talking to the provider you chose — we are not in that conversation and receive no copy of it.
- Run history is local. Inputs, outputs and timings are stored on your machine.
This is verifiable rather than promised: run AWO with the network monitored and the only requests are the ones your own workflow makes.
3. What this website records
Three tables, listed in full. There is nothing else.
Page views
Every page request records: the path visited, the time, the hostname of the referring site (never the full referring URL), whether the request was from a signed-in session, and a visitor identifier described below.
Downloads
Every release download records: the filename and version, the time, the referring hostname, and the same visitor identifier.
Actions on the site
Pressing a call to action, or using one of the interactive demonstrations, records: which action it was from a fixed list, the page it happened on, a short label saying which instance of that action, and the time. This is how we tell a page that persuades from a page that is merely visited.
No IP address is stored, in any of the three. The visitor identifier is a one-way hash of your address, browser string, the date, and a secret held on the server. It cannot be reversed into an address, and because the date is inside it, the value for the same person is a different value tomorrow.
The practical consequence: we can answer "roughly how many people" and cannot answer "who", and nothing here can be used to follow anybody across days — including by us.
4. What we hold if you create an account
An account exists for exactly one purpose: reading back a licence key you have bought. It is not needed to download or run AWO. If you make one, we hold your username, your email address, a one-way hash of your password (never the password), and the dates you joined and last signed in.
5. What we hold if you buy a licence
The name the licence is issued to, an email address to send it to, the tier, the issue and expiry dates, the key itself, and any note we made about the purchase. That record is how we reissue a key you have lost and how we honour a refund.
6. Cookies
There are no tracking cookies and no advertising cookies.
| Cookie | Purpose | When it is set |
|---|---|---|
sessionid | Keeps you signed in | Only if you sign in |
csrftoken | Protects forms against cross-site request forgery | When a form is shown |
Both are strictly necessary for the functions they serve, and neither is used to profile anyone. A visitor who never signs in and never submits a form is not given a cookie at all — which is why this site has no cookie banner.
7. No third parties
- No analytics vendor. The counting described above is first-party and server-side. No script from another company runs on this site.
- No advertising network, and no data sold or shared for advertising. Ever.
- No font or script CDN. Fonts and scripts are served from this domain, so loading a page does not announce your visit to anybody else.
- No embedded video, map or social widget.
The one processor involved is the company hosting the server, which necessarily handles requests in transit. Email you send us is handled by our email provider.
8. Why we are allowed to hold it
Where the UK GDPR and EU GDPR apply: visit and action records rest on legitimate interests — understanding whether the site works — and that interest is balanced by the fact that the records are not linked to an identifiable person and stop being linkable daily. Account and licence records rest on performance of a contract: we cannot sell you a licence and then send it to you without them.
9. How long it is kept
- Visit, download and action records: retained while they are useful for understanding the site, and in any case not linkable to a person beyond the day they were made.
- Account records: until you ask us to delete the account.
- Licence records: for as long as the licence is valid, and afterwards for as long as tax and accounting rules require the sale to be evidenced.
10. Your rights
You may ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our holding it. Email dlsneed1298@gmail.com and we will act within 30 days.
One honest limitation: we cannot identify you in the visit records, because they were deliberately built so that nobody can. A request about those can be answered with this description of them, and nothing more specific exists.
If you are in the UK or EU and think we have handled your data badly, you may complain to your data protection authority. We would rather you told us first.
11. Children
AWO is a developer tool and is not directed at children. We do not knowingly collect data about anyone under 16.
12. Changes to this policy
If this changes in a way that alters what is collected or why, the date at the top changes and the previous version is available on request. We will not quietly start collecting something this page says we do not.
The technical detail behind all this
The security page explains the mechanisms — offline licences, capabilities off by default, and where your secrets live.