Privacy Notice

01Who we are

Woland is an independent early-access project at woland.tech. We look at web apps from the outside and report what they already hand to any visitor.

We are not a company with a legal department. A small team runs the product, and only that team reads the data. For anything about your data, write to privacy@woland.tech.

02We do not use cookies

Not our own, not anyone else's. The site sets no cookies at all, so there is no consent banner to click through.

03What sits in your browser

Three keys in localStorage. They stay on your device. You can clear them at any moment through your browser settings, and the site keeps working.

• wl_sid — a random string that stands in for your browser, so one person is not counted as five when we look at how far people get on the page. It is not tied to your name, your email or your IP.
• wl_utm — where you arrived from on your first visit: the campaign tags in the address, if there were any, and the referring page.
• wl_queue — a request of yours that did not reach us because the network dropped, kept so it can be sent again. At most five, deleted once sent.

04What reaches our server

Page events

To see whether the page works, we record simple events: a page view, a scan started, the form opened, a request submitted, and a few more of the same kind. Each event carries its name, a small technical payload, the wl_sid value, the time, and the arrival tags described above.

We do not store your IP address or your browser's user agent with events.

Your request for a report

If you ask us for a report, we store:

• the contact you gave us, both as you typed it and in a normalised form, plus what kind it is — email, handle, Telegram, X, LinkedIn or Discord;
• your note, if you wrote one;
• the addresses of the apps you asked us to look at;
• your browser's user agent and the time;
• the arrival tags and referring page;
• a hash of your IP address — salt plus SHA-256, used to spot abuse. The plain IP is never written to the database.

05Why we keep it

If you are in the EU or the UK: we rely on your consent when you hand us your contact, and on our legitimate interest in running and protecting a working site for the rest. You can withdraw consent at any time — see below.

06No third parties

There is no Google Analytics on the page, no advertising pixel, no embedded widget, no external script. The fonts are served from our own server, not from a font CDN. Your visit is not reported to anyone.

The data sits in a single SQLite file on one server and is read by the person who runs the product. We do not sell it, rent it, or share it for advertising. We would hand something over only if a valid legal order required it.

07How long we keep it

• Page events — 12 months, then deleted.
• Your contact, note and app addresses — until the end of early access, or until you ask us to delete them, whichever comes first.

Backups roll over on their own schedule, so a deleted record can survive there for a short while before it is gone for good.

08What you can ask for

Wherever you live — and this applies to people in the EU, the UK and California in particular — you can ask us to:

• tell you what we hold about you;
• send you a copy of it;
• correct it if it is wrong;
• delete it;
• withdraw your consent and stop hearing from us.

There is one way to do all of it: write to privacy@woland.tech from the address you gave us, or from the account whose handle you gave us. No form, no account, no ticket number. We will answer within a reasonable time and do what you asked.

09Children

The product is for people building and shipping software. It is not aimed at children, and we do not knowingly collect anything from anyone under 16.

10Changes

If what we store changes, this page changes with it and the date at the top moves. Early access moves quickly; we would rather update the page than leave it wrong.

11Contact

Anything about your data: privacy@woland.tech
Anything else: hello@woland.tech