Privacy Policy & Zero-Telemetry Charter

1. Zero-Telemetry Architectural Charter

Wintershogun Studio (“we”, “us”, or “our”) operates the website https://wintershogun.tech and distributes the Lyndesk Point of Sale and business operating system.

Unlike conventional software vendors whose business models rely on harvesting merchant telemetry, transaction volumes, customer shopping habits, and margin data, Wintershogun Studio sells software as a finished capital tool. We have no interest in, nor technical capability to access, your commercial ledger.

2. Data Handled in Native Software (Lyndesk POS)

When you download and run Lyndesk (Linux Community Edition, Windows Desktop, or Android Handheld):

• 100% Local Storage: Every invoice created, product catalog entry, customer credit ledger, and cash daybook entry is written exclusively to your local device drive using an embedded SQLite Write-Ahead Log (WAL) database.
• Zero Outbound Network Packets: During counter checkout, barcode scanning, inventory auditing, or thermal receipt printing, Lyndesk sends zero outbound network requests. This has been independently verified via raw Wireshark socket packet inspection.
• No Third-Party Trackers: Lyndesk contains zero Google Analytics, Meta Pixel, PostHog, Mixpanel, Datadog, or Sentry telemetry SDKs.

3. Minimal Data Processed on wintershogun.tech

When you navigate our public website (wintershogun.tech), minimal edge logs are processed strictly to ensure infrastructure security and fast asset delivery:

• Cloudflare Edge Infrastructure: IP address, browser user-agent, and request timestamp are analyzed transiently at the Cloudflare edge for DDoS mitigation, bot blocking, and routing cache efficiency.
• Cookies: Our website uses zero third-party advertising or retargeting cookies. We store only essential local state (such as dark/light mode preference or dismissible cookie acknowledgement).

4. Email Dispatches & Communications

If you voluntarily provide your email address on wintershogun.tech:

• Studio Dispatches / Newsletter: We use your email solely to transmit private offline-first systems engineering essays, SQLite benchmarks, and major release announcements. You may unsubscribe anytime with a single click.
• Developer Support Desk: Inquiries submitted via our support form are routed directly to our internal development desk via verified Resend edge API pipelines. Messages are preserved only as long as necessary to address your technical inquiry.

5. Commercial Payment Processors

When you purchase commercial software licenses through our official store on wintershogun.tech, payments are processed by PCI-DSS compliant third-party payment gateways (such as Razorpay or Stripe).

Wintershogun Studio never collects, sees, or stores your raw credit card numbers, CVVs, or bank credentials. We receive only transaction confirmation tokens, your billing name, and delivery email address to generate and dispatch your perpetual cryptographic license keys.

6. DPDPA 2023 & GDPR Compliance

Our operations strictly comply with the Digital Personal Data Protection Act (DPDPA 2023, India), the Information Technology Act 2000 (India), and the General Data Protection Regulation (GDPR, EU):

• Lawful Basis & Purpose Limitation: Data collected on the website is processed solely based on your explicit consent or legitimate commercial performance (license delivery).
• Data Minimization: We never request sensitive personal data, biometrics, or national identity numbers.
• Zero Cross-Border Transfer of Software Data: Because native software runs 100% locally, your customer data never crosses national borders or clouds.

7. Data Subject Rights & Rectification

Under applicable data protection laws, you retain the absolute right to:

• Request a copy of any personal communication records or commercial invoice metadata held by Wintershogun Studio;
• Request the immediate deletion or erasure of your email address from our studio dispatch registry;
• Withdraw consent for email communications at any time.

8. Data Protection & Grievance Desk

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 and the DPDPA 2023, statutory inquiries may be addressed to our designated Grievance Officer: