Security & Privacy
WindOp runs on your PC, keeps your data there, and asks before it does anything risky. Here is exactly how.
Local-first
- Conversations, settings, and memory are stored on your machine (a local database plus markdown files).
- Files and terminal commands act directly on your PC — there is no cloud middleman.
- The only data that leaves is what you send to the AI provider you chose (prompts, attached files, and screenshots you ask it to analyze) and anything you opt in to, like Pro sync.
Cloud models see what you send
Text, files, and page content you share with a model go to that provider. Choose your provider accordingly for sensitive work.Confirmations & permissions
Manage these in SettingsSecurity.
| Control | What it does |
|---|---|
| Confirm Destructive Actions | Prompts before deleting files, running destructive commands, or similar high-risk actions |
| Saved command permissions | Approve an exact command in an exact scope once. It never grants a whole tool. |
| Desktop task & approval notifications | Operating-system alerts so you notice approval requests |
When an approval dialog appears you can allow once, or allow for the rest of the session. Session grants live only in memory and reset when you quit.
Tip
Some safety options in Security are marked “Coming soon” in the app (web-search confirmation, clipboard auto-clear). Docs will list them once they ship.Safety net for files
- Edits and deletes create backups first; ask WindOp to restore a file if something goes wrong.
- Checkpoints can snapshot folders before risky work and roll back.
Your API key
Your OpenRouter key is kept in secure OS credential storage and sent only to the provider. With Pro, keys are managed for you and you never handle them.
Analytics & telemetry
WindOp can share anonymous, aggregate usage (such as app launches and feature usage), identified only by a random install ID — never your name, email, or chat content. You can turn it off any time with Anonymous Usage Analytics in SettingsGeneral.
Local traces in SettingsObservability stay on your device unless you configure an export.
Read the full Privacy Policy and Terms.
Pro sync encryption
Pro sync (preview) encrypts each category with AES-256-GCM on your device before upload. The key is derived from a sync passphrase you choose (PBKDF2-SHA256, 600,000 iterations); the passphrase and key never leave your devices, and WindOp's servers store only ciphertext. A wrong passphrase is detected on the device, and a lost passphrase can't be recovered by WindOp.
Never synced: API keys (OpenRouter, Jina, search providers), the Discord bot token, MCP server environment variables, headers and API keys, and chat history. On Windows and macOS the derived key is stored with OS secret protection; on Linux it is kept in memory only and you re-enter the passphrase each launch.
Remote access features
- Discord Bot: only allowed user IDs can use it; an empty list denies everyone.
- Browser Link: pairing grants browser-wide control — keep the code private.
- MCP servers and skills: install only sources you trust.
What's next
Something missing or out of date? Tell us on the community page.