Privacy Policy & Zero-Telemetry Charter

1. Legal Entity & Governance Framework

This Privacy Policy and Zero-Telemetry Charter ("Policy") governs the privacy practices, architectural data processing protocols, and terms of data handling for Wintershogun Studio (hereinafter referred to as "Wintershogun", "we", "us", or "our"), an independent craft software engineering studio headquartered at:

This policy applies universally to our official web domains (including wintershogun.tech, wintershogun.com, and associated subdomains), as well as to our standalone commercial and retail software suites, including Lyndesk Commercial POS, Lyndesk Mobile Companion, hardware utilities, and related standalone binaries (collectively, "Software").

2. Foundational Philosophy: True Software Ownership vs. SaaS Surveillance

The modern software ecosystem has degraded into an extraction economy where continuous subscriptions are coupled with surreptitious behavioral surveillance, remote lockouts, and non-consensual telemetry streaming.

Wintershogun Studio was founded on an unapologetic counter-philosophy: Software is a capital asset and tool of trade that you purchase, control, and own outright. We believe business records—such as customer contact lists, transactional daybooks, product profit margins, inventory levels, and counter receipts—belong solely and exclusively to the merchant who generated them.

Our core mission is to provide merchants, shopkeepers, and developers with reliable software engineered with strong local data privacy, total offline operation, and zero vendor lock-in.

3. Absolute Zero-Telemetry Guarantee for Software Applications

When you install, initialize, and execute our applications (including Lyndesk for Windows, Linux, macOS, and Android):

• 100% Local Execution: All transactional data, product catalog entries, customer ledgers, supplier balances, tax computations, and cash-drawer tallies are written exclusively to a local, embedded SQLite database utilizing Write-Ahead Logging (WAL) situated on your physical machine or handheld storage device.
• Zero Inbound/Outbound Telemetry: Our binaries contain no background reporting daemons, no tracking scripts, no user behavior event dispatchers, no heartbeat trackers, and no usage analytics libraries.
• Air-Gapped Operation: Our software does not require an active internet connection to launch, operate, register bills, parse barcodes, issue refunds, or print ESC/POS thermal receipts. You can place your host operating system behind an air-gap or firewall with zero loss of core functionality.
• Local Master Key Encryption: Where encryption is enabled, data-at-rest encryption keys reside solely in your operating system's native credential vault or user-provided passphrase. Wintershogun Studio holds no backdoor keys, master escrow certificates, or recovery tokens.

4. Absolute Prohibition on Data Redirection and Third-Party Disclosure

We enforce a strict policy regarding third parties:

• No Redirection to Third Parties: We do not stream, proxy, sync, or redirect your commercial transactions, sales receipts, customer records, or financial summaries to any cloud server, third-party vendor, data aggregator, or foreign server.
• Strict Non-Sale of User Data: Wintershogun Studio has never sold, leased, rented, disclosed, or monetized personal or business data to third parties, data brokers, credit rating bureaus, or advertising networks. We will never do so under any circumstance.
• Zero Advertising Policy: We do not serve advertisements, sponsor promotions, or monetize user attention across our website or within our software applications. Our applications contain zero ad measurement SDKs, zero conversion trackers, and zero programmatic bidding infrastructure.

5. Minimal Data Collection: Limited Exclusively to Billing and Account Licensing

We strictly adhere to the principle of Data Minimization under Section 6 of India's Digital Personal Data Protection Act (DPDPA 2023) and Article 5(1)(c) of the EU GDPR. We never ask for, collect, or process personal details unless strictly necessary for legitimate transactional, licensing, or statutory tax purposes.

6. Offline Execution vs. Optional Network Communication

To provide maximum transparency, we delineate the single optional scenario where our software applications may make an outbound network call:

7. Hardened Binary Security & Defense Against AI Crawling & Reverse Extraction

We recognize that modern surveillance capitalism increasingly leverages large language models (LLMs), automated autonomous web crawlers, and AI diagnostic scrapers to harvest merchant trade secrets, pricing strategies, and customer demographics without consent.

Wintershogun Studio actively defends against external intrusion and automated AI dismantling:

• Memory-Safe Rust & Tauri Architecture: Our application core is compiled in native Rust, which prevents memory corruption, buffer overflows, and unauthorized IPC inspection.
• Encrypted Local Schemas: Local SQLite databases can be bound with SQLCipher AES-256 GCM encryption, ensuring that unauthorized local processes, compromised background daemons, or illicit AI agent scrapers cannot inspect database tables.
• Zero Cloud AI Ingestion: We do not integrate third-party AI APIs (such as OpenAI, Anthropic, or external cloud inference models) into the core ledger or POS calculation engines. Your financial records are never fed into AI training pipelines, neural network embeddings, or external inference caches.
• Anti-Bot & Anti-Scraping Protection: Our web server infrastructure implements strict HTTP security headers (CSP, HSTS, X-Content-Type-Options) and actively rate-limits unauthorized autonomous crawlers seeking to harvest catalog or merchant communications.

8. Payment Processing & PCI-DSS Compliance

When purchasing perpetual software licenses or physical hardware utilities through wintershogun.tech/shop:

• Payment transactions are tokenized and processed exclusively through internationally certified, PCI-DSS Level 1 compliant payment gateways (such as Stripe, Razorpay, or authorized national banking switches).
• Wintershogun Studio never receives, handles, sees, or stores complete credit/debit card numbers, CVV codes, UPI PINs, or net-banking credentials on our servers.
• We receive solely an encrypted payment confirmation token, transactional identifier, and customer billing address necessary to emit your cryptographically signed license receipt.

9. Cookie Policy & Web Telemetry

Our website (wintershogun.tech) adheres to a clean-web standard:

• No Tracking Cookies: We do not drop advertising cookies, retargeting pixels, behavioral profiling cookies, or device fingerprinting scripts.
• No Third-Party Analytics Scripts: We do not load Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, or similar invasive tracking scripts.
• Strictly Functional Local Storage: We may utilize standard browser localStorage or session cookies strictly to preserve your cart contents, currency selection (USD, EUR, GBP, JPY, INR), and UI theme preferences during your active shopping session. These remain entirely on your device.

10. Statutory Data Protection Compliance: DPDPA 2023 & GDPR

Wintershogun Studio recognizes and upholds data subject rights established under the Digital Personal Data Protection Act, 2023 (Republic of India), the General Data Protection Regulation (EU 2016/679), and the California Consumer Privacy Act (CCPA/CPRA):

11. Grievance Officer & Statutory Redressal Mechanism

In compliance with Section 13(2) of the Digital Personal Data Protection Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Wintershogun Studio has appointed a designated Grievance Redressal Officer to address all privacy concerns, data inquiries, and statutory grievances:

12. Amendments and Governing Jurisdiction

Any amendments to this Policy will be published directly to this page at https://wintershogun.tech/privacy with an updated version revision stamp. Because our software does not communicate with our servers, no policy update will ever secretly introduce telemetry or remote surveillance into already deployed offline software binaries.

This Policy and any disputes arising hereunder shall be governed by and construed in accordance with the laws of the Republic of India. Any legal action or proceeding arising out of or related to this Policy shall be brought exclusively before the competent judicial courts located in Davangere, Karnataka, India.