WindTorrent (package name: com.hienao.windtorrent) is a remote download manager for user-configured Aria2, qBittorrent and Transmission services. The main app is free to use and offers a one-time Pro purchase for permanent ad removal or an annually renewing ad-free subscription. This policy describes local configuration, downloader connections, backups, advertising, purchases and usage analytics. The former separate Pro app is addressed below.
No account required: WindTorrent does not provide sign-in or registration and does not require your name, email address, phone number or social account profile to use the app. If you voluntarily email support or ask us to verify a previous order, we receive the email and order information you provide to handle that request.
1. Data stored locally on your device
WindTorrent may store the following on your device to provide its core features:
- Downloader type, name, server address, port and other connection settings.
- Usernames, passwords, RPC secrets or access tokens used for services you specify.
- A rollback snapshot of downloader configuration saved before a JSON import.
- Language, theme, update prompts and in-app review prompt records.
- Google Play signed purchase receipts and signatures for verifying, acknowledging and restoring lifetime or subscription ad removal; the app does not receive your payment card information.
- When you use a reviewer access code, the app verifies it locally and stores a verification fingerprint, elapsed duration, clock checkpoints and boot count to provide 4 hours of temporary ad-free access per activation. The raw code is not saved to app files, logs or analytics, or sent to a server. Local access records are excluded from system backups and configuration exports. The same code can be entered again after expiry; this does not create a Google Play order.
This data is used to provide the corresponding features on your device. We do not upload downloader addresses or credentials to our own servers.
2. Downloader connections
When you add, connect to or manage download tasks, WindTorrent sends requests directly to the Aria2, qBittorrent or Transmission service you configured. Download URLs, magnet links or torrent file contents you provide are sent to that downloader. The app displays task, file, speed, tracker and peer information returned by the service. The destination and transport security depend on the server address and protocol you configure.
WindTorrent does not provide, host or store downloaded content. Related tasks and files remain on your downloader server or device.
3. Local JSON backup and restore
When you export configuration, WindTorrent uses the system file picker to save a JSON backup to a location you choose. A backup may contain downloader addresses, usernames, passwords, RPC secrets or access tokens. On import, the app validates the file before writing configuration locally.
You manage exported backup files. Keep them secure; uninstalling the app does not automatically delete backups exported elsewhere.
4. Firebase Analytics
WindTorrent uses Firebase Analytics to understand feature usage and app stability. Information may include app launches, screen views, downloader connection results, task operation results, backup or restore results, setting changes, update prompt interactions, app version, platform, operating system version, locale, network type and Android API level.
Depending on device and system settings, the Firebase Analytics SDK may also process app-instance identifiers, device information, IP addresses and approximate location inferred from them, and diagnostic or attribution information. Advertising and consent SDKs in the main app may additionally process the Advertising ID, Android Privacy Sandbox identifiers and ad-measurement information. The unified app contains these SDKs. It does not request or display ads while a lifetime, annual subscription or temporary reviewer entitlement is active, or during the first seven days after installation. Buying ad removal does not automatically disable Firebase Analytics.
App-defined analytics events do not include server addresses, ports, paths, download URLs, magnet links, torrent contents, task names, file names, email addresses, usernames, passwords, secrets or tokens. We do not use analytics data to identify your downloaded content.
5. Third-party services
- Firebase Analytics: used for usage analytics and stability improvements; the main app retains the Firebase configuration for its existing package name.
- Google Mobile Ads and User Messaging Platform: included in the main app to manage advertising privacy choices and to display and measure ads for eligible free users on the overview screen; that screen does not contain task names, file names, download addresses or downloader credentials.
- Google Play Billing: purchases, restores and acknowledges the lifetime ad-removal product and annual auto-renewing subscription, and recognizes valid historical ad-removal purchases. Google Play processes transactions, renewals and cancellations. The app verifies and caches signed receipts locally. Lifetime access can be restored offline from signed receipts. Subscription receipts do not contain a trusted expiry date, so each cold start requires a Google Play query to confirm annual access. The app also rechecks when resumed and periodically while an active subscription is used in the foreground. Successful queries update expired or revoked access; a failed query retains access already verified in the current process. Purchases are queried and acknowledged through Google Play on the device. Purchase tokens and signatures are not sent to a developer server, analytics events or configuration exports. Successful online queries can update revoked entitlements; refunds cannot be detected in real time while offline.
- Google Play In-App Review / In-App Updates: requests reviews and checks for available updates.
Google processes related information under its privacy policy. The main app has no developer-operated payment verification backend and does not send purchase tokens to a Cloudflare Worker.
Former separate Pro app (com.hienao.windtorrent.pro): existing legacy installations use Google Play application licensing, contain no advertising SDK, and disable Analytics Advertising ID collection and ad-personalization signals while retaining Firebase Analytics. Main-app Billing cannot automatically recognize separate paid-app orders; users may contact support to verify an order and arrange migration.
6. Data sharing and sale
Except for transmissions to downloader services you specify and third-party services required for the features above, we do not sell, rent or provide advertisers with your personal information, downloader configuration, credentials or downloaded content.
7. Data retention and deletion
- Local data: delete downloader configuration in the app, clear app data in system settings or uninstall the app.
- Exported backups: backups remain in the location selected through the system file picker and must be deleted through the relevant file manager or storage service.
- Analytics data: Firebase Analytics data follows Google/Firebase retention and deletion policies and configuration.
- Temporary reviewer records: clearing data or uninstalling deletes the local record. Restarting the app does not reset the 4-hour duration. A still-supported code can be entered again when needed.
- Purchase receipts: the main app stores its cache in a private directory excluded from system backups. Clearing data or uninstalling deletes that local copy, but does not cancel a Google Play purchase or auto-renewing subscription. Valid access can be restored after reinstallation. Uninstalling does not cancel a subscription; cancel renewal through Google Play subscription management. Google retains order records under its policies. Legacy Pro license responses are not uploaded to a developer server.
8. Data security
We take reasonable measures to reduce sensitive information entering analytics systems. Use trusted servers, HTTPS, secure passwords and protected backup files. No internet transmission or local storage method can be guaranteed absolutely secure.
9. Children's privacy
WindTorrent is not directed to children under 13 and does not knowingly collect children's personal information.
10. Changes to this policy
We may update this policy when features or data practices change. The updated version will be published on this page with a revised last-updated date.
11. Contact us
If you have questions, email [email protected].
