Skip to content

Privacy policy

WLN is a Mac app that talks to the AI provider you choose, using your own key. This page explains what stays on your Mac, what leaves it and where it goes, and what our two servers keep.

Last updated: 15 November 2026

The short version

  • Your chats, files and settings are saved on your Mac. Your API keys are kept in the Mac’s Keychain.
  • What you send in a chat goes to the AI provider you picked (OpenRouter, Anthropic or OpenAI). Their privacy policy covers it from there.
  • Our app server, api.wln.ai, keeps hashes instead of your Apple ID and email, plus what it needs to run your plan on your Macs.
  • This website keeps your email address, an optional name and your sign-in sessions.
  • No ads, no selling data, no tracking cookies.

What stays on your Mac

  • Chats. Conversations, messages, artifacts and their versions, memories, saved prompts, agents and settings are stored in a local database in ~/Library/Application Support/WLN. They are not uploaded to us.
  • Keys and sign-ins. Your OpenRouter, Anthropic and OpenAI keys, secrets you save for connectors, connector sign-ins and your WLN account session are kept in the macOS Keychain on this Mac.
  • Undo copies. When the coding agent changes a file in a project folder, WLN keeps the original in Application Support/WLN/undo for 30 days so you can undo it.
  • Project folders. Connecting a folder writes nothing into it. WLN reads and changes files there only through the tools you approve.

What goes to your AI provider

To answer you, WLN sends your request to the provider whose key you added. That request can include your messages, files the agent reads from your project, pages and screenshots from the browser agent (or your screen, if you turn on desktop control), your enabled memories, the agent’s instructions and results from connectors. WLN sends it straight from your Mac to the provider. It does not pass through our servers.

Before the first request to a provider, and again when you save a new key for it, WLN asks you to Allow it. Nothing goes to that provider until you do.

With an Anthropic key, WLN may send a chat’s last request again about every 4.5 minutes, so Anthropic’s prompt cache stays warm and your next message costs less. Nothing new is added to it. It runs while a reply is working, and while the open chat waits for you, for up to 30 minutes without activity.

Each provider handles this data under its own policy:

Other things the app may contact

These only happen when you use the feature:

  • Web search. When search is on, your provider runs the search with its own web search tool.
  • Connectors you add. A remote connector sends the requests you approve to that service. A local connector (direct download only) runs on your Mac and may contact its own service. Each one has its own privacy terms.
  • Websites. The browser agent opens the sites you ask it to, like any browser.
  • Previews. A React artifact that imports a package WLN doesn’t bundle loads it from esm.sh, only when you are online.
  • Downloads you start (direct download only): Chrome for Testing from Google’s storage, Node.js from nodejs.org, uv from GitHub, and skills from their public GitHub repositories.
  • Connector search. Searching for more connectors sends your search words to the official MCP Registry (registry.modelcontextprotocol.io). WLN may download a connector’s icon from its website.
  • The gallery. WLN fetches the connector and skill list from api.wln.ai about every six hours. That request carries no personal data.

What api.wln.ai keeps

api.wln.ai runs your account, free month and licence for the Mac app. Signing in is optional. If you never sign in or enter a licence key, it only receives the gallery and install-count requests described here.

  • Your account. We never store your plain Apple user id or email. We keep an HMAC-SHA256 hash of your Apple user id, an HMAC of your lower-cased email, and whether that email is verified, a private relay address, or has forwarding turned off. We never read the name Apple sends.
  • Each signed-in Mac. A hashed session token, a random device id made by the app, the Mac’s model name (for example “MacBook Pro (16-inch, Nov 2023)”, never the name you gave your computer) and when its latest licence token expires. This lets you see your Macs and release one.
  • Licences. The store’s purchase id, the plan, its status and expiry, and which Macs use it. For a purchase through our web payment provider, an HMAC of the buyer’s email, never the email itself.
  • Install counts. When you add or remove a connector or skill from the gallery, the app sends which item it was, a random install id, the app version and the edition. The server stores only an HMAC of the install id with the item, so installs of different items can’t be linked to each other, plus the item, edition, app version and time. No IP address is kept. This is off until you choose. The first time you add something from the gallery, WLN asks “Share anonymous install counts?”, and nothing is sent unless you say yes. Change it any time in Settings › Data and privacy › Gallery.
  • Rate limits. Only an HMAC of your network address (IPv4 address or IPv6 /64), kept at most 48 hours.
  • Logs. Log lines contain event types and error classes only. They never contain keys, tokens, Apple user ids, emails, IP addresses or request bodies. Cloudflare’s per-request logs are switched off for this server.

Deleting your app account

Settings › Account › Delete Account removes your account, its sessions and purchase links, its Macs that hold no live licence token, and every Mac’s name. A few things stay, and here is why:

  • The trial record (the hash of your Apple id and when the free month started and ended), so deleting can’t restart the free month.
  • Your purchase (its entitlement and licence), so it keeps working and you can link it to an account again.
  • Live tokens. A licence token already on a Mac can’t be recalled and works offline until it expires, at most 14 days. Until then we keep that Mac’s random device id and which purchases it held, and the count of Mac releases for at most 31 days.

If you delete your Apple Account itself, Apple tells us, and we remove the trial record, the device ids and release counts kept under your Apple id, and which purchases your Macs held. To stop WLN using Sign in with Apple, also remove it under your Apple Account’s Sign in with Apple settings.

What this website keeps

wln.ai has its own account, separate from the app’s, for things like download emails. It keeps:

  • Your email address and when you verified it.
  • A display name, only if you add one.
  • For each signed-in browser: a SHA-256 hash of the session token (never the token), the browser’s user agent, and when the session started, was last used and expires.
  • For each sign-in code you ask for: your email, an HMAC of the email and code (never the code itself), an HMAC of your IP address, and when it was asked for.
  • For rate limits: HMACs of your email and of your IP address, never the address itself.
  • Whether you asked us to email you when the download is ready.

How long we keep it

  • Sign-in codes expire after 10 minutes and work once. Expired codes are removed by a regular cleanup.
  • A session lasts 30 days from the last time you used it, then ends.
  • Rate-limit counters are removed by a regular cleanup once they are a day old.
  • Your account stays until you delete it. Deleting it on the account page removes your user record, sessions and codes at once.

Cookies

The site sets one cookie, wln_session, when you sign in. It is HttpOnly and Secure, and it only keeps you signed in. There are no analytics, advertising or tracking cookies.

Who processes data for us

  • Cloudflare hosts wln.ai and api.wln.ai. Its Turnstile check protects the sign-in form from bots. See the Cloudflare privacy policy.
  • MailChannels delivers sign-in codes and the emails you ask for.
  • Our own Postgres server stores the website’s account data.

We don’t sell or rent personal data, we don’t show ads, and we don’t share data with anyone else unless the law requires it.

Your choices

  • Delete chats in the app, or remove WLN’s folder in ~/Library/Application Support/WLN.
  • Remove a key in Settings › Models and API key.
  • Withdraw a provider’s permission in Settings › Data and privacy.
  • Delete your app account in Settings › Account, and your website account on the account page.
  • Ask us what we hold about you, or to correct or delete it, at [email protected]. Because we store hashes, we may need you to sign in to find your records.

Children

WLN is not meant for children under 13, and we don’t knowingly collect their data. AI providers may set a higher minimum age in their own terms.

Changes to this policy

If we change what we collect, we will update this page and the date at the top. For a bigger change, we will say so on the site before it takes effect.

Contact

Questions about privacy: [email protected].