Privacy Policy
Last updated: October 21, 2026 · Applies to the WingHUD open beta (winghud.com and the WingHUD Windows application)
WingHUD is currently an open beta: anyone can register, and it's free of charge. This policy explains what we collect during the beta, why, who we share it with, and the rights you have over it.
1. Who is responsible for your data (Controller)
WingHUD is currently operated by Guy Almog as an individual developer, pre-incorporation - there is not yet a registered company behind the product while it's in beta. You can reach the controller directly at guy@winghud.com for any privacy question or request. If WingHUD is later operated by a registered business entity, this policy will be updated to reflect that and you'll be notified via the email on file.
2. What we collect, and why (Purposes)
| Data | Collected when | Purpose |
|---|---|---|
| Name, email, country, favorite games | You submitted the signup form this site had during the closed beta (it has been removed; we no longer collect this) | To review invitations to the closed beta, to tell you once WingHUD opened to everyone, and to understand interest by title/region |
| How you reached the site (a link tag if you followed one, or the referring page, plus the page you landed on), and whether you used a phone, tablet or computer | You submitted the closed-beta signup form (now removed), using data recorded in your browser's local storage on that visit. The device type was read from the standard information your browser sent with the form (its user agent); only "phone", "tablet" or "computer" was kept, not that information itself | To help us evaluate where beta testers came from (e.g. a specific video or post) and on what kind of device - stored first-party only, no third-party analytics or advertising identifiers involved |
| Clicks on the download link in an invitation email (one we sent, or one a friend sent you from the app): when you clicked, your country (looked up from your IP address, which isn't kept), and your browser, operating system and device type (phone, tablet or computer) | You click the link in an invitation email; it goes through winghud.com/go/… and then on to the Microsoft Store | To see whether our invitations work and where people get stuck before installing. Kept 180 days; how many times you clicked and when you first did stay with your invitation |
| When you click to install WingHUD on this site (the Microsoft Store button or the direct download): how you reached the site (a link tag if you followed one, the referring page and the page you landed on, as recorded in your browser's local storage), the page you clicked on, a party code if you came from a friend's party link, whether you used a phone, tablet or computer, your country (looked up from your IP address), and a scrambled form of your network address (a one-way hash with a secret only our server has - the IP address itself isn't kept) | You click a Microsoft Store or download button on this site | To see which links and pages bring new players. When WingHUD first starts on a PC on the same network within 48 hours, that click is linked to the install (and, once you sign in, to your account) as how you probably found WingHUD. Clicks are deleted after 30 days; a linked one is kept with the install record |
| A random install identifier the app creates, the app version, your Windows version, and your country (looked up from your IP address, which isn't kept) | Automatically, once, the first time the WingHUD app starts, before you sign in. No account, email or name is involved. When you sign in, the identifier is linked to your account | To see whether installs succeed and whether people get from installing to signing in. Kept 180 days; once linked, it's kept with your account (as how you joined the beta) and deleted with it |
| Email, first/last name, username, password (stored hashed by our auth provider) - or, if you sign in with Google, the email address and basic profile name Google shares with us (no password is stored in that case) | You register an account inside the WingHUD desktop app, with a password or by signing in with Google | To create and authenticate your account |
| Your chat messages, screenshots/area captures, and voice recordings | You use WingHUD's assistant while playing | To generate the AI response you asked for - sent to our AI providers (OpenAI; for voice, Deepgram for speech-to-text and Cartesia for spoken replies) per-request to answer your question |
| Short rolling buffer of recent gameplay screenshots ("Last Scene") | Automatically, only if you've turned on this optional, off-by-default feature, while a known game is running | Lets you ask about a moment that just happened - kept only in memory on your own PC until you actually trigger a question (only those frames are sent to our AI provider); the rest are discarded automatically |
| Detected game name (from running processes on your PC) | Automatically, while WingHUD is running, if the setting is on | To tailor responses to the game you're currently playing |
| Your PC's hardware and connected peripherals - components (CPU, GPU, RAM, storage, motherboard/BIOS, OS version), monitors (model, resolution, refresh rate), audio devices, game controllers, and the makers of connected peripherals plus recognized gaming/peripheral software (for example Logitech G HUB) | Only when you click the PC Analyzer widget to scan your rig - read locally on your PC at that moment, nothing is scanned in the background | Sent to our AI provider (OpenAI) as context for that one request, so WingHUD can advise on bottlenecks, upgrades, and whether a specific game will run well on your setup |
| A game WingHUD didn't detect: the program's file name (never its folder or anything else from your PC), its product name and window title, the game's name, your app version and Windows build | Only when you confirm it: if WingHUD thinks you're playing a game it didn't detect, it asks under an answer, and this is sent when you click "Yes, that's right" | So WingHUD can detect that game for you right away (kept on your PC) and, once a few players confirm the same game, for everyone. To notice the game in the first place, a small extra AI request (OpenAI) reads your latest messages next to the normal answer, only while no game is detected |
| Installed games on your PC - their names, which launcher each comes from (Steam, Epic, GOG, Battle.net, Riot, EA, Ubisoft, Xbox), and roughly when each was last played. No file paths and no file contents are collected | Automatically at startup, at most once a day, if the 'Detect installed games' setting is on (default on) - read from your launchers' own game lists and game config folders on your PC | Stored with your profile (Supabase, EU region) so WingHUD can tailor advice to the games you own, and so we can see which games testers own. Turn it off in Settings > General > 'Detect installed games'; turning it off deletes it |
| Hardware summary - your PC's processor, graphics card and its memory, RAM, system or laptop model, motherboard and BIOS version, storage type, main display's resolution and refresh rate, Windows version, and the scan date. The rest of the full scan (other monitors, peripherals, software) is not kept with your account | Only when you run Scan My PC in the Hardware Advisor widget (or Re-scan now in Settings) | Stored with your profile (Supabase, EU region) and included with your questions to our AI provider so answers about settings and performance fit your PC, until you delete it in Settings > Data & privacy > Hardware profile |
| Live match data (your hero, items, and score - never your chat or voice messages) via Dota 2's own Game State Integration (GSI) feed | Automatically, only while playing Dota 2 with this optional feature on (default on), sent directly from Dota 2 to WingHUD on your own PC | To give WingHUD live match context so its advice reflects what's actually happening in your game |
| A screenshot of your Dota 2 draft screen (the hero pick/ban grid), plus what WingHUD's ban detector read from it — only the Dota 2 game screen, only during the pick/ban phase, nothing else on your PC (WingHUD only sends the image when it captured the Dota 2 window itself; otherwise it sends only the detector’s results) | Only during the beta, and only while this temporary diagnostic is switched on from our side; captured when you use the Dota 2 draft widget before a hero is locked in | A short-term debugging measure to fix WingHUD sometimes missing which heroes are banned. Stored in a private bucket on our servers (Supabase, EU region), tied to your account, and deleted when you delete your account. We switch it off once we’ve gathered enough |
| Your Steam account ID and, if you connect Steam inside WingHUD (optional), your public Steam profile and recent match history for supported games (currently Dota 2): roles, heroes and results of roughly your last 100 matches | Only if you sign into Steam inside WingHUD; you can disconnect at any time from the same place | To personalize advice with your own play history. Player data from Steam. Disconnecting Steam deletes the collected match data from our servers |
| Player memory/profile (playstyle, preferences, per-game notes accumulated over time) | Built up automatically from your conversations with WingHUD | To personalize future answers without you re-explaining context every session - this profile is kept on your own PC, alongside your chat history - the separate server-side memory facts are described in the next row |
| Memory facts - short, dated notes about you as a player (for example which hero you main, what you're currently working on, what WingHUD advised and how it went), extracted from your conversations | Automatically, whenever a conversation is summarized - during a long chat, or when you close one | WingHUD remembers things you tell it about yourself and your games so advice fits you; it doesn't keep health, body or other sensitive details, and you can delete any of it. Stored on our servers (Supabase, EU region), tied to your account, so WingHUD can recall relevant past sessions the next time you ask about something related. Deleting a chat from the History sidebar also deletes the facts learned from it; deleting your account deletes all of them. Only facts about you and your own decisions are kept - never general game information - and they are never merged with any third-party stats profile |
| Links you paste in chat - the web address, and what WingHUD read from the page | When you paste a link into a chat | To answer you about that page. WingHUD's server opens the page once, only if the site allows automated readers, and gives a short summary of it to the AI; when a page can't be read, WingHUD tells you so. What it read is kept for one hour so follow-up questions work, then deleted. If the link is your own game profile and WingHUD can confirm it's yours (it matches the game account WingHUD already knows, for example your Dota 2 account), WingHUD also keeps a few steady facts from it (your rank, main heroes, hours played) with your memory facts, a dated copy of the profile's numbers, and the link so you can refresh it - shown as "Remembered" under the answer with Undo, and listed in Settings > Games > Profiles you've shared. Other players' profiles and any other page are never kept. Steam profiles are read only when you say they're your own |
| Chat history | Every conversation you have with WingHUD | So you can revisit past answers - the full browsable transcript is stored locally on your own PC. During the beta, the prompts you send and WingHUD's replies are also logged on our servers for quality and abuse review (see the next row), and the memory facts described above are kept server-side |
| Prompts and replies (the text of your messages and WingHUD's answers) - beta only | Every request, during the beta | Logged on our servers (Supabase, EU region) so we can review answer quality and investigate abuse during the beta. Automatically deleted after 30 days, and deleted immediately if you delete your account. This is a temporary beta measure |
| Shared replies - a question you asked, WingHUD's answer to it, the game, and the date. Never your name, username or email | Only when you click Share on a reply in WingHUD | Published as a public page at winghud.com/s/… that anyone with the link can open, so you can show the answer to others. The question is published exactly as you wrote it, so leave out anything personal. Stored on our servers (Supabase, EU region) and tied to your account so you can manage it; we also count how many times each page is opened. Pages can appear in search engines, and are listed at winghud.com/s/ and linked from other shared replies about the same game, except when the answer used your own game data (for example your match history): those pages are kept out of search engines and out of those lists. Remove a link from the Share window or from Settings > Data & privacy > Shared links; deleting your account removes all of them. We may take down a shared page that is reported to us or breaks our Terms of Service |
| Friends & party - your display name, your avatar image if you upload one, your friend code, who can add you, whether your friends see what you're playing, your friends list, friend requests you send and receive, and the players you've blocked or muted | When you use Friends & party (your display name starts as "Player" and four random characters; you can change it, and get a new friend code, in Settings > Friends & party) | So you can add friends and play together. Your display name and avatar are shown to your friends, to people you send a request to or play in a party with, and on invite pages you share (an avatar is stored as a small picture anyone with its link can open; you can remove it in Settings > Friends & party). Your email and username are never shown to other players. Stored on our servers (Supabase, EU region) and deleted with your account; friend requests expire after 14 days |
| Online status - whether you're online or away (and, for an automatic Away, since when), the game you're playing (unless you turn off "Show what I'm playing"), and whether you're in a party and how big it is | About once a minute while WingHUD is running and Friends & party is on | Shown to your friends and to the members of your party. You show as offline when you close WingHUD, sign out or set your status to Offline or Invisible (Invisible still shows you to the party you're in), or about two and a half minutes after WingHUD stops checking in. Only your current status is kept |
| Party chat - the messages you send in a party, notes like who joined or left, and the wingman's answers given in the party | When you chat in a party | Delivered to the party's members. Stored on our servers (Supabase, EU region) while the party exists and deleted 24 hours after it ends. A party ends when everyone has left; a member who's offline for 10 minutes is taken out of the party |
| Party pictures - a screenshot, area capture or Last Scene clip you choose to share in a party | Only when you add one to a party message and press Send - a capture taken in the party room waits for you and is never posted on its own | Delivered to the party's members. Stored on our servers (Supabase, EU region) in private storage that only the party's members can open, and deleted with the party chat, 24 hours after the party ends. Shared pictures show whatever was on your screen, so check them before you send. If a member asks @wingman about a picture, it is sent to our AI provider (OpenAI) with the question |
| Asking the wingman in a party - your question and the party's last 10 messages, which can include other members' messages | When you (or another member) write @wingman in a party, or hold the mic key in the party room to ask aloud | Sent to our AI provider (OpenAI) together with your own game context, so the wingman can answer in the context of the conversation. The answer is posted to the party for everyone and counts toward the asker's allowance. If the asker has "Play the wingman's replies out loud to the party" on (the default), the spoken answer is also played in the party's voice room, where anyone can stop it for themselves |
| Party voice - your microphone audio while you talk in a party (not while you're muted, or with push-to-talk until you hold the key), plus when you joined and left the party's voice | Only while you're in a party's voice room | Your audio is relayed live through LiveKit (see below) to the other members and is never recorded or stored, by us or by LiveKit. We keep only when each member joined and left a party's voice, to measure usage and cost, for 180 days |
| Party invite links and codes - a link (winghud.com/p/…) or code (WING-P-…) you share | When you copy or send a party invite | Anyone with the link can open the invite page and see your display name, the game the party is playing, and the members' initials. Invites stop working after 7 days or when the party ends |
| Friend invites by email - a friend's email address you type in Friends > Invite to WingHUD | Only when you send an invite | Your friend's email is used only to send that invite (an email from WingHUD in your display name, with your party link if you're in a party) and to link their account to yours if they register with that address. If the address already has a WingHUD account, they get your friend code instead and no invite is created. When your friend registers, we record that you invited them with their new account and send them a friend request from you. To enforce the invite limits we keep a scrambled (hashed) form of the address with your account for 180 days |
| Player reports - the reason you chose, your optional note, both players' display names, and, if you're in a party with the player you report, that party's last 30 messages, including any pictures in them | When you report a player in Friends or in a party | Sent to our support team so we can review it, and if it breaks our Terms of Service, end the party or suspend the account. If someone reports you, the report contains your display name and those party messages and pictures. Reports are deleted after 90 days; reports you sent are also deleted with your account |
| Usage/cost telemetry (token counts, estimated cost, feature used, model used, timestamps) | Every request you make | To operate the beta responsibly - monitor real per-user cost, enforce session limits, and detect abuse |
| Your PC's time zone (for example "Europe/Berlin") | Automatically, when the app checks your usage; if your PC's time zone changes, it's updated at most once a day | So your daily and weekly beta allowance resets at midnight your time, and the app can show reset times in your local time. Kept with your account and deleted with it |
| Basic product analytics events, error reports | While using the app or this website | To find and fix bugs, and understand which features are actually used |
| Standard web data (IP address, browser, approximate location, pages visited) via Google Analytics | Browsing this website | To understand traffic to the marketing site - see "Analytics & cookies" below |
| Only if you allow Advertising cookies on this website: which WingHUD ad in ChatGPT (if any) brought you here, a random browser ID, and whether you clicked to install WingHUD (the Microsoft Store button or the direct download), via OpenAI's ads pixel | Browsing this website and clicking to install WingHUD | To measure whether our ads in ChatGPT lead to installs - see "Analytics & cookies" below |
| Your WingHUD app settings — hotkeys, chosen narrator voice, playback speed, selected microphone and speaker names, feature toggles, widget layout, and language. Saved credentials (any tokens, keys, or passwords) are removed before anything is sent, and your chats, screenshots, and voice recordings are never included. | Automatically while you use WingHUD — at sign-in, shortly after you change a setting, and when you close the app | Stored with your profile (Supabase, EU region) so we can reproduce and troubleshoot issues from your actual setup (for example, how voice playback is configured) without asking you to read your settings back to us. Only the most recent snapshot is kept, and it's deleted when you delete your account. |
3. Who we share data with (Sub-processors)
We may replace or add providers as the beta evolves; this list is kept current and the "Last updated" date changes when it does.
We don't sell your data. It's shared only with the following service providers, strictly to run WingHUD:
- Supabase - hosts our database, authentication, and backend functions. Our project runs in the EU (West Europe) region.
- Google (Sign-in) - if you choose to sign in with Google, Google authenticates you and shares your email address and basic profile name with us. This is separate from the Gemini API and Google Analytics entries below.
- OpenAI - processes the text/image content of your chat requests to generate WingHUD's replies, including performing a live web search when useful to answer your question. Also extracts the memory facts described above from your conversations, and converts those facts (and your questions) into numeric representations so they can be matched by meaning. Also provides the Standard voices for read-aloud (what new installs start with; you can switch in Settings → Voice & audio): when they are selected, the text of WingHUD's spoken replies is sent to OpenAI to generate the audio, and the app connects to OpenAI directly using a short-lived key issued by our servers, so OpenAI also sees your IP address. Also used as a backup text-to-speech provider (see Cartesia below) when needed. We hold the API key server-side; it never ships inside the app.
- Deepgram - processes voice audio for speech-to-text and Open Mic's continuous listening.
- LiveKit - relays party voice in real time between the members of a party. The app connects to LiveKit directly using a short-lived key issued by our servers, so LiveKit sees your IP address, your account identifier and your display name. Audio is relayed live and not recorded or stored.
- Cartesia - the provider of the Studio voices for text-to-speech: the text of WingHUD's spoken replies is sent to Cartesia to generate the audio. The app connects to Cartesia directly using a short-lived key issued by our servers, so Cartesia also sees your IP address.
- ElevenLabs - our previous text-to-speech provider, kept only as a backup while we complete the switch to Cartesia.
- Google (Gemini API) - for supported games (currently Dota 2), a small cropped portion of your screenshot showing hero portraits may be processed by Google's Gemini API server-side to help detect which heroes are in play. This is separate from Google Analytics below, which only covers website traffic.
- Valve (Steam Web API) - if you connect Steam inside WingHUD, your public Steam profile and recent match history are fetched from Valve's Steam Web API to personalize advice; the same happens when you paste a link to your own Steam profile into a chat. Player data from Steam.
- OpenDota - public Dota 2 statistics service; for Dota 2, hero and match statistics may be looked up there alongside your Steam data, and an OpenDota or Dotabuff link you paste into a chat is read there.
- ipwho.is - when you use the app, when it first starts, and when you click the link in an invitation email, your IP address is sent to ipwho.is to look up only your country, so we can understand the beta's regional spread, latency and whether invitations reach people. We store only the resulting country - never your IP address.
- Purelymail - sends transactional email (beta invitations, password resets, account confirmations) from noreply@winghud.com.
- Firebase (Google) - hosts this website, including the shared reply pages (winghud.com/s/…), which are built on request in Google's EU (Belgium) region.
- Google Analytics - basic website traffic analytics (see below).
- OpenAI (ads measurement) - only if you allow Advertising cookies on this website: OpenAI's ads pixel measures whether a visit from a WingHUD ad in ChatGPT ends in a click to install WingHUD. No email address, name or other form data is sent. It never runs in the WingHUD app.
- Anthropic (Claude) - the WingHUD team uses Anthropic's Claude models for internal review of beta chat content (quality review, troubleshooting, and identifying product improvements). This is separate from the AI provider that generates your in-app replies (OpenAI) - Anthropic never generates the responses you see in WingHUD, it's used only by our own team for internal review.
OpenAI, Deepgram, Cartesia, ElevenLabs, LiveKit, Anthropic, Google (for Google sign-in and the Gemini-based detection above), Valve, and Purelymail are primarily US companies, so using them can involve transferring your data outside the EU. This is done under their Standard Contractual Clauses, the standard EU-approved safeguard for this kind of transfer. The country lookup (ipwho.is) may also process your request outside the EU; only your IP address is sent, and only the resulting country is stored.
Each of these providers processes data only as needed to perform their specific function for us, under their own data processing terms. During the beta, WingHUD may collect and internally review your chat content - your messages and WingHUD's replies - for internal quality review, troubleshooting, and model training purposes, including having our own AI-assisted review tooling (built on Anthropic's Claude models) read past conversations to identify issues and suggest improvements. This use is strictly internal: it is never used for commercial purposes, marketing, or advertising, and this content is never sold or shared with third parties for those purposes.
4. Legal basis for processing
During this beta, everything described in this policy is processed based on your consent to take part as a beta tester - you actively agreed to these terms inside the app before you could use your account. A more detailed, per-category legal basis will be added before any future paid launch.
5. Analytics & cookies
This website uses Google Analytics (gtag.js) to understand visits and traffic sources. No analytics or advertising cookies are set until you choose: a consent banner lets you accept or reject them, and the site uses Google Consent Mode v2 so Google's tags respect your choice — no Google tag is loaded at all until you allow it. If you allow Advertising, OpenAI's ads pixel also loads, to measure whether a visit from one of our ads in ChatGPT leads to a click to install WingHUD (see "OpenAI (ads measurement)" above). Rejecting does not limit the site. You can change or withdraw your choice any time via Cookie settings in the footer. Full details — every cookie, its purpose and lifetime — are on the Cookie policy page. The WingHUD desktop application itself does not use advertising cookies or third-party trackers.
6. How long we keep your data (Retention)
- Closed-beta signup form submissions (the form has been removed) are kept for up to 90 days after the open beta started, so we can tell those people they can now join, and are then deleted.
- Website install clicks are deleted after 30 days; one linked to a first app launch stays with that install record (and your account) and is deleted with it.
- Invitation link clicks and first-launch install records are deleted after 180 days. A click count and first-click time stay with your invitation; an install record linked to your account stays with the account and is deleted with it.
- Account data is kept for as long as your account exists. You can delete your account and its associated data at any time from Settings > Account > Delete Account inside the app - this triggers a real, immediate deletion on our servers.
- Local data (chat history, local logs, your local player profile) lives only on your own PC and is removed if you uninstall WingHUD or clear it yourself.
- Beta chat logs (the prompts and replies described in section 2) are kept on our servers for 30 days for quality and abuse review, then automatically deleted - and deleted immediately when you delete your account. This is a temporary beta measure.
- Server-side memory facts are kept for as long as your account exists, capped at 500 per account (older, less important ones are dropped automatically as new ones are learned). They are deleted when you delete the chat they came from, and all of them are deleted with your account.
- Links you paste: what WingHUD read from a page, and the web address, are deleted after one hour; a bare record (the site, the kind of page, whether it could be read) stays for 3 days for the daily limit. Your own confirmed game profiles - the facts, the dated numbers and the link - are kept until you remove them (Undo under the answer, or Settings > Games > Profiles you've shared) or delete your account.
- Shared replies stay published until you remove them or delete your account. Removing one deletes its question and answer from our servers straight away; the page itself can stay visible for up to a minute while caches catch up.
- Friends & party: your display name, avatar, friend code, friends, blocks and settings are kept for as long as your account exists and are deleted with it (a replaced or removed avatar is deleted at once). Friend requests expire after 14 days and party invites after 7 days. Party chat and party pictures are deleted 24 hours after the party ends, and party voice is never recorded; the times members joined and left a party's voice are deleted after 180 days. Player reports are deleted after 90 days. Records of email invites you sent (the hashed address) are deleted after 180 days; an invited friend's address stays on the beta invite list like any other invite.
- Steam match data is kept while your Steam account stays connected and is deleted when you disconnect Steam inside WingHUD or delete your account.
- Game confirmations (a game you confirmed WingHUD didn't detect) are kept until we've added the game to detection or decided not to, and are deleted with your account.
- Installed games list is kept for as long as your account exists, and is cleared when you turn off "Detect installed games" in Settings > General.
- Hardware summary is kept until you delete it in Settings > Data & privacy > Hardware profile or run a new scan (which replaces it), and is deleted with your account.
- App settings snapshot — only your most recent one is stored, kept for as long as your account exists and deleted with your account.
- If the beta ends (see our Terms of Service), we will give you a way to request deletion of any remaining server-side data even if you no longer have the app installed - email us at the address above.
7. Your rights
If you're in the EU/EEA or UK you have rights under the GDPR (or UK GDPR); testers elsewhere get the same rights from us as a matter of policy, including the right to:
- Access the data we hold about you.
- Rectify inaccurate data.
- Erase your data (self-serve for account data via in-app deletion, or by request for anything else).
- Restrict or object to certain processing.
- Port your data to another service in a structured format, on request.
- Withdraw consent at any time where processing is based on consent (e.g. the optional features you turn on in the app).
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these, email guy@winghud.com.
8. Security
We take reasonable technical measures to protect your data - for example, your local session token is encrypted at rest on your PC, and our database access is locked down with row-level security so only your own account can read your own data. No online service can guarantee perfect security, but we treat this seriously, especially while handling account credentials and chat content.
9. Children
WingHUD is not intended for anyone under 16, and account registration requires agreeing to our Terms of Service. If you believe a child has provided us data without appropriate consent, contact us and we will remove it.
10. Changes to this policy
We may update this policy as the product evolves, especially moving from the free open beta into a later paid phase. Material changes will be reflected here with an updated "Last updated" date, and where appropriate we'll also notify you by email.
11. Contact
Questions about this policy or your data: guy@winghud.com.