YOUR COMPUTER. YOUR INFORMATION.

Privacy & data

This overview describes the current WindowsLock app’s data practices. The Microsoft Store edition is still being prepared for release.

What stays on your PC

WindowsLock stores settings, selected app and folder paths, email addresses, authentication hashes, a protected Gmail credential, queued alert metadata, and recent event history locally. It observes process paths, browser-window creation, Explorer locations, Windows lock and wake events, and elapsed time since input to provide its features.

The app does not record keystrokes, browsing history, page contents, screenshots, or personal file contents. It does not include advertising or analytics tracking, or send local event records to a developer-operated server.

Gmail alerts and recovery

Messages are sent directly from your computer through Gmail using your configured account. Alerts include the device name, event times, check trigger, failed-check count, and restriction status at the time of the event. They do not include entered passwords, recovery codes, app or folder paths, screenshots, or file contents.

Email recovery messages contain a temporary reset code. Anyone who can access your chosen recipient inbox may be able to reset your passcode. Failed alerts can remain queued locally for later delivery. Google and the recipient’s email provider process these messages under their own policies.

Microsoft Store licensing

The Store edition asks Microsoft for license and trial status and starts purchases you request. Microsoft handles Store accounts and payments; WindowsLock does not receive payment card details.

Storage and retention

App passcodes and offline recovery codes use salted password hashes. The Gmail app password is protected with Windows Data Protection API encryption tied to your Windows account. Other settings and event metadata are not separately encrypted by WindowsLock. This does not protect against someone with sufficient access to your Windows account.

Local history retains up to 500 entries from the preceding 30 days, pruned when the app runs. Settings remain until changed or removed. Email reset codes expire after 10 minutes, are single-use, and their in-memory hashes are invalidated on restart. Reset-request timestamps are stored locally to limit repeated requests. Data may remain longer when the app is stopped or a file operation fails.

Your controls

Review settings and recent events from the authenticated tray controls. You can change the recipient, disable email recovery, adjust checks, or disable startup and exit to stop monitoring. You can also revoke the Gmail app password in your Google Account.

To remove local information, close the app and remove its WindowsLock data folder and any backups you maintain. Store installations use the package’s LocalState folder. Removing local data requires setup again and does not erase emails already sent or Microsoft Store records.

This website

This static website includes no analytics scripts, tracking cookies, or signup forms. Hosting infrastructure may process connection information when serving the page.