Windrose

windrose.build

Privacy Policy

This page explains what Windrose Schematics collects today, why it is used, and what stays on your machine. Windrose Schematics is a fan project and is not affiliated with the Windrose developers.

Last updated: June 4, 2026

What this covers

This policy covers windrose.build, the companion app's account and publishing flows, and the in-game mod. It does not cover Steam, Stripe, Discord, GitHub, Vercel, or Supabase outside their role as services used by this project.

What we collect

Steam sign-in

Steam64 id, Steam display name, Steam avatar, generated or chosen site username, account tier, companion access, and last sign-in time. We do not receive your Steam password, inventory, friends list, game library, playtime, or Steam payment details.

Profile data

Display name, bio, in-game name, pronouns, location, style tags, public links, and any custom avatar you upload.

Schematics and community content

Uploaded schematic files, names, descriptions, tags, images, visibility, comments, creator attribution, and derived build metadata such as download counts, piece counts, dimensions, and material summaries.

Companion pairing

Short-lived pairing codes, session ids, account tokens for the companion, and entitlement checks. Your local library stays on your PC unless you publish, install, download, or explicitly use an account feature.

Billing

Stripe customer ids, subscription ids, price/product ids, status, renewal windows, and tier state. Stripe handles card data and hosted checkout.

Discord role linking

Only if you connect Discord: Discord user id, username, global name, avatar hash, link time, and role sync time.

Security and abuse controls

Session cookies, short-lived OAuth state cookies, server logs, rate-limit data, and daily salted IP hashes for download auditing. Download IP hashes are not stored as raw IP addresses.

How we use it

  • Keep accounts signed in and paired to the companion.
  • Attach creator credit to builds, comments, and profiles.
  • Publish, browse, download, install, and manage schematics.
  • Grant supporter, founder, featured builder, and companion access status.
  • Sync optional Discord supporter or founder roles.
  • Prevent spam, abuse, duplicate billing events, and broken downloads.
  • Respond to support requests and security incidents.

Cookies and local files

The site uses an HttpOnly session cookie after Steam sign-in. It also uses short-lived cookies for Steam or Discord sign-in state and safe redirect targets. These are not ad cookies, and no third-party analytics, ad pixels, or cross-site tracking ship today.

The companion and mod store local settings, schematic files, logs, keybinds, and state in the Windrose Schematics app-data folder on your PC. Local files are not uploaded unless you use a feature that sends them, such as Publish.

Who processes data

The project uses a small set of services to run the site and app. Their own privacy notices apply when they process data for their services.

Steam privacy policyStripe privacy policyDiscord privacy policySupabase privacy policyVercel privacy noticeGitHub privacy statement

Retention, deletion, and choices

  • Sign out to clear the browser session cookie.
  • Public and private uploaded schematics remain until you delete them or ask for help.
  • Account, profile, billing, and role data stay while needed to run the account and keep records for support, accounting, security, or abuse prevention.
  • You can choose what profile fields to fill out, whether a build is public or private, whether to link Discord, and whether to use paid supporter features.
  • For account deletion, profile corrections, or privacy questions, contact support@windrose.build.

Children and policy changes

This project is not directed to children under 13. If you believe a child has provided account data, contact support so it can be reviewed.

This policy may change as the project changes. The date at the top will be updated when the policy changes materially.