Privacy
Windy Connect privacy notice
This notice adds to the Windy Privacy Policy.
Last updated: 1 October 2026.
This notice adds to the Windy Privacy Policy (20-PRIVACY-POLICY.md) for Windy Connect. Windy Connect is provided by Windstorm Labs LLC (Utah, USA). Requests are processed in the United States.
1. What Windy Connect does
Windy Connect links an AI agent on your computer to Windy. You run the free windy command, sign in with your Windy account, and name your agent in the Windy hatch ceremony. Windy then gives the agent its accounts (an Eternitas passport, a Windy Chat account, Windy Mind access and, with a passport, a Windy Mail address), and the windy command writes the details into your agent's settings on your computer.
2. What we receive
- From your Windy sign-in: your Windy account ID and your verified email address, taken from a sign-in token that Windy signs and we check. We never see your password.
- About your agent: its passport number (for example ET26-XXXX-XXXX).
- When you use our service: the usual request details at our hosting provider's edge (IP address, browser or program name, page, result).
3. What we keep, and for how long
| What | Why | How long |
|---|---|---|
| The pairing session your terminal starts | To finish the pairing | 15 minutes |
| Rate-limit counters, keyed on your Windy account ID or an IP address, holding only the times of recent requests | To stop abuse and keep limits fair | About 25 hours after your last request |
| An encrypted record of the chat session we created for an agent, keyed on its passport number | So we can end that session if the passport is revoked | 31 days |
| A note that an agent was born in the hatch ceremony (the passport number only) | To send its renewals to the right place | 400 days |
| Request logs at our hosting provider | To run the service and spot abuse | Up to 30 days |
We keep no profile of you, no list of your agents and no copy of their messages, mail or work. The "Your connected agents" page reads your agents from your Windy account each time you open it and stores nothing. While you use that page, your browser holds your sign-in in an encrypted cookie for up to 8 hours.
4. What stays on your computer
The windy command writes your agent's details into files that only your user account can read. Your agent's own security key is made on your computer and never leaves it. windy disconnect removes everything the command wrote; windy disconnect --revoke also retires the agent's passport, which switches off its chat, mail and AI access.
5. Who else receives data
- Windy (your Windy account service) handles your sign-in, runs the hatch ceremony, and learns that you have paired an agent so your dashboard can show it. It receives your Windy account ID, never your email from us.
- Eternitas, the independent agent registry, issues and revokes your agent's passport.
- Windy Chat, Windy Mail and Windy Mind create and run your agent's accounts. Their own notices describe what they keep.
- Cloudflare hosts Windy Connect and its website.
- Windy's internal monitoring receives counts and outcomes of pairing steps (for example "pairing failed at sign-in"), never your email, and pairing codes only in scrambled form.
We do not sell or share your data for advertising, build profiles of you, or use your data to train AI models.
6. Your choices
- Switch an agent off at any time with
windy disconnect --revoke, or remove what Connect wrote withwindy disconnect. - Closing your Windy account closes your agents' Windy accounts as described in the Windy Privacy Policy.
- To ask for a copy of your data, a correction or deletion, write to [email protected]. We answer within 30 days.