Privacy policy
Last updated: 2026-11-11
This policy covers the Bellwinder app for iPhone and this website, both published by Henry Williams. Bellwinder is a puzzle game: you turn a crank, fire a cork and solve stalls. It needs nothing from you to do that, and it is built to send as little as possible.
What the app collects
| Data | When and why | Kept | Who handles it |
|---|---|---|---|
| Device identifier (Apple's identifierForVendor) or push subscription id | Sent once per launch with the app version and bundle id, to check whether this version needs an update. | Not stored by our server. | Our server on Cloudflare |
Push subscription id and two app tags (firstInstall, the screen reached) | Only when update notifications are set up. Used to deliver update news. | Until you delete the app or turn notifications off. | OneSignal |
| Help desk message: text, attachments you choose, optional email, optional device details | Only when you press Send in Help & feedback. Used to answer you. | In our support inbox until the conversation is closed, then deleted within 90 days. | Cloudflare Email Routing, our mailbox |
| Progress, settings, the shelf | Stored on your iPhone so the game remembers where you are. | On the device until you reset or delete the app. | No one — never leaves the device |
What the app does not collect
No name, no account, no location, no contacts, no photos except ones you attach yourself, no advertising identifier (IDFA), no analytics, no crash reporting, no attribution, no ads and no tracking across apps or websites. The app never asks for App Tracking Transparency because it does not track.
Device identifier
The identifier sent at launch is Apple's per-vendor identifier or, when notifications are set up, the push subscription id. It is not linked to your name, email or any other identity. It lets the update check answer one device at a time; nothing else is built on it.
Push notifications
Bellwinder asks for notification permission only when you switch Notifications on in its Settings. They carry update news only. Turn them off any time in iPhone Settings → Notifications → Bellwinder. Delivery uses OneSignal, which stores the subscription id and the two tags listed above.
Embedded web content
The privacy policy and support page open in Apple's in-app browser. If an update is ever required, the app may show a page from our server in an embedded browser; like any browser, it can keep cookies and local storage for that page.
Children
Bellwinder is rated 4+ and contains no ads, purchases or social features. It is not directed at children under 13 and collects no personal data from anyone beyond what is listed above.
Keeping and deleting data
Settings → Reset progress in the app clears marks and the shelf. Deleting the app removes everything it stored on the device. To delete a help desk conversation or anything else we hold, write to support@bellwinder.info; we delete it within 30 days and confirm by email.
Where data is processed
Our server and email routing run on Cloudflare's global network; OneSignal processes notification data in the United States. Both act as processors on our behalf.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or object to its use. Write to support@bellwinder.info. You may also complain to your local data protection authority.
Contact
Changes to this policy
If what the app collects changes, this page changes first and the date at the top moves. Significant changes are also mentioned in the app's release notes.