Privacy policy

Last updated 30 September 2026 · Applies to getcloudwindow.com and the Cloud Window private preview

Who we are

Cloud Window is made by Seeking Gradient LLC, a California limited liability company. We are the controller of the personal data described here. Write to hello@getcloudwindow.com about anything on this page.

What we collect on this website

Your email address, only if you request an invite. It is stored in a private database in Amazon Web Services (US West) and used only to tell you about Cloud Window availability. It is never sold or shared for marketing.
Website analytics. We use cookie-free Cloudflare Web Analytics and our own aggregate counters to understand page views, referring websites, countries, screen-size categories, campaign tags and actions such as opening the demo or requesting an invite. Our counters store daily totals, not IP addresses, user identifiers, full URLs or form contents, and delete totals after 90 days. Campaign tags are remembered only for the current browser tab. Our counters honor Do Not Track and Global Privacy Control.
Optional session replay. If enabled and you choose “Allow replay”, Microsoft Clarity records interactions on these marketing pages to help us improve them. Email and invite-code forms are masked. Clarity does not run on your cloud computer or account portal. You can change your choice using Analytics preferences in the footer. See Microsoft’s privacy statement.
Server logs kept by our hosting provider, Cloudflare, for a short period to run and secure the site.

This site sets no cookies of its own and shows no advertising.

What we collect when you use a Cloud Window computer

The private preview is by invitation. When you have an account, we hold:

Your account: email address, a hashed password, and sign-in records.
An activity log of account actions, such as signing up, creating or opening a computer, updates and failed sign-ins (for a failed sign-in, a hash of the address, never the address). It records that something happened, never what you did inside your computer, and is kept for 180 days.
Your computer's records: its name, region, status and the secrets needed to sign you in to it.
Your computer's contents: everything on its disk is yours. We do not read it, index it or use it for any purpose other than running and backing up your computer.
Operational logs from the computer itself, such as service health and the audit log of agent actions. Those logs live on your computer and record what was done, not the contents of your screen or files.

What a hosted computer reports

A computer made through the account portal sends two small things to the portal, once a day, and never anything you wrote, ran or opened.

Usage statistics (you can switch this off): the release it runs, how long it has been up, its load, how much memory is free and how much disk is used. Nothing else: no names, files, addresses or counts of anything you do. In Preferences, under Usage statistics, you can switch it off and press "Show what is sent" to see exactly the last report and when it went. A computer that was not made through the portal sends nothing.
A connection counter (this cannot be switched off on a hosted computer): every hour the computer's host counts how many new outbound connections were opened to each destination port and how many different destinations were reached, so we can spot spam, scanning and attacks launched from our machines. It records numbers only: never the contents of a connection, never the names or addresses of the places it went, and no packets are captured. It is kept for 30 days.

The numbers can raise a flag for the owner of the service to look at; a person decides what happens next. Outbound mail ports are blocked on every hosted computer.

Demo computers

The "Try It Instantly" demo on this site is monitored, and you agree to that before it starts. We record your IP address, your browser, and the sites visited in the demo's browser, and keep them for 30 days. The demo computer is wiped after each session, so nothing else you do in it is kept. A demo lasts five minutes.

The demo also counts which of the five suggested steps you did and when, which kinds of window you opened, how long you took to do something first, and what kind of screen you have (phone, tablet or desktop and its size). That is kept for 30 days with the record above. This site notes, without any identifier, when the demo page is opened, the box is ticked, the start button is pressed, and the invite form is sent after a demo; once a demo has started those notes carry its session number, which is how they are matched to the record above.

Where your computer runs and who else is involved

Computers run on virtual servers rented from OVHcloud in the United States (Oregon). The account portal and the backup storage run on Cloudflare. The invite list runs on Amazon Web Services. Website aggregate counters run on Cloudflare; optional session replay is provided by Microsoft Clarity. When paid plans exist, payments will be handled by a payment processor such as Stripe, which will receive your payment details directly; we never see your full card number. We will list any new provider here before using it.

If you connect your own accounts on the computer, for example Anthropic for Claude Code, OpenAI for Codex or voice, or Google Chrome sync, those services receive what you send them under their own terms. We do not receive your keys or your conversations with them.

Administrative access

As with any hosted computer, we hold administrative access to the servers your computer runs on. We use it only to operate the service, to help you when you ask, or when the law requires it, and we tell you when we have used it for support. Our hosting provider also retains the access any data-center operator has.

Backups and retention

Your computer's disk is snapshotted daily by the hosting provider, and separately every night your computer makes its own backup. It copies your workspace, Downloads, editor documents and settings to storage at Cloudflare (R2), in the United States, encrypted on your computer before anything leaves it, so what is stored is unreadable without the key. Left out: the browser profile and its sign-ins, the keys you saved on the computer (you enter them again after a restore), the computer's own secrets, and caches. We keep two weeks of nightly backups and older ones are deleted automatically.
We hold the backup key. Each computer has its own random key, stored on the computer and, sealed, in our account system, so that we can restore your files if you lose the computer. That also means we are able to read a backup; we do so only to restore for you at your request, or when the law requires it, and every restore is logged.
If you close your account or your computer is retired, its disk and backups are deleted within 30 days. Ask before then and we will give you a copy of your files.
Invite-list emails are deleted when you ask, or when the preview ends and you have not become a customer.

Your rights

You can ask us to show you, correct or delete the personal data we hold about you, or to stop emailing you, at any time by writing to hello@getcloudwindow.com. We answer within 30 days. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your data-protection authority.

Children

Cloud Window is for adults. We do not knowingly collect data from anyone under 18.

Changes

When this policy changes we update the date at the top and, for changes that matter, email account holders.