Privacy Policy

1 Who We Are

ClumsyNetWatch is a free Windows network scanner developed and distributed by Clumsy's Lab LLC, operated by an individual developer. You can reach us at hello@clumsyslab.tech or through clumsyslab.tech.

This Privacy Policy explains how ClumsyNetWatch (the "Software") handles data when you use it. It does not apply to third-party websites linked from the Software or our website.

2 What We Collect

Telemetry is completely optional. You are asked to opt in on first launch and can change your choice at any time in Preferences → Privacy. If you decline, nothing is ever sent.

If you opt in, the following anonymous data points are sent on app startup and when a scan completes:

• App version — e.g. "0.9.0"
• Windows OS version — e.g. "Windows 11 22H2 (10.0.22621)"
• Event type — "startup" or "scan_complete"
• Scan mode — "Quick", "Common", "Full", "Paranoid", or a custom profile name
• Host counts — number of hosts found alive and total hosts scanned
• Anonymous Install ID — a randomly generated GUID created on your device at first launch; it contains no personal information and cannot be linked back to you
• Country code — derived from your IP address at the time the request is received by our server; the IP address itself is not logged or stored
• Timestamp — date and time of the event (UTC)

3 What We Never Collect

4 How Data Is Used

Anonymous telemetry data is used solely for the following purposes:

• Understanding which scan modes and features are most commonly used, to prioritize development
• Tracking the geographic distribution of users at the country level
• Monitoring active user counts and version adoption
• Identifying crashes or error patterns by correlating event timestamps with known issues

Data is never sold, rented, shared with advertisers, or disclosed to any third party except as required by law. It is never used to build individual user profiles or to make decisions affecting individual users.

5 Data Storage & Retention

Anonymous telemetry events are stored in a Cloudflare D1 database (SQLite) hosted on Cloudflare's infrastructure in the United States. Cloudflare's privacy and security practices are described at cloudflare.com/privacypolicy.

Telemetry records are retained for a maximum of 24 months from the date they are received. Records older than 24 months are deleted on a rolling basis. You may request early deletion of all records associated with your Install ID at any time by contacting us — see Section 13.

6 Your Rights & Opt-Out

You have the following rights with respect to your data at any time:

• Opt out of telemetry — open Preferences → Privacy in the app and uncheck "Send anonymous usage data". No further data will be sent from that point. Previously sent data remains in the database until the 24-month retention period expires or you request deletion.
• Request deletion — email hello@clumsyslab.tech with your Install ID (found in the Preferences window) and the subject line "Privacy — Delete My Data". We will delete all records associated with that ID within 30 days.
• Access your data — you may request a copy of all telemetry records associated with your Install ID by emailing us at the address above.

Because the Install ID is a random GUID with no name or email attached, we cannot identify or delete records without it. Your Install ID is shown in Preferences → Privacy in the app.

7 GDPR (EU / EEA Users)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) applies to any data we process about you.

Legal basis for processing: We process anonymous telemetry data on the basis of your explicit consent (Article 6(1)(a) GDPR), given through the first-run opt-in dialog. You may withdraw consent at any time via Preferences → Privacy, as described in Section 6.

Your GDPR rights include:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / "right to be forgotten" (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, contact us at hello@clumsyslab.tech. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority.

Data transfers: Telemetry data is stored on Cloudflare infrastructure in the United States. Cloudflare participates in the EU-US Data Privacy Framework and provides appropriate safeguards for international data transfers.

8 Children (COPPA)

ClumsyNetWatch is not directed at children under the age of 13. We do not knowingly collect any data from children under 13. If you believe a child under 13 has submitted data through our telemetry system, please contact us at hello@clumsyslab.tech and we will promptly delete the associated records.

9 Cookies & Tracking

The ClumsyNetWatch website (clumsyslab.tech/clumsynetwatch/) does not use cookies, tracking pixels, analytics scripts, advertising networks, or any third-party tracking technology. No persistent identifiers are set in your browser when you visit the site.

Standard web server access logs (IP address, page visited, timestamp, browser user-agent string) may be retained by the web host (Hawk Host) for up to 30 days for security and abuse-prevention purposes. These logs are not processed by Clumsy's Lab LLC for analytics.

10 Third-Party Services

The following third-party services are involved in operating ClumsyNetWatch:

• Cloudflare Workers + D1 — hosts the anonymous telemetry endpoint and database. Subject to Cloudflare's Privacy Policy.
• GitHub — hosts software releases and the update-check API endpoint. Subject to GitHub's Privacy Statement.
• Hawk Host — web hosting for clumsyslab.tech. Subject to Hawk Host's Privacy Policy.

Clumsy's Lab LLC is not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material (e.g. we begin collecting new categories of data), we will note this prominently. Continued use of the Software after changes are posted constitutes your acceptance of the revised policy.

We recommend reviewing this page periodically. Previous versions can be found via the Internet Archive at web.archive.org.

12 Governing Law

This Privacy Policy is governed by the laws of the State of Missouri, United States, without regard to its conflict-of-law provisions. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of the State of Missouri. Users in the EU/EEA retain all rights afforded under the GDPR regardless of this governing law clause.

13 Contact

For any privacy-related questions, data deletion requests, or GDPR inquiries, contact:

Clumsy's Lab LLC
Email: hello@clumsyslab.tech
Website: clumsyslab.tech

Please include your Install ID and the subject line "Privacy —" followed by your request type (e.g. "Privacy — Delete My Data" or "Privacy — Data Access Request") so we can process it promptly.