Winner's Win exists to help with something personal, so we collect as little as we can and never sell it. Winner's Win ("we") runs the app and this website.
When the site block is on, your phone asks Winner's Win's own server for the addresses of the websites and app servers it connects to (this is called a DNS lookup; Safari, Chrome and other apps that use iPhone's DNS settings do this, while apps with their own built-in DNS don't). This happens through the DNS setting the app turns on, or through the backup block profile if a helper installs it. Each lookup carries the name being looked up, for example draftkings.com, and a random code for your phone so your own block list and any unlock your circle approved apply.
If you turn the site block off, or remove the backup block, your phone stops sending lookups to us.
The Mac app's content filter checks the site name of each new connection on your Mac against your block list, on the Mac itself. It also stops connections to services used to get around the block: VPN and proxy services (including Cloudflare WARP), other encrypted-DNS services and Tor. No browsing history, visited or blocked site names, or traffic is sent to us or anyone else. The Mac app sends our server an on or off status for the filter about every 30 minutes, downloads your block list (including sites you or your circle added and any unlock your circle approved), and links to your account with a one-time code from Winner's Win on your iPhone. If you choose, it also downloads a public list of gambling sites from GitHub; that request goes to GitHub, not to us. Turning the filter off or removing the app stops all of this. If the filter is switched off while Winner's Win is open, your circle is told at its next check-in (within about 30 minutes). If the app is removed, or quit and the filter then switched off, the Mac stops checking in, and your circle is told once it has been silent for about three days (your main helper first, while your iPhone is still checking in). Using Remove this Mac in the app tells your circle right away if its filter had been on.
We never see which apps you choose to block. Apple's Screen Time keeps that on your phone and only gives us opaque tokens. We don't see the pages you visit or anything you send or receive: the site block only ever sees the names your phone looks up, never the content of a website, and the connections themselves go straight from your phone to the website.
Text filter: if you turn it on, iPhone lets our filter read texts from numbers not in your contacts so gambling promotions go to Junk. This happens only on your phone; the texts are never sent to us. Ad blocker: Safari's content blocker and the optional "block all ads" list run on your phone and send us nothing. Browser extension: blocks sites inside that browser only and sends us nothing.
Only to run the Service: blocking, alerting your circle, and handling approvals. Your circle sees your first name, your protection status, your requests and anything you choose to send them. Your circle also sees how many times the block screen came up in each category over the last 7 days (never which site), missed check-ins and the devices you link, and, if you link a bank, each flagged gambling payment (merchant, amount and date). If your subscription is set to end without renewing, or ends, or your account has no active free trial or subscription, your circle is told, along with the day blocking stops or that it has stopped. They never see your payment details. We may look at totals across all users (for example, how many accounts exist) with nothing that identifies you.
We don't sell or rent your data, and we don't use it for advertising. We use a small number of service providers to operate: Supabase (database and servers), Netlify (circle web pages), Resend (email), Twilio (text messages, if used), Plaid (bank monitoring, only if you link a bank), Cloudflare and Google (looking up website names that aren't blocked, without anything that identifies you), Google (sign-in, if you choose it), and Apple (sign-in, push notifications and payments). They process data only on our behalf.
Until you delete your account. When you ask to delete it in Settings, your circle is told and the account is deleted 72 hours later; you can cancel during those 72 hours, and nobody else can stop it. With no one in your circle, it is deleted right away. A commitment term doesn't hold it up. Deletion removes your account, circle, requests and your own block list. Deleting your account does not cancel your Apple subscription; cancel it in Settings, your name, Subscriptions. The app shields and the Screen Time code stay on your phone until you remove them, and while the site block's DNS setting stays on, our server keeps answering its lookups with the main gambling list only. Backups roll off within 30 days, and our host's request logs on its own schedule (see above).
Data is encrypted in transit. Your account key is stored in your phone's Keychain. A circle member's web page keeps their own sign-in on their device (browser storage) so they don't have to log in each time; there are no advertising or tracking cookies. Our websites count page views with our own code and no cookies: each visit sends only the page name, the kind of site that linked to it (for example a search engine), and a campaign tag if the link had one, never your IP address or anything that identifies you, and nothing at all if your browser sends Do Not Track or Global Privacy Control. No system is perfectly secure, and we'll tell you if something goes wrong that affects you.
The Service is for adults 18 and over. We don't knowingly collect information from anyone younger.
You can see, correct or delete your information at any time. Depending on where you live you may have additional rights; email us and we'll help.
Email support@winnerswin.app or visit support.