Privacy

What we keep when you order, and what goes online from your computer.

Last updated November 13, 2026

The short version

  • This website has no cookies, ads or scripts. Our shop keeps your cart in one cookie, and your browser deletes it when you close it. If you use My account, one cookie lets the emailed link sign you straight in (for 30 minutes), and one keeps you signed in for 30 days or until you sign out.
  • Our shop keeps daily totals of how many times each order link is followed and how many orders are started and paid. The totals have no names, email addresses, order numbers or internet addresses in them.
  • World Without Web sends nothing about you to us. Wilson runs on your computer, and what you type, say and save stays on it.
  • When you order, we collect what we need to deliver it, support you and keep tax records. We don't sell it or use it for ads.
  • Some things do go online when the computer is online, like updates. They're all listed below, with who sees what.

The website

  • worldwithoutweb.com has no cookies, ad pixels, scripts, sign-ups or forms, and no analytics service. The site's security settings block scripts and forms outright, so none can be added by accident.
  • Each Order button is a plain link to our shop that names the page it is on (for example, "home-price"). That name is the same for everyone who uses the button. Our shop uses it for the daily totals described under Our shop below.
  • The site is hosted by Cloudflare. Like any web host, Cloudflare handles your internet address and browser details to deliver pages and block attacks, under Cloudflare's privacy policy. We don't add an analytics service on top.
  • When you follow a link from our site to another one, our site doesn't tell the other site where you came from.

Our shop

  • The cart, your order page and My account run on our own shop at shop.worldwithoutweb.com, on a server we run ourselves. Cloudflare stands in front of it to block attacks, as it does for this site. Downloads come straight from our own download server, dl.worldwithoutweb.com, and the app gets its updates from that same server.
  • The cart cookie. Your cart is kept in one cookie: a signed session cookie that holds the IDs of the items you picked, how many of each and, if you came in by an Order button or a link in an ad, the name of that link (such as "home-price"). It has nothing about you in it and nothing that tells your browser apart from anyone else's, and your browser deletes it when you close it. The only other cookies are the two My account cookies below, and only if you use My account.
  • Daily totals. To learn which pages and ads bring buyers, our shop counts three things: how many times each order link is followed, how many checkouts are started and how many orders are paid. It keeps them as totals for each day, by the link's name and the product. The totals have no names, email addresses, order numbers or internet addresses in them, and there is no entry for any one visitor or order. So that a paid order can be added to the right total, the link's name goes to Stripe with your checkout. Our shop's own record of your order doesn't keep it. We do this counting ourselves: no outside service is involved, and it adds no cookie.
  • Two optional questions. After you pay, the thank-you page asks what else you looked at and how you heard about us. You can skip them. If you answer, we add one to that answer's total for the month. Your answer isn't saved with your order or your email address.
  • My account. My account signs you in with a link we email you. We never ask for or keep a password. Asking for the link sets a cookie for 30 minutes, so the link signs that same browser straight in. It holds only a random ID, and our shop keeps a scrambled copy of it with the link. Signing in removes it and sets one cookie on shop.worldwithoutweb.com that keeps that browser signed in for 30 days, or until you sign out. It holds only a random ID. Our shop keeps a record of the sign-in (your email address, when, and a scrambled copy of that ID) until then. Sign-in requests are counted for a day, by a scrambled copy of the address, to stop abuse.
  • Email me when orders open. While checkout is closed, you can leave your email address on our shop's reminder form. We first email you a link to confirm it. If nobody presses Yes on that link's page, we send nothing more and delete the address after 7 days. Once you confirm, we send one email when checkout opens and then delete your address from the list. Each of these emails has a Take me off the list link that deletes your address at once, and your email app's Unsubscribe button does the same. Requests are counted for a day, by a scrambled copy of the address, to stop abuse. The emails have no pictures or tracking, and we use the list for nothing else.
  • Server logs. Like most web servers, the shop and the download server log each request: your internet address, the page or file asked for, the time and your browser's name. Private order, sign-in, reminder and file links are masked in them. The server's log rotation deletes these logs after about 14 days. The shop program keeps a second, smaller log of what it did, such as an order by its number or an email address with most of it hidden. That log is capped by size, not by date: the oldest lines go when it fills up.

When you order

Checkout happens on a page run by Stripe, our payment processor. That page isn't part of our site. Stripe uses cookies and device details there to take the payment and stop fraud, under Stripe's privacy policy. Stripe may offer to save your details for faster checkout elsewhere; that's between you and Stripe.

What we receive and why:

WhatWhy we need it
Name and emailYour receipt, the link to your order page, shipping updates, and answering your questions
Phone number (Stripe asks for one with a drive order)Calling you back when you ask for help, and about a drive's delivery
Shipping address (drive orders)Shipping, sales tax and fraud checks
What you bought, the price, the tax and the dateYour order, tax records, refunds and the warranty
Card brand, last four digits and Stripe's fraud check resultMatching refunds and card disputes. We never see your full card number
How many download links your order page made, and whenStopping a shared or stolen order link
Emails and calls with usHelping you

What our shop keeps. Our shop's own record of an order holds your email address, what you bought, the amount, the dates, whether it's paid or refunded, Stripe's IDs for your checkout and your payment (the Checkout Session ID and the PaymentIntent ID), a drive's tracking number, and a scrambled copy (a hash) of your private order link. The link itself isn't stored, so it can't be read back out of our records. Your name, address, phone number and card details stay with Stripe.

Who we share it with, and only what each one needs:

  • Stripe, to take payments and check for fraud.
  • USPS, through Pirate Ship (our label service): your name and address, for drive orders.
  • Cloudflare, which hosts this site, stands in front of our shop, and forwards email sent to support@worldwithoutweb.com.
  • Resend, which sends our emails: your email address and what the email says, such as the link to your order page, under Resend's privacy policy.
  • Microsoft, which runs our business email.
  • Google, which runs our phone number (Google Voice). Google keeps call logs and voicemails under its own privacy policy.
  • Our accountant and tax agencies, as tax law requires.
  • Anyone the law requires us to tell, such as a court order.

We don't sell or rent your information, and we don't share it for ads.

Email. We email you about your order, your download, shipping and warranty service. Our emails come from orders@worldwithoutweb.com and are sent through Resend. We don't send marketing. The one email saying checkout is open goes only to addresses that asked for it and confirmed (Email me when orders open, under Our shop).

Remote help. If you ask for help on a call, we may use Quick Assist (Windows) or RustDesk (Linux) so we can see your screen. It only starts when you give us the code, you can stop it any time, and we don't record it.

How long we keep it. Order and tax records for at least 7 years, for taxes. Nothing deletes them after that on its own, so they stay until you ask us to delete them. The list of emails we sent you is cleared after 14 days. An address on the reminder list goes once its one email is sent, after 7 days if nobody confirms it, or at once when you take it off. Nightly backup copies of the shop's records are kept 14 days, so a deleted record can sit in a backup that long. Server logs are covered under Our shop above. The daily totals and the answer totals have nothing about any one person in them, so we keep them.

Your choices. You can ask for a copy of what we hold about you, ask us to fix it, or ask us to delete it. We'll keep only what tax law makes us keep. Email support@worldwithoutweb.com.

On your computer

  • Nothing reports to us. The app itself has no account, sign-in, ads, usage stats or crash reports.
  • Your things stay on your computer. Notes, supplies, map pins, checklists, Important Papers, the radio log and your plan card are kept in a folder on your computer. Chats with Wilson aren't saved after you close the app. We can't see any of it.
  • Voice. When you hold push to talk, the recording goes to a temporary file on your computer, is turned into text there, and is deleted.
  • Your location. If you use a GPS, your position is shown on the map and never leaves the computer.

What goes online, and who sees it

When the computer is online, these reach the internet. Each one sees your computer's internet address, as with any download, under its own privacy policy. None of them gets your name, your files or your chats from us.

WhatWho it talks toWhat they seeCan you stop it?
Keep It Current (updates)Our update server, to ask what's new and get app updates. Library books come from Kiwix's serversInternet address, and which version of the app and books you haveYes, one switch turns it off
Free add-onsKolibri Studio or Kiwix, only when you click to get oneInternet address and what you downloadOnly happens when you click
Make a Linux USBLinux Mint's download serversInternet addressOnly happens when you run it
WindowsMicrosoft, through Windows itself and WebView2 (the part of Windows that draws our app's screens)What Microsoft's privacy statement saysThrough Windows settings. That's Microsoft's, not ours
Linux MintMint's and Ubuntu's update servers. Our installer turns Mint's automatic updates on so security fixes arriveInternet address and the updates you getYes, in Mint's Update Manager

On Linux Mint, one switch turns off Wi-Fi and Bluetooth, and then nothing goes online.

Children

World Without Web is sold only to adults 18 and older. We don't knowingly collect information from children under 13.

Changes

If we change this policy, we'll post the new version here with a new date. If a change affects information we already have, we'll email you first.

Contact

support@worldwithoutweb.com · (316) 285-0204 · 27103 E Cedar Grove Dr, Lake Lotawana, MO 64086