What we store, and what we deliberately do not.
This describes WONS Sites — the platform — and the websites our customers publish through it. It is written against what the software actually records, field by field.
The short version
- We hold what an account needs: an email address, a hashed password, your site's content, and your billing history.
- Visitors to a site published here are not given a cookie by us, are not given an identifier, and their IP address is not stored.
- Sites on the free plan carry Google advertising, and Google sets its own cookies. That section is below in full, because it is the part where a third party is involved.
- We do not sell personal data, and we do not build advertising profiles. We have nothing to sell, because we do not collect it.
1. Who this covers
Two different people appear in this document and they are treated differently.
A customer is someone with an account here, who builds and publishes a website. A visitor is someone who reads a website one of our customers has published. If you arrived at a shop's website and ended up here, you are a visitor, and section 4 is the part that concerns you.
2. What we collect from customers
Your account
An email address and a password. The password is stored as a hash and is never recoverable — if you forget it, we can only replace it. New passwords are checked against a list of passwords known to have appeared in public breaches. That check runs on our own server against a local list; your password is not sent anywhere to perform it.
Your site's content
Everything you type into your dashboard: page text, section content, opening hours, staff, services, prices, your own contact details, and the files you upload. This is your material. We store it so we can serve it, and we keep previous versions of a page so you can go back to one.
Uploaded files are stored privately, not on a public path. They are served through links that are signed and expire, so a document is not something a stranger can guess the address of or a search engine can index by accident.
Billing
If you buy a plan we record what you bought, when, the amount, and the invoice. We never see or store your card number or your bank credentials. Payment is completed on the payment provider's own systems and they tell us only whether it succeeded and a reference we can reconcile against.
Cookies we set on the platform
| Name | What it is for | How long |
|---|---|---|
wons_sites_auth | Keeps you signed in. Not readable by JavaScript. | Your session |
wons_csrf | Proves a form was submitted from a real page and not by another website on your behalf. | 30 days |
Your browser also remembers a light or dark preference in local storage
(wons-sites-theme). That never leaves your device and is not a
cookie — it is not sent with any request.
3. Messages you send us
The contact form stores your name, your email address, your subject and your message, so that somebody can reply. It also records which page you were on and your browser's user-agent string, for working out what you were looking at when you wrote.
It stores a salted, one-way hash of your IP address — never the address itself. That exists so we can see that forty messages came from one source, and for nothing else. It cannot be turned back into an address by us.
4. Visitors to a site published here
This is the section most people arrive at this page for. When you read a website that a customer publishes through WONS Sites:
What is recorded
For each page view, the site's owner is shown counts built from five things:
| Recorded | Example |
|---|---|
| The path requested | /menu |
| The host you arrived from, if any | google.com — not the full URL |
| A broad device class | mobile or desktop |
| The date | not the time |
| Whether the page came from cache | a performance figure |
What is not recorded
- Your IP address. It is not stored, hashed or otherwise, for analytics.
- Any identifier for you. There is no visitor id, no fingerprint and no analytics cookie. Two visits by you are not linked to each other, by us or by the site's owner.
- Anything across sites. A site's figures cover that site only.
This means the site's owner can see that forty people read their menu page on Tuesday. Neither they nor we can see that you were one of them, or what you read next.
If you fill in a form on someone's site
That message goes to the site's owner, who decides what to do with it. We store it on their behalf, along with your browser's user-agent, the page you sent it from, and a salted one-way hash of your IP address for abuse control. For anything to do with that message — correction, deletion, what they do with it — the site's owner is the person to ask, and their contact details are on their site. We will help if you cannot reach them.
The theme preference
If a site offers a light and dark switch, your choice is kept in your browser's local storage for that site. It does not leave your device.
5. Advertising on free sites
Sites on the free plan carry advertising; that is what pays for them, and it is stated on the plan, on the pricing table and here. Every paid plan removes network advertising, including the cheapest one.
Where network advertising is shown, it is served by Google AdSense, and the following applies:
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to that website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to these sites and/or other sites on the internet.
- Users may opt out of personalised advertising by visiting Google Ads Settings.
- Users may opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices.
- Google's own description of how it uses data from sites that use its services is at policies.google.com/technologies/partner-sites.
Those cookies are set by Google, not by us, and we cannot read them. We do not pass Google your name, your email address, or anything you typed into a form.
6. Who else sees any of this
A small, listable set, and no one else:
- Payment providers, for the transaction itself. They receive what a payment needs and nothing about your site.
- Google, where advertising is shown — as described in section 5, and only on free sites.
- Our email provider, for messages we send you, such as a password reset or an invoice.
- Authorities, where the law of Bhutan actually requires it. We do not volunteer customer data.
We do not sell personal data. We do not trade or share it for advertising.
7. How long we keep things
- Your account and your site: while your account exists.
- Deleted sites: enquiries and uploads belonging to a site are deleted with it.
- Invoices: kept as long as accounting requirements demand, because they are financial records rather than profile data.
- Analytics: kept as daily totals. Since they contain no identifier, they are not personal data once rolled up.
- Contact messages: kept while they are useful for supporting you, and removed on request.
8. What you can ask us to do
- See it. Your site's content is available to you as JSON at a stable address, at any time, without asking.
- Correct it. Everything about your site is editable in your dashboard.
- Take it away. Ask, and we delete your account and its content. Invoices survive, because we are required to keep them.
- Ask what we hold. Write to us and we will tell you, in this level of detail.
Send any of those to hello@wons.bt, or use the contact form.
9. Security
Traffic is encrypted in transit. Passwords are hashed and breach-checked. Uploaded files are stored privately behind signed, expiring links rather than on guessable public paths. Forms are protected against cross-site submission, and repeated failed sign-ins are rate limited.
No system is perfect, and anyone claiming otherwise is selling something. If you find a security problem here, please tell us before you tell anyone else — we will take it seriously and we will not send a lawyer.
10. Children
This is a service for organisations. It is not directed at children, and we do not knowingly collect information from them. If a child's information has reached us, tell us and we will remove it.
11. Where the data lives
WONS Sites is operated from Bhutan. Data may be processed on servers outside Bhutan, and the third parties in section 6 operate internationally. Using this service means accepting that.
12. Changes
If this changes in a way that affects you, the date at the top changes and we will say what changed rather than quietly re-uploading it. Continuing to use the service after that means accepting the new version.