What FlowSync collects, why it needs it, and how to delete it.
The flowsync.cc site and the FlowSync program are run by a private individual, who decides what is collected and why — and is responsible for keeping it safe.
You can get in touch on Telegram: @optimizewindows_bot. We answer any question about your data within 30 days at the latest.
The full list is below. If it is not in this table, we do not collect it.
| Data | When it appears | Why |
|---|---|---|
| Email address | At registration | Signing in and recovering access |
| Password | At registration | We store a one-way fingerprint rather than the password itself — the password cannot be read back from it |
| Display name and profile icon | If you set them | How to label you in your account |
| IP address and browser name | When you sign in, register, or change your password | Protection against password guessing and against other people getting into your account |
| Computer identifier | When a key or trial is activated | A key works on one computer. This is a technical string describing hardware — not a name, a document, or an address |
| IP address | When a key or trial is activated | Protection against one key being handed around |
| Computer name, number of runs, date of the last one | When the program checks your key | So we can show it back to you in your account |
| Telegram: ID, name, @username, language | If you message our bot | Delivering your key, password recovery, support |
| Payment ID, amount, currency | When you buy a key | Confirming payment and issuing refunds |
| Rating and review text | If you leave a review | The rating on the site. Published without your name or email |
| Invite code | If you arrived through a friend's link | To credit the bonus to whoever invited you |
| Article rating and an anonymised network key | If you press Yes or No under an article | To show how useful the article is and to stop the score being gamed. The key is a one-way transformation — it cannot be turned back into an address |
| Which bot command or button you used, and when | When you use the Telegram bot | To see what's awkward in the bot and fix it. This log never contains the text of your messages — only the fact that you sent something, and its length |
| The text of your support request, any attached files, and our reply | When you write to support through the bot | To reply to you and keep track of the conversation. The file itself stays on Telegram — we keep only a reference to it. Only the service owner can see any of this. Kept for 120 days, then deleted automatically |
| Game progress: charge, spendable balance, energy pool, purchased upgrades, cores and restarts, core-shop steps, opened chests and active boosters, overdrive state and the time of the next surge, day streak, quests, achievements and the chosen look. If you received a key for a level — that key itself | If you use the Progress section in your account | To show your level and your look. If you set a name, it appears on the leaderboard — both in your account and on the site's front page, which any visitor can see. You can switch that off in your account at any time. A key issued for a level is kept so you can see and copy it again, not only once at the moment it was issued. Kept for as long as the account exists |
| A partner-programme claim: your TikTok username, the video link, its publication date, view count and length, the tier you claimed, the proof file, the amount paid and the reason for a rejection | If you submit a claim at flowsync.cc/en/creators | To check the video and pay you. Only the service owner sees the proof file, and it is deleted 90 days after the claim is decided. The claim itself — link, views, amount — stays as a payment record for as long as your bot account exists |
| IP address, page opened, browser | On any visit to the site | Server log: protection against attacks and counting visits. In the statistics themselves the address is truncated, so it can no longer identify the visitor |
The program changes Windows settings, so it matters to say plainly what it does not do.
This site sets no cookies. Not ours, not anyone else's: there are no visitor counters, no ad networks, no social buttons. Everything your browser loads on flowsync.cc comes from our own server — not a single third-party request.
That is why you will not see a "accept cookies" box here. That box exists where visitors are tracked, and there is nothing here to track them with.
So the site can remember your choices, it uses your browser's storage (localStorage). It lives on your device, and its contents are never sent to our server.
| What is stored | Why | How long it lasts |
|---|---|---|
cs2opt_token |
Your pass into the account area — otherwise you would be signed out on every page | Until you sign out |
fs_lang |
The site language you picked | Until you clear it |
fs_theme |
Light or dark appearance | Until you clear it |
fs_ref_code |
The code of the friend who invited you | 30 days |
fs_rating_cache_v5 |
The rating from the home page, so we do not have to fetch it again on every page | 5 minutes |
fs_vote_… |
How you rated an article, so the button remembers your choice | Until you clear it |
fs_reset_email |
Your email while you are resetting your password | Until you close the tab |
All of it disappears if you clear this site's data in your browser. After that the account area will ask you to sign in again, and the language and appearance go back to their defaults.
We count visits from the web server log — the entries it already writes for every request. Nothing extra is loaded into your browser for this, and no outside company sees these numbers.
The difference matters. A normal tracker follows a person: it can recognise you on another site and stitch your visits into a profile. A server log is just a list of requests, and before counting we cut off the last part of each address, so in the statistics you are already indistinguishable.
We do not sell your data, rent it out, or pass it to advertisers. Only three companies can reach it, and the site does not work without them:
There is one more case where data may be handed over: a formal request from a government authority that we are legally required to comply with.
The server is located in Helsinki, Finland — inside the European Union.
The data is yours, not ours. You can:
To use any of these rights, message us on Telegram at @optimizewindows_bot from the account linked to your profile. We reply within 30 days at the latest. There is no charge for this.
One thing to keep in mind: deleting your account disables the key you bought, and it cannot be restored.
The service is intended for people aged 16 and over. We do not knowingly collect data from younger children. If it turns out an account was created by a child, we will delete the data — just tell us.
The connection to the site is encrypted. Passwords are stored as one-way fingerprints — even we cannot read your password, and we will never ask you to tell us what it is. Only the owner of the service has access to the database.
Perfect security does not exist, and promising it would be dishonest. If a breach does happen and it puts you at risk, we will say so in our channel and tell the people affected.
If this policy changes, the date at the top of the page will be updated and the change itself will appear in the site changelog. We announce anything important in our Telegram channel.
For anything about your data — Telegram @optimizewindows_bot. News and announcements — our channel @flowsync_windows.