Privacy Policy
How TADOO LLC handles personal information for Widgey and this website. Last updated August 30, 2026.
The short version
Widgey has no accounts, no analytics, no telemetry, no advertising, and no cookies. Your layout, your settings and your hardware readings stay on your own computer and are never transmitted to us.
The only personal information we hold is whatever you put in an email to us, and the ordinary web server logs our host keeps, which include IP addresses.
The rest of this page is the formal version, and it is written to be accurate rather than exhaustive. If something here does not match what the software actually does, the software is the thing we got wrong, and we want to hear about it.
1. What information do we collect?
Information you give us
There is no account to create and no form on this website. The only way to give us personal information is to contact us directly, in which case we receive:
- Your email address
- Your name, if you choose to sign your message
- Anything else you choose to put in the message
We do not process sensitive information as defined by applicable law, such as racial or ethnic origin, political opinions, religious beliefs, health data, biometrics or sexual orientation.
Information collected automatically
This website is made of static files. It runs no analytics and sets no cookies. Our web host keeps standard server access logs, which record the IP address of each request, the file requested, a timestamp, and the browser's user-agent string. That is the whole of it. We do not track browsing behaviour, build interest profiles, or follow visitors across other websites.
Payment information
Widgey is sold through Steam. Valve Corporation handles the purchase, the payment method and the account. We never see your payment details, your address, or your Steam password. Valve's handling of that information is governed by the Steam Privacy Policy, not this one.
2. The Widgey application
This section covers the desktop software rather than the website, because they behave differently and most privacy policies do not tell you about the software at all.
What stays on your machine
Your layout, page arrangement, appearance settings, each widget's own saved settings, and every
hardware sensor reading are stored locally in
%APPDATA%\WidgetDashboard\ and are never sent anywhere.
What Widgey sends to us
Two requests, both on startup, both plain downloads:
| Request | Why | What it sends |
|---|---|---|
blocklist.json |
Lists community widgets found to be harmful, so Widgey refuses to load them | Nothing beyond the request itself |
version.json |
Says which version is current, so Widgey can tell you an update exists | Nothing beyond the request itself |
Neither request carries an identifier, a machine name, a licence key, or any information about what you have installed or how you use the app. They are the same two files for everyone. As with any web request, our server sees the connection, including your IP address, and logs it as described above.
What Widgey sends elsewhere
- Widgets you have chosen that need live data, such as weather, markets, news and scores, contact their own sources directly. Each widget can only reach the hosts it declares, and we are not party to those requests.
- Steam, for browsing, installing and publishing Workshop widgets, when Steam is running. That traffic is between you and Valve.
Community widgets
Widgets published to the Steam Workshop are written by other people, not by us. They run in a sandbox that confines file access to the widget's own folder, denies camera, microphone and location, blocks clipboard access, and permits network requests only to hosts the widget declared before you installed it. We do not receive any data a widget handles.
3. How do we process your information?
We use personal information only for these purposes:
- To answer you. If you email us, we use your address and message to reply and to resolve the problem.
- To keep the service working and secure. Server logs are used to diagnose faults, to see whether the service is up, and to identify abuse such as denial-of-service traffic.
- To comply with the law. Where we are legally required to retain or disclose information, or need to establish or defend a legal claim.
We do not use your information for marketing, we do not send newsletters, and we do not process it to build any profile of you.
4. What legal bases do we rely on?
If you are in the EU or UK, the GDPR and UK GDPR require us to name a lawful basis for each purpose:
- Legitimate interests for server logs, used to keep the service running, secure and diagnosable. We consider this proportionate because the data is minimal, is not used to profile anyone, and is kept briefly.
- Legitimate interests for replying to a message you sent us, since you initiated the contact and expect a reply.
- Legal obligation where a law requires us to keep or disclose something.
Where we ever rely on consent, you may withdraw it at any time, and doing so does not affect processing carried out before the withdrawal.
If you are in Canada, we rely on your express consent where you provide information directly, and implied consent for the server logs necessary to deliver the website you requested. You may withdraw consent at any time.
7. Is your information transferred internationally?
Our website, our servers and our host are located in the United States. If you visit from elsewhere, the request necessarily reaches a server in the United States, and the resulting log entry is stored there.
If you are in the European Economic Area, the United Kingdom or Switzerland, the United States may not offer data protection equivalent to your own country's. The information involved is limited to server log data and any message you choose to send us. Where a transfer of personal information out of those regions requires a safeguard, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum as incorporated in our host's data processing terms.
8. How long do we keep your information?
Server access logs are retained by our host for a short period for security and diagnostics, and are then rotated and deleted. We do not archive them, aggregate them, or move them elsewhere.
Email correspondence is kept for as long as needed to resolve your issue and for a reasonable period afterwards in case you follow up, then deleted. If you ask us to delete your correspondence sooner, we will.
There are no accounts, so there is no account data to retain or delete.
9. How do we keep your information safe?
The strongest protection we offer is that we hold almost nothing. There is no user database, no account system, no payment records and no analytics store, so there is no repository of personal information to lose.
What we do hold is protected by transport encryption (HTTPS across the website and both application requests), access controls on our hosting account, and our host's own infrastructure security.
No method of transmission or storage is completely secure. We cannot guarantee that unauthorised parties will never defeat our safeguards, and we do not ask you to send us anything sensitive.
10. Do we collect information from children?
Widgey is a general-audience product and is not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share such information.
Widgey is distributed through Steam, and Valve sets and enforces the minimum age for a Steam account. If you are under the age of majority where you live, you should have a parent or guardian's permission before purchasing.
If we learn that we have received personal information from a child under 13, we will delete it promptly. If you believe a child has sent us information, contact us and we will remove it.
11. What are your privacy rights?
Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a portable copy, and not to be subject to automated decision-making. We do not carry out any automated decision-making or profiling.
To exercise any of these, email us. We will respond within the time applicable law allows, normally one month.
A realistic note on what we are likely to find: because we keep no accounts and run no analytics, we usually hold nothing about a given individual beyond whatever emails you have sent us. If you ask what we have and the answer is nothing, we will tell you plainly.
If you are in the UK
You may complain to us directly, in addition to your rights under the UK GDPR and the Data Protection Act 2018. We will acknowledge your complaint within 30 days, investigate without undue delay, and explain the outcome.
If you are unhappy with our final response, you can refer the complaint to the Information Commissioner's Office:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you are in the EEA or Switzerland
You may complain to your national data protection authority. In Switzerland, that is the Federal Data Protection and Information Commissioner.
12. Controls for Do-Not-Track features
Some browsers offer a Do-Not-Track signal. No uniform standard for honouring it has been settled, and we do not currently respond to DNT signals.
In practice this makes no difference here: we do not track you across websites, so there is nothing for the signal to switch off. California law requires us to state our position regardless, and this is it.
13. Do United States residents have specific rights?
If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have rights to know what we hold, to get a copy, to correct it, and to delete it.
Categories of personal information collected
In the last twelve months we have collected:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | IP address; email address and name if you contact us | Yes |
| B. California Customer Records | Financial, employment or education information | No |
| C. Protected classifications | Age, race, gender, national origin | No |
| D. Commercial information | Purchase history, payment information | No |
| E. Biometric information | Fingerprints, voiceprints | No |
| F. Internet or network activity | Browsing history, search history, behavioural or interest data | No |
| G. Geolocation data | Device location | No |
| H. Audio, visual or sensory | Images, recordings | No |
| I. Professional or employment | Job history, qualifications | No |
| J. Education information | Student records | No |
| K. Inferences | Profiles, preferences, characteristics | No |
| L. Sensitive personal information | No |
Purchase and payment information sits under category D for most companies. It is marked No here because Valve processes your purchase and we never receive those details.
Selling, sharing and targeted advertising
We have not sold personal information, shared it for cross-context behavioural advertising, or used it for targeted advertising or profiling in the preceding twelve months, and we have no plans to. We disclosed personal information to our hosting provider for the business purpose of operating the website.
Your rights and how to use them
- To know whether we process your personal data, and to access it
- To correct inaccuracies
- To delete it
- To obtain a portable copy
- To opt out of sale, sharing, targeted advertising or profiling, none of which we do
- Not to be discriminated against for exercising any of these
Email us to exercise any right. You may use an authorised agent, who will need to show they are authorised. We will verify your identity before acting, using only the information you provide for that purpose. If we decline a request, you may appeal by replying to our decision, and we will explain the outcome in writing. If an appeal is denied you may complain to your state attorney general.
California "Shine the Light"
California residents may request details of personal information disclosed to third parties for their direct marketing purposes. We disclose none, and this will be our answer to any such request.
14. Do we make updates to this notice?
Yes, when the software or the law changes. The "Last updated" date at the top will change with it. If we make a material change, we will post a clear notice here. We encourage you to look at this page again after a significant Widgey update.
15. How can you contact us?
TADOO LLC is responsible for deciding how your personal information is processed.
For any question about this notice, or to review, update or delete information we hold about you, email support@widgeydashboard.com.