Privacy Policy (GDPR)

1. What telemetry is collected?

CleanOS telemetry contains only non-personally identifiable technical indicators required to analyze system stability:

• Anonymized hardware UID (BLAKE3 hash of SMBIOS hardware UUID). This hash is completely non-reversible.
• Component name (e.g. 'firefox') and version string.
• Event types (APP_CRASH, COMPONENT_OK, MALWARE_SUSPECT, BASELINE_MISMATCH, ROLLBACK).
• Details payload containing CPU registers on crash, blocked syscalls, or active Blake3 binary hashes.

2. What is NEVER collected?

CleanOS NEVER stores your IP address on disk. The support rate limiter hashes your IP in memory with a daily salt that rotates at midnight; after midnight, the salt is lost and all past rate limit history becomes cryptographically unrecoverable. We never collect names, personal files, user accounts, or private identifiers on the free tier.

3. Data Retention

Raw telemetry event logs are retained for 90 days, after which they are deleted automatically. Aggregated crash counts per component version are retained indefinitely to prioritize engineering fixes.

4. Encryption & Security

Pro and Enterprise accounts store credentials and billing data in a physically separate SQLite database (accounts.db) encrypted with SQLCipher (AES-256-CBC). The decryption key is held only in server RAM and is never written to disk. Daily backups are encrypted using age public-key cryptography on the server; the private key to decrypt them is offline and never leaves the developer's home server.

5. Strict Opt-In & Settings Checkboxes

CleanOS telemetry and automated crash diagnostics are 100% strictly OPT-IN. Zero data is transmitted or shared without your explicit consent via the checkboxes in Settings -> Privacy & Telemetry. Please note: if you disable or do not opt-in to telemetry, the Tech-Bunker will not receive anonymized crash logs for your specific physical hardware. Consequently, it will take longer for your specific hardware and drivers to become fully supported or compatible via automated .cmod quirk hotfixes. Your system will continue to function fully and without restriction locally.