mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2024-12-25 23:39:37 -05:00
97 lines
4.5 KiB
ReStructuredText
97 lines
4.5 KiB
ReStructuredText
|
==============
|
|||
|
|
Privacy policy
|
|||
|
|
==============
|
|||
|
|
|
|||
|
|
|
|||
|
|
The short version is that we try to respect your privacy as much as
|
|||
|
|
possible. We absolutely do not sell any user data. In fact, we go out of
|
|||
|
|
our way to help you keep your data private from everyone, including us.
|
|||
|
|
For example, from the moment you :doc:`install Qubes OS </user/downloading-installing-upgrading/installation-guide>`, we offer to set up
|
|||
|
|
`Whonix <https://www.whonix.org/>`__ so that all of your updates are
|
|||
|
|
routed through `Tor <https://www.torproject.org/>`__.
|
|||
|
|
|
|||
|
|
Website
|
|||
|
|
-------
|
|||
|
|
|
|||
|
|
|
|||
|
|
For the legally-required boilerplate, see `Website Privacy Policy <https://www.qubes-os.org/website-privacy-policy/>`__.
|
|||
|
|
|
|||
|
|
This is just a static website generated with Jekyll and hosted from
|
|||
|
|
GitHub Pages. We try to use as little JavaScript as possible. We host
|
|||
|
|
all resources locally (no third-party CDNs) so that you only have to
|
|||
|
|
connect to one domain. This site should be easy to browse using Tor
|
|||
|
|
Browser and with scripts blocked. We also have an `onion service <http://qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/>`__
|
|||
|
|
(access is not logged). We even go out of our way to make it easy to
|
|||
|
|
download `this website’s git repo <https://github.com/QubesOS/qubesos.github.io>`__, including all
|
|||
|
|
the website source code, so that you can host this entire site from your
|
|||
|
|
own local machine offline. Better yet, we’ve specifically written all of
|
|||
|
|
the :doc:`documentation </index>` in Markdown so that the plain text can be
|
|||
|
|
enjoyed from the comfort of your terminal. Here’s the
|
|||
|
|
`repo <https://github.com/QubesOS/qubes-doc>`__. (By the way, Git tags
|
|||
|
|
on our repos are PGP-signed so you can
|
|||
|
|
:doc:`verify </project-security/verifying-signatures>` the authenticity of the content.)
|
|||
|
|
Obviously, we don’t use any ads or trackers, but this is still a public
|
|||
|
|
website, so man-in-the-middle attacks and such are always a possibility.
|
|||
|
|
Please be careful. See :ref:`FAQ: Should I trust this website? <introduction/faq:should i trust this website?>`
|
|||
|
|
|
|||
|
|
Update Servers and Repositories
|
|||
|
|
-------------------------------
|
|||
|
|
|
|||
|
|
|
|||
|
|
We provide repositories at https://yum.qubes-os.org and
|
|||
|
|
https://deb.qubes-os.org.
|
|||
|
|
|
|||
|
|
We collect and store standard server access and error logs, which
|
|||
|
|
include IP addresses. We use this data for generating :doc:`Qubes userbase statistics </introduction/statistics>` and for incident response.
|
|||
|
|
|
|||
|
|
The data is retained for up to three months so that we can re-calculate
|
|||
|
|
the previous two months’ statistics in case anything goes wrong. After
|
|||
|
|
that, the data is deleted. We never sell the data to anyone or share it
|
|||
|
|
with any third party.
|
|||
|
|
|
|||
|
|
If you would like to hide your IP address from us, we strongly encourage
|
|||
|
|
it and are happy to help you do so! Simply choose the Whonix option to
|
|||
|
|
route all of your updates over Tor when :doc:`installing Qubes OS </user/downloading-installing-upgrading/installation-guide>`.
|
|||
|
|
|
|||
|
|
Onion Services
|
|||
|
|
--------------
|
|||
|
|
|
|||
|
|
|
|||
|
|
We provide an `onion service <http://www.qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion>`__
|
|||
|
|
for the website and onion service mirrors of the repositories. Access to
|
|||
|
|
these servers is not logged.
|
|||
|
|
|
|||
|
|
Mirrors
|
|||
|
|
-------
|
|||
|
|
|
|||
|
|
|
|||
|
|
There are also other third-party mirrors hosted by volunteers. These are
|
|||
|
|
used both for `ISO downloads <https://www.qubes-os.org/downloads/#mirrors>`__ and
|
|||
|
|
`updates <#update-servers-and-repositories>`__. We have no control over
|
|||
|
|
what data these mirrors collect or with whom they share it. Please see
|
|||
|
|
the privacy policy of each respective mirror operator.
|
|||
|
|
|
|||
|
|
Qubes OS
|
|||
|
|
--------
|
|||
|
|
|
|||
|
|
|
|||
|
|
We have specifically designed Qubes OS so that it is not possible to
|
|||
|
|
collect any data directly from Qubes OS installations. In other words,
|
|||
|
|
Qubes OS does not have the ability to “phone home” and is intentionally
|
|||
|
|
architected to forbid that from happening. This is mainly because we
|
|||
|
|
have ensured that dom0 has no network access.
|
|||
|
|
|
|||
|
|
We don’t want the ability to collect any data directly from Qubes OS
|
|||
|
|
installations, because if anyone has that power, then the system is not
|
|||
|
|
secure. We use Qubes OS ourselves as a daily driver for our work and
|
|||
|
|
personal lives, so our interests are aligned with yours. We want privacy
|
|||
|
|
too! Thankfully, Qubes OS is free and open-source software, so you don’t
|
|||
|
|
have to take our word for it.
|
|||
|
|
|
|||
|
|
Of course, third-party software (including other operating systems)
|
|||
|
|
running inside of Qubes OS may not be as privacy-respecting, so please
|
|||
|
|
be mindful of what you install. We have no control over such third-party
|
|||
|
|
software.
|
|||
|
|
|
|||
|
|
For more information, please see :ref:`FAQ: How does Qubes OS provide privacy? <introduction/faq:how does qubes os provide privacy?>`
|