Privacy Notice
This notice explains how the operator of mvmOS ("mvmOS", "we", "us") handles personal data in connection with mvmos.org, mvmOS Premium, and the optional error-reporting service. For privacy questions or requests, contact [email protected].
1. The self-hosted nature of mvmOS
mvmOS is self-hosted software. Each user installs and operates mvmOS on a server they control. By default, mvmOS user accounts, files, application data, settings, databases, and content remain on that user’s own installation. mvmOS does not provide a central hosted account or central cloud storage for that installation data.
This does not mean that no data ever reaches mvmOS services: the limited, separately described services below may receive data when a user chooses to use them or activates Premium.
2. Website operation and security
When you visit mvmos.org, our hosting and delivery providers may process technical request information such as IP address, request URL, browser information, and security-event data to deliver, protect, and troubleshoot the website. We use Cloudflare for network delivery and security. This processing is necessary for the legitimate interests of operating a secure, reliable website.
3. Optional analytics and cookies
Google Analytics 4 is used only to understand aggregate use of mvmos.org. For visitors in the EEA, United Kingdom, and Switzerland, Analytics is not loaded unless the visitor chooses Analytics in the cookie banner. We send Google Consent Mode signals reflecting that choice. You may change your selection at any time through .
Where enabled, Google may process online identifiers, page views, referral information, browser/device information, and interaction data under its own terms and privacy documentation. We do not use Google Analytics for advertising, remarketing, or sale of personal data.
4. Support requests
When you submit the support form, we process the email address, category, subject, and message you provide to investigate and reply to your request. The legal basis is our legitimate interest in responding to product and support enquiries, and, where applicable, taking steps requested by you before entering into a contract.
The support database deletes the email address from the ticket when it is marked resolved after a reply is sent. The ticket history may remain without the email address for product-support records. Mailjet is used solely to deliver support notifications and replies. Mailjet and the receiving email mailbox may retain operational delivery records under their own retention settings; we do not use support addresses for newsletters, advertising, or sale to third parties.
Please do not include passwords, API keys, payment-card information, identity documents, health data, or other sensitive personal data in a support message.
5. Future Premium licensing
Premium is a future, currently unused option. mvmOS does not currently accept payments, use a payment or membership provider, or provide active Premium entitlements. If Premium is enabled in the future, this notice will be updated before the new flow is made available.
The planned licensing design uses a license code, a locally generated random device identifier, an optional device label (normally the installation hostname), rotating license tokens, and first/last check-in timestamps to validate an entitlement and enforce the number of licensed installations. These would be technical licensing records only, not payment-card data, advertising data, or behavioural profiling data.
6. Optional error reports
mvmOS asks before sending an error report. If a user chooses Send report, the report is transmitted to the mvmOS report receiver and contains technical diagnostics: the error message and stack trace, affected URL and status, active app names, browser and operating-system information, screen resolution, mvmOS version, time, and a limited list of recent requests. It does not intentionally include a name, email address, user account, installation identifier, license token, files, or database contents.
Error reports are used only for debugging and service improvement. They are not linked to a central mvmOS account or used for advertising. Because a URL, error message, or app name could contain information entered by a user, users should review the displayed details and decline the report if unsure.
7. Optional installation statistics
An mvmOS installation can send a small anonymous statistics report to mvmos.org. This is off by default and stays off until the person who administers that installation switches it on. The privacy step of the setup wizard asks the question outright, with nothing preselected, and the option is also available at any time under Settings. Nothing is sent while the option is off, and switching it back off stops all further reports immediately. The legal basis is consent, which can be withdrawn at any time by turning the option off.
When the option is on, the installation sends one report about every ten minutes containing exactly the following five values and nothing else: a randomly generated identifier, the mvmOS version it runs, the interface language it is set to, the Linux distribution and its version, and the processor architecture. The identifier is generated for these reports alone and is used for nothing else in mvmOS, so it cannot be matched to a licence, to a purchase, or to whoever made one.
No user data of any kind leaves the installation. A report contains no user accounts, no user names, no email addresses, no passwords, password hashes, API keys, licence codes, tokens, or other credentials, no files or folders of any kind, no file names or paths, no file contents, no database contents, no application data, no notes, messages, settings values, or search terms, no hostname, domain, or network address, no names of the installed applications and no count of them, and nothing about the Premium licence, neither its code nor whether one is valid. Nothing a user has typed, uploaded, created, or stored in mvmOS is read by the statistics feature, is transmitted, or is held anywhere outside that user’s own installation. There is no mechanism in this feature capable of sending such data, whether the option is on or off.
The receiving service therefore stores nothing beyond the five values listed above. It keeps one record per installation, which each new report overwrites, together with the dates that installation was first and last heard from. It does not keep a history of individual reports and does not store the sending IP address. A record is deleted once its installation has not reported for 180 days.
These statistics are used only to understand which versions, languages, and platforms are in use so that mvmOS can be maintained and improved. They are not used for advertising, profiling, or any decision about an individual, they are not linked to a central mvmOS account, and they are not sold or shared beyond the hosting and delivery providers described in this notice.
8. Other third-party services
The website loads Google Fonts and the htmx JavaScript library from third-party content-delivery services. Those providers may receive technical request data needed to serve the resource. Links to GitHub, Patreon, or other third-party services are governed by the privacy policies of those services once you leave mvmos.org.
9. Sharing and international transfers
We do not sell personal data. We share data only with service providers needed for the purposes above, including Cloudflare, Google, Mailjet, hosting providers, and third-party content-delivery providers. These providers may process data outside the EEA; their applicable contractual, technical, and transfer safeguards govern those services.
10. Retention and security
We keep data only for as long as needed for the stated purpose. Support email addresses are removed from resolved support tickets as described above. License records are retained while an entitlement and its administration remain relevant. Technical logs and error reports are retained only as long as reasonably necessary for security, debugging, and maintenance. An installation statistics record is kept only while that installation keeps reporting and is deleted after 180 days of silence. We use access controls and technical measures appropriate to the limited nature of the processing, but no internet transmission or storage system is completely risk-free.
11. Your rights and contact
Depending on applicable law, you may request access, correction, deletion, restriction, or objection to processing, and may withdraw Analytics consent at any time. Contact [email protected] with the relevant details. You may also have the right to complain to your local data-protection authority.
12. Changes
We may update this notice when the service or applicable requirements change. The current version is published on this page.