Privacy

Short version: this site sets no cookies, runs no tracking or analytics scripts and has no forms or accounts. Like every website, it cannot reach your browser without your IP address. Here is exactly who sees what.

Last updated: 12 October 2026

Who is responsible

The data controller is the maintainer of VaeVictis OS, a free, non-commercial, one-person project. Contact: admin@vaevictisos.org.

What happens when you visit

The pages are delivered by Cloudflare (Cloudflare, Inc.), which acts as hosting provider and processor on the maintainer’s behalf. To send a page to you and to protect the site from attacks, Cloudflare receives the technical data of every request: your IP address, the page or file requested, date and time, your browser’s user agent and the referring page, if your browser sends it.

• What the maintainer sees: aggregated statistics in the Cloudflare dashboard (number of visits, pages, countries, browsers and operating systems, and a short list of the most frequent IP addresses). The maintainer does not export, copy or combine these data with anything else, and does not use them to identify visitors.
• Legal basis: legitimate interest in delivering the site and keeping it secure (Art. 6(1)(f) GDPR).
• Retention: as set by Cloudflare for its logs and analytics; the maintainer keeps no copy.
• Transfers outside the EU: Cloudflare may process data in the United States. Cloudflare participates in the EU-U.S. Data Privacy Framework. Details: Cloudflare privacy policy.
• Network error reports: Chromium-based browsers may send Cloudflare a report if a page fails to load (Network Error Logging). Successful visits are not reported.

What does not happen

• No cookies, no local storage, no fingerprinting, no advertising, no third-party scripts or fonts.
• The interactive pages work entirely in your browser. The passphrase you may type in the installer simulation and anything you edit on the tamper page are never sent anywhere: the site’s security policy forbids the pages from making any network request.

Downloads and links to other sites

The ISO and the checksum are downloaded from GitHub. When you click a download or follow a link to GitHub, LinuxTuts or another site, that site’s own privacy policy applies, for example the GitHub General Privacy Statement.

If you write an email

Emails to admin@vaevictisos.org are stored in a mailbox hosted by Zoho Mail in its EU data centre. They are used only to reply to you and are deleted when no longer needed. Legal basis: your request (Art. 6(1)(b) and (f) GDPR).

Your rights

You can ask for access to, correction or erasure of your data, restrict or object to processing, by writing to admin@vaevictisos.org. Note that the maintainer has no way to link an IP address in Cloudflare’s statistics to a person. You can also lodge a complaint with a data protection authority, in Italy the Garante per la protezione dei dati personali, or the one where you live.

Changes

If this page changes, the date at the top changes too.