How OXware handles your data and what we collect.
Short version: OXware is self-hosted software. By default it sends zero data to us. You may optionally opt in to anonymous usage telemetry from the panel (default OFF). This policy covers the oxware.top website, the optional telemetry, and our cloud services.
OXware Hypervisor is open-source software you install and run on your own servers. By default, the hypervisor process does not phone home, does not send telemetry, and does not contact oxware.top during normal operation. All data your VMs generate stays on your hardware.
Your hypervisor configuration, VM disk images, audit logs, and credential vault data never leave your system unless you explicitly configure a remote backup target.
Starting with v2.8.1, the panel exposes a Settings → Anonymous Telemetry page where an administrator may turn on a weekly anonymous usage ping. This setting is OFF by default. No data leaves your host until you explicitly enable it.
What we collect when you enable it:
OXware
installation_id (UUIDv4) so we can count unique installs without identifying you. Wiped the moment you disable telemetry.What we never collect — not even when you enable it:
The payload is field-allowlisted at both ends. The full source for the collector is in oxware/backend/telemetry_collector.py — audit it yourself. The panel shows you the exact JSON we would send before you flip the toggle.
You can disable telemetry at any time from the same panel page. Disabling wipes the installation_id so the next opt-in is treated as a brand new install with no historical linkage.
When you visit oxware.top, we collect standard web server logs:
For aggregate page-view analytics we run Plausible Analytics — a privacy-focused, GDPR-compliant alternative to Google Analytics. Plausible does not use cookies, does not track users across sites, does not collect personal data, and hashes the IP address before any storage so individual visitors cannot be re-identified. Full Plausible data policy: plausible.io/data-policy.
We use no other third-party analytics, no Google Analytics, no Facebook Pixel, no advertising trackers.
When you contact us via email (root@oxware.top or root@oxware.top), we store your name, email address, and the contents of your message to respond to your enquiry. We do not share this information with third parties.
If you purchase a support plan, payment is processed by our payment provider. We do not store your card number or bank account details on our servers. We retain a record of your purchase (plan type, date, amount) to honour your licence entitlements.
oxware.top uses only one cookie: a session cookie for the documentation search function. It is a first-party, session-scoped cookie deleted when you close your browser. We do not use advertising cookies or tracking pixels.
We do not sell, rent, or trade your personal data. We share data only when required by law or to protect the security of OXware infrastructure.
You may request access to, correction of, or deletion of any personal data we hold about you. Email root@oxware.top with your request. We respond within 30 days. EU/EEA users have additional rights under GDPR.
We apply industry-standard security measures: HTTPS everywhere, server-side encryption at rest, access controls, and regular security audits. For vulnerabilities, see our Security Policy.
Material changes will be announced in the GitHub repository and on this page with a revised last-updated date. Continued use of the website after changes constitutes acceptance.