Privacy Policy

Effective July 9, 2026 · Covers intergenos.org, wiki.intergenos.org, repo.intergenos.org, and the InterGenOS operating system

This policy covers the InterGenOS websites — intergenos.org, wiki.intergenos.org, and repo.intergenos.org — and the InterGenOS operating system together with the software we ship in it (the InterGen assistant, the Forge installer, the pkm package manager, and the compatibility launcher).

The short version

InterGenOS exists to put you in control of your own machine. That extends to your data: we do not collect it. The operating system contains no telemetry, no analytics, no accounts, and no tracking of any kind. Our websites use no analytics and no tracking cookies. The only data we ever see is the ordinary, short-lived server log any web server produces when you visit a page or download a file. Everything else described below happens on your machine, under your control, and never passes through a server we operate.

Our websites

When you visit intergenos.org, wiki.intergenos.org, or repo.intergenos.org, our web server records a standard access log: your IP address, the page or file requested, the time, and your browser's user-agent string. We use these logs only to operate the sites and investigate abuse, and they are routinely rotated and deleted. The sites set no tracking cookies, run no analytics or advertising scripts, embed no third-party trackers, and offer no accounts. There is nothing to opt out of, because nothing is collected beyond the logs described here.

The operating system

InterGenOS never phones home. There is no telemetry, no usage reporting, no crash uploading, no unique device identifier, and no registration. When you install software or check for updates, the pkm package manager contacts our package mirror (repo.intergenos.org) over HTTPS; the mirror sees the same standard server log as any website visit — your IP address and the files requested — and nothing more. Package downloads are verified on your machine against cryptographic signatures; no information about your system is sent to us.

Some optional proprietary applications (for example, a web browser or editor from another vendor) are provided through download helpers. These fetch the software directly from the vendor over your connection; the vendor's own privacy policy governs that download and the software itself. We are not in that path.

The InterGen assistant

InterGen, the built-in AI assistant, runs locally on your hardware. Your conversations, files, and the assistant's memory stay on your machine. Two features can reach the network, and both are visible and under your control:

Web search. When you ask InterGen to search the web, your search query is sent to DuckDuckGo (html.duckduckgo.com) to retrieve results. Only the query text is sent, only when a search is actually performed, and DuckDuckGo's privacy policy governs its handling. No search goes through any InterGenOS server.
Optional cloud AI providers. You may connect your own API key for a third-party AI provider (such as Anthropic, OpenAI, Google, Microsoft, DeepSeek, xAI, or a self-hosted endpoint you specify). This is entirely opt-in. Your key is stored in your system keyring (GNOME Keyring via libsecret) — never in configuration files or logs — and is read only at the moment a request is made. When you use a cloud provider, the content you send it goes directly from your machine to that provider under that provider's terms and privacy policy. We never see, relay, or store it.

Connecting cloud storage accounts

The compatibility launcher can connect your existing Google Drive and Microsoft OneDrive accounts so your files sync to your machine. This is built deliberately so that no InterGenOS server is ever in the path of your files or credentials:

Sign-in happens in your own web browser, directly with Google or Microsoft, using the industry-standard OAuth authorization-code flow with PKCE. We never see or handle your password.
The resulting access tokens are stored on your machine, in your system keyring. They are transmitted only to Google or Microsoft, respectively, to perform the sync you configured.
File synchronization runs directly between your machine and the provider. Your files, file names, and metadata never touch an InterGenOS server, are never stored by us, are never transmitted to us, and are never used for any purpose other than the sync you asked for.
Scopes. From Google we request the Drive scope needed to synchronize your existing Drive files bidirectionally; from Microsoft we request Files.ReadWrite and offline_access. In each case this is the minimum that makes whole-account file sync work.
Revocation. You can disconnect at any time from the launcher itself, from your Google Account security settings, or from your Microsoft account privacy dashboard. Removing the connection deletes the locally-stored tokens.

Google API Services disclosure: InterGenOS's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide the user-facing file-synchronization feature described above; it is never transferred to third parties, never used for advertising, and never read by humans.

What we never do

We do not sell data. We do not share data (we have essentially none to share). We do not profile you, serve ads, fingerprint devices, or buy or trade information about you. If a court order ever compelled us to produce user data, the honest answer for nearly everything described above is that the data exists only on your machine, and we cannot produce what we do not have.

Data retention

Web-server access logs (the only data we hold) are rotated automatically: logs are archived monthly and each archive is deleted after the following month, so no access log is retained longer than about two months, and most are deleted sooner. Nothing else is retained because nothing else is collected.

Children

Our sites and software collect no personal data from anyone, including children.

Changes to this policy

If this policy changes, the new version will be posted at this address with an updated effective date. Because the project's design principle is no data collection, changes are expected to be rare and narrowing rather than broadening.

Contact

Privacy questions: privacy@intergenos.org. General contact: contact@intergenos.org. Or open an issue at github.com/InterGenJLU/intergenos.

InterGenOS is free software (GPL-3.0-or-later). You can read every line of what your system does — including everything this policy describes — at our source repositories.