Nixos
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A website privacy policy: technical visit data and forms, hosted in the US, with -style rights but no dated terms.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
What you type in forms plus technical visit data like browser, OS, time, and IP address.
Read the exact line
Privacy policy
“These are mainly technical data (e.g., internet browser, operating system, or time of page access).”
Training
They use data to run the site without errors and may analyze how you use the pages.
Read the exact line
Privacy policy
“A portion of the data is collected to ensure the website is provided free of errors. Other data may be used to analyze your usage behavior.”
Sharing
The host Netlify in the USA stores visit data; they also share with processors when needed.
Read the exact line
Privacy policy
“The personal data collected on this website is stored on the servers of the hosting provider(s).”
Kept
They keep it until the purpose is gone, unless the law requires longer storage.
Read the exact line
Privacy policy
“your personal data will remain with us until the purpose for data processing no longer applies.”
Controls
You can ask for info, correction, deletion, or to withdraw consent by contacting them.
Read the exact line
Privacy policy
“You also have the right to request the correction or deletion of this data.”
Fine print
The policy has no date, and there is no terms document about suing, accounts, or refunds.
Read the exact line
Privacy policy
“You can contact us at any time for this purpose or with any other questions regarding data protection.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Ask what they store or
Email foundation@nixos.org
Unsubscribe from the newsletter
Use the unsubscribe link in the newsletter
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Your visit data lives on someone else’s computers, not only NixOS’s.
Read the exact line
Privacy policy
“This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s).”
For example, your IP address from opening nixos.org can sit on Netlify’s servers in the United States.
They list a wide set of website data that the host may store.
Read the exact line
Privacy policy
“This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.”
For example, filling a contact form can store your name and email on the host’s servers.
They may study how you browse the site.
Read the exact line
Privacy policy
“Other data may be used to analyze your usage behavior.”
For example, they might look at which pages you open and when.
They warn that email and the web are not fully private.
Read the exact line
Privacy policy
“We point out that data transmission over the Internet (e.g., when communicating by e-mail) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.”
For example, an email you send to foundation@nixos.org might be intercepted in transit.
You can ask them to delete your data, but they may keep it if the law says so.
Read the exact line
Privacy policy
“If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data”
For example, they might keep billing-related records even after you ask to be erased.
Unsubscribing can still leave your email on a no-send list with no time limit.
Read the exact line
Privacy policy
“After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if necessary to prevent future mailings.”
For example, after you leave the newsletter they may keep your address forever so they do not email you again.
Newsletter signup data is only for the newsletter and is not shared.
Read the exact line
Privacy policy
“We use this data exclusively for sending the requested information and do not share it with third parties.”
For example, the email you give for news should not be sold to advertisers.
You can ask what they hold, why, and who got it, for free.
Read the exact line
Privacy policy
“You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data.”
For example, you can email them and ask whether they stored your IP and who hosted it.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade D · score 37/100 · 14 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect form data you give them plus technical visit data such as browser, OS, time of access, IP address, and page accesses.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
They share with the hosting provider Netlify and other processors under agreements, and say newsletter data is not shared with third parties.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data until the purpose ends; you delete by contacting them, and some legal or newsletter-blacklist storage can last longer.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they take data protection seriously and treat data confidentially, but also that internet transmission is not fully secure.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy policy has no date and does not say how they will tell you about changes.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
No paid subscriptions or refunds are described; they only mention possible contracts in general.
The privacy policy is 2,084 words at a fairly hard level (Flesch reading ease 52.5).
