Privacy Policy

The Open Tech Foundation (OTF) is committed to user privacy. This policy establishes the privacy requirements for all OTF websites, applications, software projects, and services.

OTF follows a zero-data-collection principle. OTF does not collect user data, and its projects must be designed to uphold this principle.

OTF does not collect user data through its websites, applications, software, or services.

• Telemetry, analytics, tracking, and diagnostic reporting must not send user data to OTF.
• OTF projects must not transmit user data to OTF directly or indirectly, including through embedded libraries or third-party components.
• Server-side collection of user activity logs and usage information by OTF is prohibited.
• No exceptions are permitted to this principle. Projects that cannot comply must be redesigned.

OTF projects may process and store user data locally when necessary to provide their intended functionality.

• Local processing and storage must serve the application's intended functionality.
• Locally stored data must not be transmitted to OTF.
• Other uses of locally stored user data are permitted only with the user's explicit consent.
• Every project that stores user data locally must provide a user-accessible mechanism to delete that data.

OTF projects may communicate with external services when necessary for functionality requested by the user.

• Projects may include telemetry, analytics, observability, crash-reporting, and diagnostic tools for user-controlled or user-configured external services.
• Such tools must not send user data to OTF.
• Projects must document their data flows, including local processing, external data transmission, and relevant configuration options.
• External communication must serve the functionality requested by the user and must not be used to transmit user data to OTF.

OTF projects must take reasonable steps to prevent unauthorized access to or disclosure of user data.

Discovered privacy vulnerabilities must be addressed appropriately. Project implementations must be reviewed and, where necessary, corrected to maintain compliance with this policy.

OTF centrally reviews and approves all privacy-related implementation decisions.

Individual project maintainers must ensure their projects comply with this policy. Privacy-related implementation decisions requiring OTF approval must be submitted for central review.

No project may introduce an exception to the zero-data-collection principle. Any conflicting implementation must be redesigned to comply.

This policy applies to all websites, applications, software projects, and services developed, maintained, or operated by the Open Tech Foundation, including future projects.

OTF may update this policy as its requirements evolve. The version published on the official OTF website is the authoritative version.