Privacy Policy

The short version: the entire virtual machine — its CPU, memory, and disk — runs inside your own browser. That computation never reaches our servers. We store nothing about what you do inside the VM. The only time your data leaves your device is if you turn networking on, and even then we relay it without inspecting encrypted traffic and keep no record of its contents.

1. Who we are

This service ("the Service") lets you run a Linux virtual machine entirely client-side in your web browser using WebAssembly. It is operated by Webuntu ("we", "us"). Questions: [email protected].

2. What runs locally (and never touches us)

The virtual machine. The emulated processor, RAM, and disk all execute in your browser tab. Commands you run, files you create, and programs you install stay on your machine.
Your instance list. The instances you create are saved in your browser's localStorage. We never receive or store this. Clearing your browser data deletes them permanently.

3. What we serve

To load the VM your browser downloads static files (the operating-system snapshot and the WebAssembly emulator) from our host/CDN. Serving these files involves standard web-server request logs, which may include your IP address, user-agent, timestamp, and the file requested. These logs are used for operating and securing the Service and are retained only as long as needed for that purpose.

4. Networking (optional, off unless you enable it)

Browsers cannot open raw network connections, so when you switch networking on, your VM's traffic is tunnelled to a relay we operate, which forwards it to the internet on your behalf. When networking is off (the default for private use), no traffic leaves your device at all.

When networking is on:

We do not log the contents of your traffic.
Encrypted (HTTPS/TLS) connections stay end-to-end. The relay tunnels raw packets, so we cannot see inside your encrypted sessions.
To route traffic, prevent abuse, and enforce fair-use limits, the relay transiently processes connection metadata — destination address and port, byte counts, and timestamps. This is used operationally and is not sold or used to build a profile of you.
The relay only permits common ports (HTTP 80, HTTPS 443, DNS 53) and is rate- and volume-limited to keep it available and non-abusable.
Unencrypted (plain http://) traffic is, by nature, visible to any relay in the path — including ours — so avoid sending sensitive data over plain HTTP.

5. Cookies & tracking

The Service does not use advertising or third-party tracking cookies. Any storage we use (localStorage) is functional — it remembers your instances and settings on your device only.

6. Third parties

We rely on infrastructure providers for hosting, content delivery, and network egress. They process requests solely to deliver the Service and are bound by their own policies. We do not otherwise share your data.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data.

8. Your choices

Networking is a toggle you control. Your instances live only in your browser and can be deleted at any time by removing them or clearing site data.

9. Changes

We may update this policy; material changes will be reflected by the effective date above.

This document is a good-faith description of how the Service works. It is not legal advice — have a lawyer review it before you rely on it.