The "please don't sue me" page. Let's actually talk about what this is, what happens to your data, and how things work under the hood.
Hey! Just to be completely transparent right off the bat: OrbitOS is a personal hobby project. It was built by one person just messing around and trying to see what a web browser can do. It is not a real, bare-metal operating system like Windows or Linux, and it is definitely not a corporate product.
Because it's basically just a massive sandbox experiment, things might lag, bug out, or straight up crash sometimes. I'm constantly updating it and trying to make it better, but by using OrbitOS, you're agreeing that you know it's just a fun project and you're here to vibe and test things out. Don't expect enterprise-level stability rn lol.
Let's talk about tracking. I have absolutely zero interest in spying on you. The ONLY thing I track on this site is basic web traffic using Google Analytics.
I use standard GTag to collect anonymized usage stats. It literally just tells me things like how many people visited the site today, how many pages were viewed, and what devices/browsers people are using. I basically just look at it to see if the project is actually alive or if it's crashing for mobile users. I don't track what you type in the terminal, I don't see what apps you install, and I have zero access to your personal files.
OrbitOS does not have some massive cloud server hoarding your data. Everything you do inside the OS is saved locally right inside your own browser.
It uses a database wrapper called OrbitDB. Since none of it is sent to a central server, it is physically impossible for me to read your notes or see your custom wallpapers. Here is exactly what the OS saves locally on your device and why it actually needs it:
When you first set up the OS, it saves your username and hostname so the terminal can display your custom prompt (like root@orbitos). If you set up a lock screen, it saves a password. But here is the cool part: we don't save your actual text password. The OS scrambles it into a crazy math puzzle (called a SHA-256 hash) and saves that instead. When you log in, it scrambles your input and checks if the puzzles match. If you forget it, you're locked out because the system literally doesn't know your real password.
This is the meat of the OS. Any text you write in the Notes app, tasks you put in your To-Do list, or dates you save in the Calendar are saved directly as raw text in your browser database. If you use the Gallery app and import photos, the OS actually converts the image file into a massive giant wall of text (called Base64) and saves it locally. It does this so it can load the image offline later without needing a cloud drive.
AI bots basically have goldfish memory by default. To make it actually hold a conversation, OrbitOS saves your orbitos_ai_memory (your recent chat messages) locally. When you send a new message to the bot, the OS grabs this local history file and bundles it with your new message so the AI understands the context of what you guys are talking about.
Just like Chrome or Edge, the internal Orbit Browser keeps a log of the URLs you visit and the ones you bookmark, but it's saved strictly inside this specific tab's database. For the Music Player (Audius), it saves the IDs and titles of songs you favorite or recently played so your playlists are actually there when you boot up the OS next time.
OrbitOS lets you customize almost everything. Every single tweak you make is saved. The active theme you picked, your custom font colors, terminal size, blur levels, and custom wallpapers. It saves all of this so you don't have to redo your whole setup every single time you open the site.
If you plug in your own Google Gemini API key to unlock the AI assistant, it stays locked inside your browser. I NEVER see it. It goes straight from your browser to Google's servers only when you ask the AI a question. It also saves whatever custom persona prompt you gave the AI.
The OS saves a list of what apps you installed from the APT store so the system knows which commands you're allowed to run. It also saves background diagnostic logs. If an app crashes, it writes an error log locally so you can check it in the Recovery Menu later and figure out what broke.
We use temporary sessionStorage to track if you're in Safe Mode and to count consecutive boot attempts. If the OS crashes 3 times in a row, this counter tells it to boot into the Recovery Menu so you can fix it. This data completely clears the second you close the tab.
To actually be a functioning OS, it needs to pull real data from the internet. Since OrbitOS doesn't have a backend server, your browser makes network requests directly to public APIs. Here is exactly what gets sent from your device to the internet:
generativelanguage.googleapis.com) to generate a response. If you gave the AI permission to run commands, it also sends basic info about your OS state (like what apps are installed) so it knows what it can do.GeoJS first (which checks your IP address to guess what city you're in). Then it sends that city name to the Open-Meteo API to fetch the actual temperature, forecast, and air quality data.api.audius.co to find the track info and stream the audio file directly to your player.MyMemory for translations, ping ExchangeRate-API for currency conversion, check your public IP via IPify, send text to qrserver.com to generate a QR code, or use a CORS proxy (allorigins.win) to read RSS news feeds without getting blocked by your browser.Since your stuff is stuck in the browser, OrbitOS actually has a built-in Backup & Restore utility. You can export a full backup of your system directly to your physical hard drive as a raw .json file. But you need to be careful with this.
WARNING: A backup file literally contains EVERYTHING you have saved in OrbitOS. Your notes, your tasks, your browsing history, your custom API keys, all of it. If you generate a backup file and share it with a friend on Discord, they can restore it on their end and see EVERYTHING you saved. Sharing your backup file is 100% on you, so be smart about it.
Because everything lives entirely in your browser's local cache, your data is never 100% safe here.
If you clear your browser history or cache, your browser will nuke your OrbitOS data. If your phone runs out of storage space, your browser might automatically delete your files to make room without asking. And sometimes, if I have to push a massive architectural update, I literally have to wipe the global storage to make the new system work.
TL;DR: By using OrbitOS, you agree that your data can be wiped, lost, or deleted at ANY time without warning. Do NOT store anything important on here. No passwords, no crypto phrases, no school essays. I am not responsible if you lose your stuff T_T
Since this is a free hobby project running on a standard web domain, please just be cool. Don't try to inject malicious stuff, break the site for everyone else, or DDoS the servers (which, for starters, are hosted on Render, so I don't exactly expect you to have a magical Render destroying button, and secondly, I genuinely can't imagine what would inspire someone to DDoS a random hobby project in the first place). Also, most of the OS runs client-side in your own browser, so you'd basically be launching a cyberattack against... your own browser. Very productive.
I might update these terms if I add massive new features or change how things work in the background. If something huge changes, I'll usually throw an announcement up on the main landing page or in the OrbitOS News app so you know what's going on.
Anyway, that's all the boring technical stuff out of the way. Boot it up and have fun! :P