Privacy

This site is a public list of hardware that runs Omarchy. Anyone running Omarchy can send a report of their machine, and the report is public once it arrives. Nobody needs an account.

What a report holds

A report holds the vendor, model, product family and chassis type; the CPU model, vendor, architecture and core count; the memory size; up to eight GPU names; whether the machine boots with UEFI, has a TPM and has Secure Boot on; and the Omarchy version and release channel. It never holds serial numbers, MAC addresses, hostnames, usernames or product UUIDs. The script and the server both refuse those fields.

The script also sends a one-way hash so that the same machine updates one report instead of adding new ones. It is computed on your machine from its machine-id, plus the DMI serials when the script can read them. The machine-id and serials are never sent, and the hash cannot be turned back into them.

IP addresses

The site's own logs record which pages were requested, when, and the hardware facts in each submitted report. They do not record IP addresses, search terms or machine hashes.

To limit abuse, the server counts report submissions and sign-in attempts per IP address over a few minutes. Those counts are deleted within about an hour. The site sleeps when nobody uses it, and counts left at that point are deleted within minutes of it waking up.

Each report keeps a hash of the IP address that last sent it, made with a secret key. It lets the site mark a model Verified once enough machines from more than one network have reported it. The hash is never shown, and without the server's secret key it cannot be turned back into an address.

The site runs on Laravel Cloud, behind Cloudflare. Both see your IP address when you connect and can keep it in their own logs. Laravel Cloud's access logs record each request's IP address, country, user agent and path. This site does not control those logs.

Cookies

The site itself sets no cookies while you browse. Only the admin sign-in page and signed-in admins get session cookies. Cloudflare sets its own security cookies, such as __cf_bm, which this site does not control.

Machines not running Omarchy

If you run the script on a machine that is not running Omarchy, it checks that machine on your computer and sends nothing unless you answer yes. A yes sends the same hardware facts, the verdict and the name of your distro as a candidate report. Candidates are never shown or counted on public pages. You are only told how many machines of that model have reported running Omarchy.

Who can see reports

Reports from machines running Omarchy are public, grouped by model. Admins can see every report, including candidates, and can hide a report from public pages. Admin accounts store an email address and a password hash. Nobody else has an account.