Skip to content
OnionZero
STATUS: 100% AIR-GAPPED · CORE INTACT Technical Briefing
OnionZero
STATUS: 100% AIR-GAPPED · CORE INTACT
Technical Briefing
TR EN

OnionZero — Legal

Privacy Policy

How HBY Software protects your privacy, which data we collect and why, and the data-minimisation principles built into our products.

Last updated: 21.09.2026 approx. 3 min read

1. Scope

This Privacy Policy covers the onionzero.com website, the my.onionzero.com management panel and the OnionZero licensing infrastructure. OnionZero is a software protection and licensing system developed and operated by HBY Software. For the detailed legal framework on personal-data processing, see the KVKK / Data Protection Notice.

2. Data We Process

  • Contact data: when you submit the contact form, your name, e-mail address, subject and message; your IP address for abuse prevention.
  • Account and licence data: company/title and e-mail information plus licence records, for account creation, licence generation and activation.
  • Technical telemetry: for encryption-layer installations, the licence ID, product version, PHP and operating-system version and an anonymised machine digest.
  • Cookies: only strictly necessary and functional cookies; details are in the Cookie Policy.

3. In-Product Privacy Principles

OnionZero's architecture is built on data minimisation:

  • Your source code never reaches us. Encryption and packaging run in your own environment (command-line tools and your panel copy); your source code is not uploaded to HBY Software servers.
  • Machine fingerprints are hashed. The machine fingerprint used in activations is stored only as a cryptographic digest; raw machine names or hardware identifiers are not kept.
  • Telemetry is limited. Installation signals apply only to the encryption layer and carry no personal data, file contents or source code.

4. How We Use the Data

Collected data is used to answer your questions, perform your licence agreement, deliver activation and update services, comply with legal obligations and keep the service secure. Your data is never shared with or sold to third parties for marketing purposes.

5. Cookies and Local Storage

The site uses strictly necessary/functional cookies for session, security (CSRF) and language preference, and the browser's local storage for the theme preference. No tracking, analytics or advertising cookies are used. See the Cookie Policy for the full table.

6. Third Parties and Hosting

The service is delivered through the technical capabilities of hosting and e-mail infrastructure providers. These providers may access your data only to the extent required to operate the service and are bound by contractual confidentiality obligations.

7. Security

Our key technical measures include TLS encryption in transit, irreversible cryptographic hashing of panel passwords, encrypted storage of secret keys, optional two-factor authentication (2FA), rate limiting and session security.

8. Your Rights

For your rights under KVKK Article 11 and how to exercise them, see the KVKK / Data Protection Notice. You can send requests to destek@onionzero.com.

9. Changes to This Policy

This policy may be updated when necessary; the current version is published on this page with the last-updated date shown at the bottom. Panel users are additionally notified of significant changes.