Privacy Policy

Last Updated: December 9th, 2021

This Privacy Policy describes the information we collect from you, how we use that information and our legal basis for doing so. This Privacy Policy applies to the information that we obtain through your use of Rocky Enterprise Software Foundation websites, and services, including its subdomains chat.rockylinux.org, wiki.rockylinux.org, git.rockylinux.org, pm.rockylinux.org, etc. (collectively, the "Services"), and about our volunteers, sponsors, partners, and users.

Unless explicitly noted, this Privacy Policy does not cover 3rd party services or mirror sites used by Rocky Enterprise Software Foundation.

Who are we?

Rocky Linux is an open source project brought to you by the Rocky Enterprise Software Foundation as well as many other contributors around the globe. If you have any questions about this privacy policy, please contact our privacy team at privacy@resf.org. We will never sell your personal data to anyone and we strongly believe in the right to privacy and anonymity.

What Data Do We Collect and Receive?

In order for us to both provide and maintain our Services, we collect certain information, including through Fathom for analytics on our websites. You may view the analytics we collect for this website here, as well as our documentation website here. Depending on your use of the Services, we may collect the following information:

  • Information you provide when you contact us – for example, when you ask for support, send us questions or comments, or report a problem, we will collect any information you provide to us, at a minimum including your email address, and message. We use this data in connection with answering the queries we receive.

  • Usage data – when you use or visit any of our sites or services (e.g. YUM/DNF), unless explicitly noted, we do collect your IP address, browser user agent, operating system, geolocation, and referring website (when applicable). We log this data in order to maintain metrics, troubleshoot and maintain our services.

  • Information you provide when you create an account – when you sign up for and open an account on our account services page, chat service, or forum we may ask you to provide us with information such as your name, email address and other details. As otherwise detailed in this Privacy Policy, we will process this information to provide you with the service you signed up for.

  • Information to authenticate to our services – We store the IP address used to authenticate to our services.

  • User activity data for RESF-hosted applications – Any data voluntarily provided to us through the use of RESF-provided services, including, but not limited to, user profile information, communication history, and direct messages. We use this data for the functionality of 3rd Party Service Providers listed below and for purposes of the RESF.

  • Information you provide as a contributor and/or user – We may collect information according to the type of contribution you provide. For example, if you are voluntarily testing our images or reporting bugs to us, in order to reproduce, troubleshoot, or validate those bugs, we may record things such as your operating system version, the system specifications of your computer (CPU, RAM, other hardware details), or packages and software versions installed on your computer.

Sharing of Data

We share information collected about you with certain selected third parties ("3rd Party Service Providers") listed below.

ServiceUsageDirect Privacy Policy
VercelWebsite hostingPrivacy Policy
Discourse HostingTo create an account on our forumPrivacy Policy
Amazon AWSInfrastructurePrivacy Policy
Libera.chatIRC, ChatPrivacy Policy
GitHubSource control, collaboration, registry, actionsPrivacy Policy
FigmaDesign collaborationPrivacy Policy
Google WorkspaceCommunication, collaborationPrivacy Policy
CloudflareDNSPrivacy Policy
FastlyCaching, mirroringPrivacy Policy
1PasswordSecrets managementPrivacy Policy
ZoomVideo conferencingPrivacy Policy
TresoritSecure file storage and transferPrivacy Policy
MattermostChatPrivacy Policy

In addition to the above list of recipients, we may also share your information (i) with mirror sites, (ii) with service providers, including providers of professional advisory services, (iii) when required by a valid subpoena or court order, or as otherwise required by applicable law, regulation, legal or judicial process, (iv) in connection with an asset sale, merger, bankruptcy or other business transaction, (v) to enforce any applicable terms of service or agreements, (vi) to ensure the safety and security of our Services and users, and (vii) when you request we share certain information with third parties.

We do not sell information collected about you.

Do Not Track and Cookie Controls

Do Not Track Signals: "Do not track" signals are preferences that users can set on their web browsers to limit how their activity is tracked across online services. Our Services may not all respond to "do not track" signals in your web browser.

Cookies: You may control the way in which your devices permit the use of cookies and other tracking technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some aspects of the Services to work incorrectly. Most browsers accept cookies automatically. However, you may be able to configure your browser settings to use the Services without some cookie functionality. You can delete cookies manually or set your browser to automatically delete cookies on a pre-determined schedule.

California Rights Under the CCPA

Where applicable, if you are a California resident you may have the following rights under the California Consumer Privacy Act of 2018 (the "CCPA") in relation to "personal information" we have collected about you as defined in the CCPA; these rights are to the extent required by the CCPA and subject to verification and any applicable exceptions:

  • Right to Know/Access: You have the right to request that we disclose certain information to you about our collection and use of certain personal information about you as described below:
    • the specific pieces of personal information collected;
    • the categories of personal information collected;
    • the categories of sources from whom the personal information is collected;
    • the purpose for collecting the personal information; and
    • the categories of third parties with whom we have shared the personal information.
  • Right to Delete: You have the right to request that we delete the personal information.

To request your exercise of the rights described above, please submit a request to us via one of the contact methods identified below.

Freedom from Discrimination: You have the right to be free from unlawful discrimination for exercising any of the rights above.

We will need to verify your identity prior to addressing your request. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to personal information collected about you. To designate an authorized agent, the authorized agent must provide sufficient information that allows us to reasonably verify that they have been authorized by you to act on their behalf.

Retention of data

We will retain your information as long as your account is active, as necessary to provide you with the services or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect Rocky Enterprise Software Foundation's legal rights.

Information Security Risks

While we maintain certain policies to protect information that we may collect from you, no method of transmission over the Internet is completely secure. Therefore, while we strive to protect information about you that we collect, we cannot guarantee absolute security and confidentiality.

Third Party Websites

Our Services may from time to time contain links to other external websites or mirror sites. This Privacy Policy does not apply to third-party websites or mirror sites. We do not control and are not responsible for the privacy practices or the content of third-party websites or mirror sites.

Privacy Policy Changes

We may update this Policy from time to time. If we do, we'll update the "Last Updated" date at the top of this Privacy Policy. If we make any material changes, we will take steps as required by law, including by notifying you through the Services, sending you an email, or obtaining your consent. The updated Privacy Policy will be effective as of the time of posting, or such later date as may be specified in the updated Privacy Policy.

Contact Us

If you have any questions or concerns regarding your information, please contact us via email at privacy@resf.org or physical mail at:

The Rocky Enterprise Software Foundation
Attn: Privacy Matters
1191 Solano Ave. Unit 6850
Albany CA 94706