Legal

The licences, the privacy statement, the names notice and the honest paragraph about copy protection, in one place. Using Hiyu OS does not ask you to agree to anything.

Licences

AGPL-3.0-only: DisplayComp's server, the shell, the daemons, the themes we ship, and every app that ships with the system, System Settings included.
LGPL-3.0-only: Hiyu Framework and the small client pieces it compiles in. Calling its public headers does not license your app under the LGPL; that permission is written in the header.
BSD-3-Clause: The Development kit, the Developer Gallery, and every interface header a third party compiles against. This website.
LGPL-2.1-or-later: The Windows Compatibility Extension, licensed like Wine so Wine can load it.
Other people's code: Keeps its own licence. The source tree's NOTICE lists each one.

The full explanation, in plain words, is under Licensing on the Development page.

Privacy

The operating system

Hiyu OS sends nothing about you to anyone. There is no account to use it, no telemetry, no crash report that leaves the machine unless you copy it into a message yourself, and no identifier that could be used to count you.

Three things on the system talk to this site, and only when they run. Software Update fetches a signed feed and, when you accept an update, the update itself. The AuraFarm app fetches a signed list of files and, when you install something, the files. Browser fetches what you ask it to. None of them sends an account, an identifier, or a report back, and the code that does it is published so you can check. If you turn on "Set date and time automatically" in System Settings, the computer contacts the time servers named there, over an authenticated protocol, and nothing else.

This website

This site is plain files. It sets no cookie, runs no script in your browser, loads nothing from any third party, and has no analytics. The server keeps ordinary access logs, the address a request came from, the path, the time and the browser's own description of itself, for fourteen days, to detect abuse, and then deletes them. The same server serves the two directories the operating system reads, under the same log and the same rule.

If you write to me

Your message and address stay in my mailbox for as long as the conversation needs. I do not add you to anything, because there is nothing to add you to.

Later

Services that genuinely need an account, when they exist, will get their own statement on their own address, saying exactly what that service keeps and for how long. This statement will not quietly grow to cover them.

Names

Hiyu OS is the name of this system. An app you write keeps the name you give it. The .app bundle is the format, not a claim on the name.

The Windows, Qt, Wayland and X11 Compatibility Extensions are named for the platforms they bridge to. Windows is Microsoft's mark, Qt is The Qt Company's, and the X Window System marks are The Open Group's. The names say what each extension is compatible with and nothing more, and no Hiyu icon or logo uses any of those marks.

Hiyu is measured against the classic glossy desktop of the mid-2000s as a reference. Every graphic in it is ours, and nothing from that reference ships.

Copy protection

Hiyu bundles no content-decryption module and disables none. Nothing in the image can decrypt a protected stream. If you ask Browser to play a paid streaming service that requires one, Browser tells you which module it would download, from where, and what it does, and fetches it onto your machine only when you say so. What you get is software-level playback, HD at most, because that is the limit of a module we do not control, and Browser says so before you press the button. Hardware-protected playback and 4K are not offered, and this page will not claim them until they are true.

Contact

Kyle Blizzard, kyleblizzard@me.com. Bugs and security reports are described on the Help page; the machine-readable security contact is security.txt.

This site and the code behind it are BSD-3-Clause, Copyright Kyle Blizzard.