Privacy Policy

About the service

Omnivaro is a directory of firmware metadata and links. Visitors can search and open links without an account. The application does not provide public registration, payments, or firmware file uploads.

Information we process

Search terms, filters, and page numbers are sent to the server to return catalog results. Search parameters may appear in URLs and browser history. Do not enter personal or confidential information into the search field.

For administrators, we store usernames, salted password hashes, session token hashes, and session expiration times. Login IP addresses are hashed for rate limiting. Hashing does not guarantee that information cannot be linked back to an individual. These records support workspace access and security.

Servers and infrastructure providers may receive IP addresses, browser information, requested URLs, and access times. Logging and retention depend on the operator's and hosting provider's configuration. The application has no built-in visitor analytics service.

Cookies and browser storage

After administrator login, the omnivaro_session cookie lasts up to 8 hours and uses HttpOnly and SameSite=Lax. Signing out removes the cookie and associated session. Public catalog visitors do not need this login cookie.

localStorage holds theme (omnivaro_theme) and sidebar (omnivaro_sidebar) preferences until changed or cleared. The application does not store an advertising cooldown in browser storage. Advertising providers may use their own identifiers and frequency limits.

The installable web app uses a service worker to cache its icons and offline notice in your browser. It does not cache catalog pages, administrator data, advertising responses, or firmware files. You can remove this cache through your browser's site data settings. Browsing current firmware and opening downloads requires an internet connection.

Advertising and external links

Only Native Banner and Popunder advertising are supported. The operator can enable or disable each format. When enabled, Native Banner loads an external vendor embed. Popunder may attempt to open an advertising destination after the first deliberate click on the directory or after each deliberate download click. Browsers may block these attempts. Adsterra destinations and embeds are configured by the operator; providers may process IP addresses, device information, cookies or other identifiers under their own policies. An advertisement does not need to load successfully for a firmware link to work.

Downloads go directly to upstream providers. Source and advertising links lead to third-party services with their own privacy practices. Omnivaro does not store firmware files or receive their contents when you download from upstream.

Retention and protection

Administrator records are retained while the account is maintained. Sessions expire after 8 hours; login rate-limit windows last 15 minutes. Expired authentication records are cleaned during application initialization. Expiration therefore does not necessarily mean immediate removal from databases or backups.

Administrator access uses authentication, origin validation, and login rate limiting. Passwords are stored as salted hashes and session tokens as hashes. No system can guarantee absolute security.

Your rights and policy updates

Subject to applicable law, you may request information about processing, access or a copy, corrections, and deletion or an end to processing where relevant conditions are met. Requests may require proportionate identity verification and remain subject to lawful retention obligations. You can clear local preferences directly through your browser.

We may update this policy when service practices or vendor integrations change. The update date appears on this page. Where specific consent is required, merely using the website does not replace that consent.

Operator contact

Service: Omnivaro (omnivaro.online).

The operator's identity and contact have not yet been listed. A channel for privacy requests and copyright reports is not yet available through this page.