Scope
This policy covers the DockerOS development image and installer. DockerOS is software installed on hardware controlled by the operator. Asterline Labs does not operate a DockerOS cloud account, telemetry service, container registry, or hosted control plane.
Data handled on the host
The system can store host and network configuration, administrator credentials, Docker settings, Compose files, container images, volumes, secrets, logs, and browser-management configuration. The exact information depends on the containers the operator installs.
Network services and third-party containers
The base system may contact package mirrors, time services, and container registries for functions the operator invokes. Each installed image or container can have independent data practices, ports, credentials, and external services. Asterline Labs does not review or control every third-party container.
Use and disclosure
Local information is used to install and operate the host and containers. The development image is not designed to send Asterline analytics, advertising identifiers, or host telemetry to Asterline Labs. Registry, package, DNS, router, and container operators may log ordinary requests under their own terms.
Retention and deletion
The operator controls local files, volumes, images, logs, backups, and secrets. Remove a container and its volumes, delete configuration, reset the manager, or securely erase/reinstall the host to remove data as appropriate. The installer is destructive to the selected disk; ordinary deletion does not guarantee forensic erasure.
Security
A container host can expose powerful administrative functions. Change default credentials, restrict management ports, apply updates, protect secrets, use least privilege, review images and Compose files, and do not expose the manager directly to the public internet without a separately secured access design.
Questions and changes
Material changes will be posted here. Use the support page for privacy or security reports and redact credentials, tokens, public IP addresses, and private configuration before sending logs.