Outline Foundation
Data Collection Policy
Last updated: March 2 2026
Outline is developed and maintained by Outline Foundation, an independent nonprofit organization. This Data Collection Policy explains what information Outline collects, how it is used, and the limited circumstances in which it is shared.
Our goal is to design and operate Outline in a way that minimizes data collection, protects user privacy, and makes data practices clear and auditable.
Overview
Outline is software that allows people and organizations to set up and manage their own VPN servers. Outline Foundation does not operate VPN servers on behalf of users and does not route or inspect user traffic.
As a result:
Information Outline Does Not Collect
If you use a third-party cloud provider to host your Outline server, any information you provide to that provider (such as name, email address, billing details, or payment information) is governed solely by that provider’s privacy policy. The Outline Foundation does not receive that information.
Information Collected Automatically
Outline Foundation collects a limited amount of technical information strictly for security, stability, and maintenance purposes.
1. Outline Server IP Address
When an Outline server checks for software updates, the server IP address may be visible to the container registry used to distribute updates (currently Quay.io). This information may indicate:
This information does not identify:
Outline Foundation uses this information only to ensure secure and reliable delivery of software updates.
2. Non-Personally Identifiable Technical Information
If an Outline application crashes, encounters a fatal exception, or if you manually submit feedback, limited diagnostic information may be collected to help identify and fix problems.
This information may include:
This information does not include:
Crash and error reports are transmitted securely using HTTPS to Sentry, an open-source error tracking service. Access to this data is restricted to authorized members of the Outline team. For more information, see Sentry’s privacy and security documentation: https://sentry.io/security/ and https://sentry.io/privacy/, or contact security@sentry.io
Information Collected with Explicit Opt-In Only
Outline collects the following information only if a server administrator explicitly enables sharing.
1. Anonymous Usage Metrics
Each Outline server locally calculates aggregated usage statistics on a per-access-key basis for the previous hour. These metrics may include:
These metrics:
By default, these metrics are not shared with the Outline Foundation.
If a server administrator opts in, the metrics are securely transmitted to Outline Foundation once per hour. After 60 days, metrics are aggregated to the country level.
Server administrators can enable or disable usage metrics sharing at any time through the Outline Manager.
We use aggregated metrics to:
We appreciate you sharing with us anonymous metrics about your server usage, as we use them to measure usage trends and to improve the product.
2. Feedback Submissions
Outline Manager and Outline Applications allow users to submit feedback directly to the Outline team.
If you submit feedback:
Along with your message, we may collect limited technical context (as described above) to help us understand and address your feedback.
Providing feedback is entirely voluntary.
Beta Software
If you use a beta version of Outline software, additional diagnostic information may be collected to help identify issues prior to release. Where applicable, this information is clearly disclosed within the beta program.
If you prefer not to share beta diagnostic data, please use the stable production version of Outline.
Data Security
Outline Foundation uses industry-standard security practices to protect the limited data it processes, including:
We do not sell, rent, or monetize user data.
Data Retention
Outline Foundation retains collected data only for as long as necessary to:
We periodically review and delete data that is no longer needed.
Third-Party Services
Outline software may interact with third-party services for specific functions (such as error reporting or server hosting). These services operate under their own privacy policies.
Outline Foundation carefully evaluates third-party services and seeks to use providers aligned with our privacy-first principles.
Changes to This Policy
If we make material changes to this Data Collection Policy, we will update the “Last updated” date and publish the revised policy on our website.
Contact
If you have questions about this Data Collection Policy or Outline’s privacy practices, you can contact Outline Foundation:
Outline Foundation
Privacy Summary
Outline is built to help people access the open internet with minimal data collection.
Outline Foundation is a nonprofit organization dedicated to privacy, security, and digital rights. We design Outline so that we do not see, track, or store what you do online.
What We Don’t Collect
Outline Foundation does not operate VPN servers. You run your own server or choose a provider you trust.
What We Collect (Minimally)
We collect only limited technical information needed to keep Outline reliable and secure:
This information cannot be used to identify users or their activity.
Optional, Anonymous Data
Server administrators may choose to share anonymous, aggregated usage metrics (such as total data transferred or country-level usage). This sharing is off by default and can be changed at any time.
Feedback
If you send us feedback, you may optionally include an email address so we can reply. Providing personal information is never required.
Our Commitments
As a nonprofit, Outline Foundation:
Transparency
Outline is open source. Our privacy practices are documented publicly, and we welcome review from the security and human rights communities.
Outline Foundation
Privacy & Human Rights Statement
Our Purpose
Outline Foundation is a nonprofit organization committed to advancing access to the open internet and protecting the human rights of people who rely on privacy and secure communications.
We recognize that privacy is not an abstract preference—it is a prerequisite for freedom of expression, freedom of association, and personal safety, especially for people living under censorship, surveillance, or political repression.
Our Approach to Privacy
We design Outline according to a principle of data minimization by design.
This means:
Outline works even if we know nothing about you.
What Outline Is—and Is Not
Outline is software that helps people run their own VPN servers.
Outline Foundation:
Server administrators choose where and how their servers are hosted, and they remain in control of that infrastructure.
Data We Avoid Collecting
Because data can be misused, compelled, breached, or misunderstood, we deliberately avoid collecting:
If we do not have the data, we cannot be forced to share it.
Limited Data We Do Collect
To maintain the security and reliability of the software, Outline may collect limited technical information, such as:
This information is non-identifying, aggregated, and used solely to improve stability and security.
Consent and Choice
Where any data sharing is optional—such as anonymous usage metrics—the default is off.
Server administrators can opt in or out at any time. There are no penalties for choosing privacy over metrics.
Safety-First Design
We assume Outline may be used by:
As a result, we design for worst-case scenarios, including:
Our goal is to ensure that Outline cannot easily be turned into a tool for surveillance, even against our will.
Independence and Accountability
Outline Foundation is an independent nonprofit. We do not operate for profit, and we do not monetize user data.
Outline is open source, and our privacy practices are documented publicly. We welcome scrutiny from the security, privacy, and human rights communities.
Our Commitment
Privacy is not a feature we add later—it is a condition we start from.
We commit to:
Contact
If you have questions or concerns about privacy, security, or human rights implications of Outline, you can contact Outline Foundation at: privacy@getoutline.org