Open-source alternatives to Privacy.sexy

Winscript is a modular configuration framework designed for the administration and hardening of Windows environments. It utilizes script-based task orchestration to automate system setup, privacy enforcement, and performance tuning through direct interaction with system APIs and registry keys. The project distinguishes itself by providing a unified toolkit that combines OS deployment automation with bulk software provisioning. It generates unattended installation files to bypass hardware requirements and manual setup prompts, while simultaneously managing the silent installation of third-part

This utility provides a centralized administrative framework for managing and optimizing Windows environments. It functions by executing system-level primitives, including registry modifications, service management, and file system operations, to enforce performance, privacy, and security policies. The project distinguishes itself through its template-driven automation, which allows users to apply predefined configuration profiles to ensure consistent system states across machines. It integrates low-level adjustments—such as memory balancing, startup control, and hardware parameter tuning—wit

RyTuneX is a utility suite designed for managing operating system features, removing bloatware, and controlling data privacy settings. It functions as a system optimizer and debloater that allows users to uninstall preinstalled applications and tune system configurations to improve performance and reliability. The project includes a privacy manager to disable telemetry and block data collection tracking. It provides a dashboard for modifying system behaviors and hardware specifications through a simplified interface, including toggle switches for native operating system features. The suite c

SophiApp is a suite of specialized tools designed for removing pre-installed software, installing system runtimes, optimizing operating system performance, and hardening privacy on Windows 10 and 11. It includes a dedicated bloatware removal tool, a dependency installer for runtimes and codecs, and a privacy hardening suite to restrict data collection. The project features an optimization toolkit and registry tweaker that apply configuration changes to customize system behavior, appearance, and performance. These tools use a graphical interface to modify registry values, manage theme personal

Atlas is an operating system customization framework designed to deploy streamlined versions of Windows. It functions as a performance optimization tool that establishes a baseline environment by removing pre-installed software, unnecessary background services, and resource-heavy processes. The project distinguishes itself through a comprehensive suite of automation and configuration tools that modify low-level system registry keys and group policies. These mechanisms allow users to enforce performance-oriented hardware settings, restrict telemetry and data collection, and manage the lifecycl

UnattendedWinstall is an OS deployment automation tool and unattended installation generator for Windows. It creates answer files and configuration mappings to automate the operating system setup process, enabling a clean installation without manual intervention. The tool provides specialized capabilities for bypassing hardware requirement checks during setup. It further allows for the injection of customized registry tweaks and system-wide settings directly into the installation image to modify OS behavior. The framework covers broad system optimization and hardening, including the removal

pyinfra is a Python-based infrastructure automation framework that turns Python code into shell commands for managing servers, Docker containers, and local machines. It operates as a declarative, idempotent deployment tool, applying desired system states by comparing target configurations against current states and making only the necessary changes. The framework provides a connector-based transport abstraction that unifies SSH, Docker, and local execution behind a common interface, with a parallel execution engine that manages concurrent operations across hosts. The tool distinguishes itself

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

Asterinas is a memory-safe operating system kernel designed to prevent data races and memory corruption. It functions as a Linux-ABI compatible kernel, enabling the execution of existing Linux binaries and container workloads while providing a declarative operating system distribution model. The project distinguishes itself by acting as a virtual machine container host and a confidential computing guest OS, allowing it to run within hardware-isolated Trusted Execution Environments such as Intel TDX. It implements a minimal trusted computing base by isolating unsafe low-level operations and se

Universal Android Debloater is a cross-platform desktop utility designed to uninstall pre-installed system applications from Android devices. Built with Rust, it provides a graphical user interface to manage system applications via the Android Debug Bridge. The tool specifically enables the removal of factory-installed software on non-rooted devices. It targets the improvement of device privacy, security, and battery life by reducing the software attack surface and removing unwanted data-collecting applications. The system handles package-name resolution to map human-readable application nam

Re-imagining Windows like a minimal OS install, already debloated with minimal impact for most functionality.

nix-darwin is a declarative system configuration tool for macOS that uses the Nix package manager to define and manage the entire system state—including users, services, networking, and security—through a single reproducible Nix expression. It integrates Nix’s purely functional package model to install, update, and remove software, supporting multiple versions and atomic rollbacks. The tool composes system configuration from modular, typed, overridable options. It evaluates these Nix expressions to produce an immutable description of the desired state, then generates activation scripts that a

Cromite is a privacy-focused browser built as a fork of Chromium that embeds a network-level content blocking engine to intercept advertisements, pop-ups, and tracking scripts before they reach the page. It applies community-maintained public filter lists directly within the browser, eliminating the need for external extensions, and uses a curated patch system applied to the Chromium source tree at build time to add or modify features without maintaining a separate codebase. The browser is hardened against tracking and data leakage through a comprehensive set of privacy and security measures.

WindowsSpyBlocker is a suite of utilities designed to stop operating system data collection and tracking by applying firewall rules, hosts file blocks, and telemetry restrictions. It functions as a telemetry blocker and firewall manager that prevents the operating system from sending usage data to remote servers. The project features a specialized connectivity modifier for adjusting the network connectivity status indicator to prevent external reporting. It includes a network traffic auditor to capture and analyze system traffic to identify spying activities, alongside a manager for DNS and h

This project provides a functional package manager and a reproducible build system designed to ensure identical build inputs always produce the same outputs. It serves as the foundation for a declarative Linux distribution where the entire system state is defined in a configuration file, enabling predictable deployments and full-system rollbacks. The system uses a deterministic functional language and a lazy-evaluation expression engine to manage software dependencies and isolate build environments. It distinguishes itself through a content-addressable store that allows multiple versions of s

Win11Debloat is a command-line utility designed to automate the configuration, privacy hardening, and maintenance of Windows environments. It functions as a centralized tool for streamlining the operating system by removing pre-installed software, disabling telemetry and diagnostic tracking, and adjusting system settings to enhance performance and user privacy. The project distinguishes itself through its support for declarative configuration profiles and audit-mode provisioning, which allow administrators to define and enforce consistent system states across multiple machines. Users can inte

Nixpkgs is a comprehensive repository of declarative software definitions used to build and manage reproducible system environments. It functions as a framework for assembling operating system components and application dependencies into consistent, versioned, and verifiable software collections. By utilizing a functional derivation graph and a lazy evaluation model, the project ensures that software environments are defined as pure expressions, resulting in absolute reproducibility across different machines. The repository distinguishes itself through its ability to manage complex software l

systemd is a comprehensive system and service manager for Linux that orchestrates the entire operating system lifecycle. It functions as the primary init system, managing the transition from firmware to a fully initialized user space while providing a unified framework for service orchestration, hardware management, and resource control. The project distinguishes itself through its declarative, unit-based configuration model and dynamic dependency resolution, which allow for efficient, on-demand service activation and socket-based process management. It integrates deep system observability th

Thorium is a web browser built from the Chromium project, designed for high performance and expanded compatibility. It utilizes aggressive compiler optimizations and CPU-specific instruction sets, such as AVX2 and SIMD, to increase page rendering and JavaScript execution speeds. The project distinguishes itself by providing custom builds that enable modern web browsing on legacy versions of Windows and Linux. It further diverges from standard browser implementations by integrating Widevine DRM and native support for high-efficiency media formats, including HEVC and JPEG XL. Broad capabilitie

Disko is a declarative configuration system for managing Linux disk partitioning, filesystem formatting, and LUKS encryption setup. It functions as a disk provisioner that allows users to define disk layouts and mount points through configuration files rather than manual commands. The project focuses on providing reproducible system installations by defining storage provisioning as code. It specifically automates the creation of partition tables, the setup of encrypted storage containers, and the configuration of filesystem layouts for NixOS systems. The toolset includes a command-line inter

Register is a GitOps domain registrar and subdomain registration service that uses version-controlled configuration files to manage domain ownership and mappings. It functions as a DNS management system and record orchestrator, utilizing JSON-based declarative configurations to programmatically update A, CNAME, MX, and TXT records. The project distinguishes itself through a registration process where domain ownership and subdomain assignments are stored as the source of truth within Git repositories. It includes an automated SSL provisioning tool to configure web servers and security certific

vim-plug is a plugin manager for the Vim text editor that functions as a git-based dependency manager and configuration bootstrapper. It downloads and organizes external plugin packages from remote repositories to extend the editor's functionality. The project acts as a lazy-loading orchestrator to reduce editor startup time by deferring the loading of plugins until specific commands or file types are encountered. It enables version pinning by allowing plugins to be fetched using specific git branches, tags, or commit hashes. The manager provides a framework for plugin installation, lifecycl

NixOS-WSL packages a complete NixOS system into a WSL-compatible tarball that Windows registers as a native distribution, enabling declarative configuration and lifecycle management for NixOS as a Windows Subsystem for Linux instance. The project boots NixOS with systemd as the init system inside WSL, providing full service management and dependency-based startup, while exposing the NixOS filesystem and executables to Windows through WSL's interop mechanism for bidirectional command execution. Users can override the default NixOS configuration declaratively to customise packages, services, an

This project is an OS-level process sandbox and cross-platform security wrapper for Linux and macOS. It is designed to isolate arbitrary processes from the host machine by restricting filesystem and network access without the use of full containerization. The system functions as a system-call interceptor and access controller, blocking unauthorized operating system calls based on predefined security policies. It employs allowlists and denylists to manage resource requests and monitors for security violations in real time. Capability areas include filesystem access management using glob-patte

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

Concourse is a container-based continuous integration and delivery platform that functions as a distributed build system. It operates as a declarative pipeline orchestrator, using a central controller and multiple worker nodes to execute concurrent tasks within isolated containers. The system distinguishes itself by executing every build step in a separate container to ensure environment consistency and by defining software delivery sequences through portable, versionable configuration files. It provides a web-based pipeline visualizer to display the real-time status and progress of automated

This project is a collection of Unix dotfiles and a custom desktop environment configuration for Linux. It provides a standardized set of configuration files to ensure consistent shell and application behavior, centering on a tiling window manager setup and a personalized user interface. The environment features a desktop dashboard with modular widgets and sidebars that display system performance, weather, and media controls. It includes a comprehensive keyboard shortcut map using global and mode-specific keybindings to launch applications and control system actions. The configuration covers