Privacy policy

To show the protection status, Oberih reads, locally and only while its window is open:

• Microsoft Defender’s status, settings, threats (with the paths of the affected files and the program involved), detection history and quarantine, through Windows’ own interfaces (WMI and MpCmdRun.exe);
• Defender’s event log, to notice a scan started outside Oberih;
• other Windows security settings: the firewall, other antivirus or firewall apps registered in Windows Security, User Account Control, SmartScreen, memory integrity, encryption of the system drive and the date of the last Windows update.

This information is shown on the screen. It is not saved, copied or sent anywhere. To estimate how long a scan takes, Oberih also reads how much space is used on your drives and the size of the folder or file you choose to scan.

Oberih keeps one small settings file, %LOCALAPPDATA%\Oberih\settings.json, with:

• the language, theme, text size and sound settings;
• which tips you marked as read, and whether you have seen the welcome and the offer to install;
• whether to check for updates automatically, and a version you chose to skip;
• how long earlier scans took on this PC, for the progress estimate.

Technical error messages (for example, when a link could not be opened or the app crashed) are written to error.log in the same folder.

Oberih also has short sound effects built in. They are on by default; the first time a sound plays, the files are copied to %LOCALAPPDATA%\Oberih\sounds, one folder per app version. Sounds can be turned off in Settings.

When you run the downloaded file, .NET may unpack parts of it into Windows’ temporary files folder (%TEMP%\.net\Oberih). That folder is not part of the app’s own data and is not removed when you uninstall; you can delete it by hand.

If you unlock Oberih with a different administrator account, Windows runs it as that account, and the folder above is then in that account’s profile.

These files stay on your PC, and Oberih never sends them anywhere. You can open the folder from Oberih’s Settings.

If you choose to install Oberih, it copies itself to %LOCALAPPDATA%\Programs\Oberih, creates a Start menu shortcut and a desktop shortcut (you can delete the latter), and adds an entry to the Windows list of installed apps (in your user part of the registry). No administrator rights are needed for this. Oberih does not start with Windows and adds no scheduled tasks.

Oberih goes online for one thing: its own updates. By default, a few seconds after it starts and then every 12 hours while its window is open, it reads a small file, pegasohlib.github.io/oberih/update.json, with the number of the newest version. If there is a newer one, Oberih shows a button, and only when you press it is the new version downloaded from GitHub (github.com and its download servers). Before installing, Oberih checks the author’s signature on the update information and the file’s checksum and version. The new file is saved next to the app file for a moment, then replaces it.

These requests carry no data about you or your PC: only Oberih’s version number in the standard “User-Agent” header, and a time value added to the address so that an old cached copy is not returned. Like any website, GitHub sees your IP address, and GitHub’s own privacy statement applies. You can turn automatic checks off in Oberih’s Settings → Updates; the “Check” button there still works when you press it.

Buttons such as “Open” lead to Windows Security or Windows Settings on your PC. Two buttons open your web browser, only when you press them: the privacy policy (pegasohlib.github.io) and the links in the licenses list (github.com). That site’s own policy then applies. Websites mentioned in the tips are plain text: Oberih does not open or contact them.

GitHub also counts how many times each file has been downloaded. It is only a number, with nothing about who downloaded it; the website shows it as an approximate number of downloads.

All scanning and protection is done by Microsoft Defender, which is part of Windows. Some of its features talk to Microsoft: cloud protection sends details about suspicious files, sample submission may send suspicious files for analysis, and definition updates are downloaded from Microsoft. This is Defender’s own behaviour, governed by the Microsoft Privacy Statement. Oberih shows these settings and changes them only when you ask. It receives none of that data.

Oberih starts with normal rights; its program file does not ask Windows for more. To change Defender settings, manage exclusions, allow threats, view or restore quarantine, start an offline scan or stop a running scan, you press Unlock: Oberih restarts with administrator rights after Windows asks you to confirm, and the rights last only until you close the window. Oberih installs no background service and does not run when its window is closed. Before asking for rights, it checks that its own file has not changed since it started.

What Oberih uses on your PC:

Normal rights

Reading Defender’s status, scans, definition updates, the Defender event log, Windows security settings (firewall, UAC, SmartScreen, memory integrity, drive encryption, last Windows update) and your own folders for settings and the install.

Administrator rights, only after Unlock

Changing Defender settings and exclusions, allowing threats, quarantine, the offline scan and stopping a scan.

Windows registry

Writes only its own entry in the list of installed apps, in your user part. Everything else is read-only.

Internet

Only the update check and download described above.

• no accounts with the developer and no servers of its own;
• no analytics, no ads, no tracking, no crash reports sent anywhere;
• no uploading of your files, scan results or threat lists;
• no selling or sharing of any data;
• no bypassing of Tamper Protection or any other Windows protection.

Uninstalling Oberih (in Windows Settings → Apps, or with the button in Oberih’s Settings) removes the app, its shortcuts, its entry in the app list and the %LOCALAPPDATA%\Oberih folder with the settings, the error log and the sound files. The folder with the app itself is deleted a few seconds after Oberih closes. Microsoft Defender and all its settings stay as they are, including exclusions and allowed threats you set through Oberih, and files you restored from quarantine. The temporary folder described above stays unless you delete it. If you only ran the downloaded file without installing, delete it and that folder yourself.

If the app starts doing something new with data, this page will be updated first, with a new date at the top.

Who is responsible. PegasoHlib, a private individual who develops these apps, is responsible for the data described here. Contact: support@pegasohlib.com.

Why data is used, and on what legal basis.

Running the app

Contract: needed to provide what you asked for (GDPR Art. 6(1)(b))

Update checks and safety

Legitimate interest: keeping the app safe and up to date (Art. 6(1)(f))

An e-mail you send

Legitimate interest: answering you (Art. 6(1)(f))

Who receives it, and transfers outside the EU. GitHub (update checks and downloads). Microsoft Defender works as Windows and your settings define. E-mail you send passes through Cloudflare and is kept in a Gmail mailbox by Google, and Anthropic may process it when an AI assistant helps read it. Some of these companies are based in the United States or other countries outside the EU. Those transfers rely on the EU–US Data Privacy Framework where the company takes part in it, or on the company’s standard contractual clauses.

How long it is kept. Data in the app stays until you delete it or remove the app. Copies in your own cloud storage stay until you delete them. E-mails you send are kept until the matter is closed, and for no more than 2 years.

Your rights. You can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere (portability), and you can object to processing or withdraw consent at any time. Write to the address above. You’ll get an answer within one month. Most of the data is only on your device, so you can usually do this yourself in the app.

Complaints. You can complain to the data protection authority of your country.

Age. You need to be at least 15 to use the app on your own. If you are younger, ask a parent or guardian to agree first.

Language. Translations of this policy are made with the help of AI. If a translation differs from the English text, the version more favourable to you applies.

Questions about privacy: support@pegasohlib.com.