telemetry.md 4.3 KB

Getiing all telemetry out

This page explains how VSCodium handles telemetry and how it enhances your privacy.

Table of contents

Telemetry in VSCodium

Even though we do not pass the telemetry build flags and go out of our way to cripple the baked-in telemetry, Microsoft will still can track usage by default depending on your settings.

We disable all the following telemetry-related settings by default to enhance your privacy:

telemetry.telemetryLevel
telemetry.enableCrashReporter
telemetry.enableTelemetry
telemetry.editStats.enabled
workbench.enableExperiments
workbench.settings.enableNaturalLanguageSearch
workbench.commandPalette.experimental.enableNaturalLanguageSearch

It is also recommended that you review all the settings that "use online services" by following these instructions. You can use the search filter @tag:usesOnlineServices to show such settings and review what to change.

Note: on Linux, the app update service (extensions are not affected) is disabled completely even if the update.mode preference is configured.

Please note that some extensions send telemetry data to Microsoft as well. We have no control over this and can only recommend removing the extension. (For example, the C# extension ms-vscode.csharp sends tracking data to Microsoft.) Be sure to check each extension's settings page to disable its telemetry if applicable.

Update services

The app periodically fetches connections to check for the latest version and download it to install.

If you want to prevent such behavior, modify the following preferences:

  • update.mode -> manual (or none)
  • update.enableWindowsBackgroundUpdates -> false (only applicable for Microsoft Windows)

Feedback telemetry

By default, we keep the preference telemetry.feedback.enabled enabled. It's used to allow the button Report Issue... to be used on the app depending on the context. It does not send any data by having it enabled (other options already cover it). If you want, you can disable this behavior by toggling the preference value.

Replacements to Microsoft Online Services

When searching the @tag:usesOnlineServices filter, note that while the "Update: Mode" setting description still says "The updates are fetched from a Microsoft online service", VSCodium's build script sets the updateUrl field in product.json directly to the GitHub page, so enabling that setting won't actually result in any calls to the Microsoft online service.

Likewise, while the descriptions for "Extensions: Auto Check Updates" and "Extensions: Auto Update" include the same phrase, VSCodium replaces the Visual Studio Marketplace with Open VSX, so these settings won't call Microsoft either.

Checking for telemetry

If you want to verify that no telemetry is being sent, you can use network monitoring tools like:

  • Wireshark
  • Little Snitch (macOS)
  • GlassWire (Windows)

Look for connections to Microsoft domains and telemetry endpoints.

VSCodium anouncements

The welcome page in VSCodium displays announcements that are fetched via the internet from the project's GitHub repository.

If you prefer to disable this feature, you can disable the preference workbench.welcomePage.extraAnnouncements.

Malicious & deprecated extensions

The definitions for malicious and deprecated extensions are dynamically loaded from the following URL: https://raw.githubusercontent.com/EclipseFdn/publish-extensions/refs/heads/master/extension-control/extensions.json

If you prefer to avoid any external connections, you can disable the preference extensions.excludeUnsafes.
However, this is not recommended as it may reduce the safety of your environment.