This page explains how VSCodium handles telemetry and how it enhances your privacy.
Even though we do not pass the telemetry build flags and go out of our way to cripple the baked-in telemetry, Microsoft will still can track usage by default depending on your settings.
We disable all the following telemetry-related settings by default to enhance your privacy:
telemetry.telemetryLevel
telemetry.enableCrashReporter
telemetry.enableTelemetry
telemetry.editStats.enabled
workbench.enableExperiments
workbench.settings.enableNaturalLanguageSearch
workbench.commandPalette.experimental.enableNaturalLanguageSearch
It is also recommended that you review all the settings that "use online services" by following these instructions. You can use the search filter @tag:usesOnlineServices
to show such settings and review what to change.
Note: on Linux, the app update service (extensions are not affected) is disabled completely even if the update.mode
preference is configured.
Please note that some extensions send telemetry data to Microsoft as well. We have no control over this and can only recommend removing the extension. (For example, the C# extension ms-vscode.csharp
sends tracking data to Microsoft.) Be sure to check each extension's settings page to disable its telemetry if applicable.
The app periodically fetches connections to check for the latest version and download it to install.
If you want to prevent such behavior, modify the following preferences:
update.mode
-> manual
(or none
)update.enableWindowsBackgroundUpdates
-> false
(only applicable for Microsoft Windows)By default, we keep the preference telemetry.feedback.enabled
enabled. It's used to allow the button Report Issue...
to be used on the app depending on the context. It does not send any data by having it enabled (other options already cover it). If you want, you can disable this behavior by toggling the preference value.
When searching the @tag:usesOnlineServices
filter, note that while the "Update: Mode" setting description still says "The updates are fetched from a Microsoft online service", VSCodium's build script sets the updateUrl
field in product.json
directly to the GitHub page, so enabling that setting won't actually result in any calls to the Microsoft online service.
Likewise, while the descriptions for "Extensions: Auto Check Updates" and "Extensions: Auto Update" include the same phrase, VSCodium replaces the Visual Studio Marketplace with Open VSX, so these settings won't call Microsoft either.
If you want to verify that no telemetry is being sent, you can use network monitoring tools like:
Look for connections to Microsoft domains and telemetry endpoints.
The welcome page in VSCodium displays announcements that are fetched via the internet from the project's GitHub repository.
If you prefer to disable this feature, you can disable the preference workbench.welcomePage.extraAnnouncements
.
The definitions for malicious and deprecated extensions are dynamically loaded from the following URL: https://raw.githubusercontent.com/EclipseFdn/publish-extensions/refs/heads/master/extension-control/extensions.json
If you prefer to avoid any external connections, you can disable the preference extensions.excludeUnsafes
.
However, this is not recommended as it may reduce the safety of your environment.