Volumio and privacy

[ashthespy]

The questions of these server connections keep surfacing from time to time, but information on it is spread out across multiple sources.

So here is an attempt to centralise the scattered knowledge

Updater and related

Firewall Threat detection

Yep, this is a call made by Volumio to check if there are updates available. This is done in preparation to the new push updates function that we are working on. The infos sent are: hardware, software version (and we don’t log requests)

pushupdates.volumio.org is requested every 4-5 sec

This is an endpoint for the push OTA updater that we are building as an improvement to the current update mechanism (Volumio will tell you when a new update is available instead of you checking it manually). You’re seeing all this calls since our server for push updates is experiencing some technical issues since last friday, and the client tries to reconnect every 5 seconds. Once we’ll solve this (in a couple of days) you won’t see it anymore

Volumio constantly resolving mqtt.volumio.org

mqtt.volumio.org is our broker for mqtt communication, used for myvolumio presence system and in the future for push updates.

myVolumio and related

calls to remote servers?

audioscrobbler calls are to retrieve album arts for artists database.volumio.org is used to retrieve myvolumio plugin keys, if you block it myvolumio won’t work.

Remove Google Analytics

Firebase: user management system and realtime database (myvolumio) Paddle: Payment gateway provider (myvolumio) See: myvolumio-technical-overview-t10227.html Those do nothing if you’re not logged in myvolumio.

Additional reading

Volumio network security

After installing Volumio, is there anything I need to do in order to enhance its security, or is it ‘good enough’ out of the box? I’m mostly interested in its network security and whether or not I need to undertake additional steps after installation.

“Facehook” and co

Can the developers be a bit more transparent as to what information gets uploaded for monetization purposes? For example, is facebook going to learn my musical taste when I listen to a local (NAS) Flac file? I am running a pi-hole filtering service to try and limit any eccessive privacy sharing but being more up-front would not harm. Thx!

Privacy Policy of Volumio - Volumio