{"id":50632670,"url":"https://github.com/gearlight-labs/privacywarden","last_synced_at":"2026-06-07T00:00:20.897Z","repository":{"id":361574699,"uuid":"1254751762","full_name":"Gearlight-Labs/PrivacyWarden","owner":"Gearlight-Labs","description":"PrivacyWarden — Mullvad VPN privacy manager for VTubers. Auto-toggles VPN modes, monitors DNS, detects threats, and protects your identity during live streams.","archived":false,"fork":false,"pushed_at":"2026-06-01T12:28:38.000Z","size":130876,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-01T14:17:47.103Z","etag":null,"topics":["csharp","dns","dotnet","mullvad","privacy","privacy-tools","security","streaming","vpn","vtuber","windows","windows-service"],"latest_commit_sha":null,"homepage":"https://gearlight-labs.github.io/PrivacyWarden/","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Gearlight-Labs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-31T00:47:50.000Z","updated_at":"2026-06-01T12:28:36.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/Gearlight-Labs/PrivacyWarden","commit_stats":null,"previous_names":["gearlight-labs/streamguard","gearlight-labs/privacywarden"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/Gearlight-Labs/PrivacyWarden","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gearlight-Labs%2FPrivacyWarden","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gearlight-Labs%2FPrivacyWarden/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gearlight-Labs%2FPrivacyWarden/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gearlight-Labs%2FPrivacyWarden/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Gearlight-Labs","download_url":"https://codeload.github.com/Gearlight-Labs/PrivacyWarden/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Gearlight-Labs%2FPrivacyWarden/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34003814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-06T02:00:07.033Z","response_time":107,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["csharp","dns","dotnet","mullvad","privacy","privacy-tools","security","streaming","vpn","vtuber","windows","windows-service"],"created_at":"2026-06-07T00:00:20.258Z","updated_at":"2026-06-07T00:00:20.890Z","avatar_url":"https://github.com/Gearlight-Labs.png","language":"C#","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PrivacyWarden\n\n\u003e Windows hardening for streamers, VTubers, and anyone who's tired of getting their IP grabbed.\n\n[![License: MIT](https://img.shields.io/badge/License-MIT-cyan.svg)](LICENSE)\n[![Platform](https://img.shields.io/badge/Platform-Windows%2010%2F11-blue.svg)](https://privwarden.org)\n[![PowerShell](https://img.shields.io/badge/PowerShell-5.1%2B-blue.svg)](https://privwarden.org)\n[![Website](https://img.shields.io/badge/Website-privwarden.org-cyan.svg)](https://privwarden.org)\n[![Version](https://img.shields.io/badge/Collection-v3.2.8-cyan.svg)](CHANGELOG.md)\n\n**Made by Aya Yoki (AyaYokiVT) — [Gearlight Labs](https://github.com/Gearlight-Labs)**\n\n---\n\n## What is this?\n\nI made PrivacyWarden because every \"Windows hardening guide\" I found was written for IT admins, not for people who stream to thousands of people and have their real name and city floating around in Discord DMs.\n\nThe threat model is different when you're a streamer or VTuber. You're not worried about nation-state actors. You're worried about someone in your chat dropping an IP grabber link, a fake brand deal with a RAT attached, or a stalker piecing together your location from stream metadata. Generic hardening guides don't cover that. This one does.\n\n**How it works:** Go to [privwarden.org](https://privwarden.org), pick a profile that fits your situation, download one PowerShell script, run it as Administrator. That's it. The script code comes directly from [`collections/windows.yaml`](collections/windows.yaml) in this repo — nothing hidden.\n\n\u003e ⚠️ **This project is in early development.** Every system is different. Read what each step does before you apply it. Don't just select everything and click generate — the profiles exist for a reason.\n\n---\n\n## Quick Start\n\n### Option 1: Website (easiest)\n\n1. Go to **[privwarden.org](https://privwarden.org)**\n2. Pick a profile — or go through individual steps if you know what you're doing\n3. Choose Apply, Audit, or Undo\n4. Download the script and run it as Administrator\n\n### Option 2: Run directly\n\n```powershell\n# Runs the standard profile — fetches latest YAML from GitHub at runtime\nirm https://raw.githubusercontent.com/Gearlight-Labs/PrivacyWarden/main/scripts/Setup-PrivacyWarden-Hardening.ps1 | iex\n```\n\n### Option 3: Clone and run locally\n\n```powershell\ngit clone https://github.com/Gearlight-Labs/PrivacyWarden.git\ncd PrivacyWarden\n.\\scripts\\Setup-PrivacyWarden-Hardening.ps1 -Local\n```\n\n---\n\n## What it covers\n\n| Phase | Steps | What it actually does |\n|---|---|---|\n| Network | NET01–NET11 | Kills LLMNR, NetBIOS, WPAD, IPv6 tunnels, sets Quad9 DNS |\n| Telemetry | TEL01–TEL10 | Kills DiagTrack, Advertising ID, Cortana, Recall AI, telemetry tasks |\n| System | SYS01–SYS08 | ASLR/DEP, SEHOP, LSA protection, SMBv1, UAC, ASR rules, firewall |\n| Malware | MAL01–MAL08 | WSH, AutoRun, dangerous file extensions, Office macros, Defender |\n| Apps | OBS01–OBS05, DIS01–DIS06, BRW01–BRW11 | OBS, Discord, browser hardening |\n| Advanced | ADV01–ADV13 | Controlled Folder Access, Remote Registry, WinRM, RDP, Print Spooler |\n| Threat Blocking | THR01–THR14 | IP grabbers, KiwiFarms mirrors, doxxing sites, stalkerware C2, 83,599 domains |\n\n---\n\n## Profiles\n\nPick one that fits. Don't select everything.\n\n| Profile | Steps | Who it's for |\n|---|---|---|\n| Standard | 58 | Good starting point for most people |\n| Streamer | 78 | Active streamers — won't break OBS or streaming tools |\n| VTuber | 80 | VTuber-specific — covers Discord, browser, identity exposure |\n| Paranoid | 82 | Everything. Test on a spare machine first. |\n| Network \u0026 Privacy | 19 | Just the network and telemetry stuff |\n| **Gaming** | **76** | **Anti-cheat safe — see below** |\n\n---\n\n## Gaming Profile (AC-SAFE)\n\nThe Gaming profile skips the 5 steps that are known to conflict with kernel-level anti-cheat. Everything else still applies.\n\n### What it's compatible with\n\n| Anti-Cheat | Games |\n|---|---|\n| Easy Anti-Cheat (EAC) | Fortnite, Apex Legends, Rust, Dead by Daylight, 200+ others |\n| BattlEye | PUBG, Rainbow Six Siege, DayZ, Arma 3 |\n| GameGuard | MapleStory, Phantasy Star Online 2 |\n| HoYoKProtect | Genshin Impact, Honkai: Star Rail, Zenless Zone Zero |\n| Vanguard | Valorant |\n| FACEIT | CS2 on FACEIT |\n\n### What gets skipped and why\n\n| Step | Name | Why |\n|---|---|---|\n| ADV01 | Controlled Folder Access | Blocks anti-cheat from writing to protected folders |\n| MAL08 | Disable Windows Script Host | Some launchers use WSH for integrity checks |\n| MAL01 | Disable AutoRun | Can interfere with game launcher auto-start |\n| ADV05 | Disable Remote Registry | Some anti-cheat telemetry reads the registry |\n| THR11 | Hosts file blocking | Large hosts file slows DNS during game startup |\n\n\u003e **Vanguard note:** Vanguard (Valorant's anti-cheat) runs a kernel driver (`vgk.sys`) that loads at boot. ADV01 (Controlled Folder Access) and MAL08 (DCOM restrictions) are the two steps most likely to cause issues. If Valorant won't launch after applying the Gaming profile, try disabling those two first.\n\nIf a game still won't launch after applying the Gaming profile, go through the excluded steps one by one. ADV01 and THR11 are usually the culprit.\n\n---\n\n## Execution modes\n\n```powershell\n.\\Setup-PrivacyWarden-Hardening.ps1                    # Apply (interactive menu)\n.\\Setup-PrivacyWarden-Hardening.ps1 -Profile standard  # Apply a specific profile\n.\\Setup-PrivacyWarden-Hardening.ps1 -Profile gaming    # Apply gaming profile\n.\\Setup-PrivacyWarden-Hardening.ps1 -Check             # Audit — no changes\n.\\Setup-PrivacyWarden-Hardening.ps1 -Undo              # Undo everything\n.\\Setup-PrivacyWarden-Hardening.ps1 -Local             # Use local YAML (offline)\n```\n\nUndo mode reverses every registry key, service, and policy change back to Windows defaults. It's not perfect — if something else changed your system between Apply and Undo, it can't account for that.\n\n---\n\n## How the YAML works\n\nEvery step in [`collections/windows.yaml`](collections/windows.yaml) has three code blocks:\n\n```yaml\n- id: NET01\n  name: \"Disable LLMNR\"\n  description: \"Stops LLMNR broadcast queries that can be used to capture credentials on shared networks.\"\n  phase: network\n  recommend: standard\n  code: |\n    # PowerShell to apply this step\n  checkCode: |\n    # PowerShell to verify this step (read-only)\n  revertCode: |\n    # PowerShell to undo this step\n```\n\nThe website reads this file at runtime and generates your script from it. The PS1 wrapper does the same thing when you run it directly. Nothing is hardcoded in the script itself.\n\nWant to add a step? Edit the YAML and open a PR. See [CONTRIBUTING.md](docs/CONTRIBUTING.md).\n\n---\n\n## Repo structure\n\n```\ncollections/\n  windows.yaml          ← All 82 hardening steps\n  windows.yaml.sha256   ← SHA-256 integrity check\ndocs/\n  USER_GUIDE.md\n  FAQ.md\n  SECURITY.md\n  CONTRIBUTING.md\nscripts/\n  Setup-PrivacyWarden-Hardening.ps1   ← YAML-driven wrapper\nsrc/\n  PrivacyWarden/        ← C# tray app (Mullvad VPN auto-switcher, companion tool)\n```\n\n---\n\n## Security \u0026 privacy\n\nNo data collection. No accounts. No telemetry. Scripts are generated in your browser from the YAML in this repo. Run `-Check` to audit without making changes. Run `-Undo` to revert. Verify the YAML against `windows.yaml.sha256` if you want to confirm it hasn't been tampered with.\n\nFull details in [SECURITY.md](docs/SECURITY.md).\n\n---\n\n## Contributing\n\nSee [CONTRIBUTING.md](docs/CONTRIBUTING.md).\n\n---\n\n## Acknowledgements\n\n[privacy.sexy](https://privacy.sexy) — the YAML-driven template engine architecture that PrivacyWarden's collection format is based on. Their open-source approach to script generation (define steps in YAML, compile to scripts at runtime) is what made this project possible. If you want a general-purpose privacy tool without the streamer/VTuber focus, check them out.\n\n---\n\n## Questions\n\nOpen a [GitHub issue](https://github.com/Gearlight-Labs/PrivacyWarden/issues) or email gearlightlabs@gmail.com.\n\n---\n\n**Collection v3.2.8 · Made by Aya Yoki (AyaYokiVT) · [@AyaYokiVT](https://twitter.com/AyaYokiVT)**\n\n[MIT License](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgearlight-labs%2Fprivacywarden","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgearlight-labs%2Fprivacywarden","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgearlight-labs%2Fprivacywarden/lists"}