VanguardNET

Privacy

VanguardNET is run by one person and collects only what it needs to keep a free tool from being abused. This page says exactly what that is.

What the tool sends to the server

Hardware ID. A one-way hash built from your PC's CPU, motherboard, BIOS and system-drive identifiers. It cannot be turned back into those identifiers. It ties your account to one machine so accounts can't be shared.

Console CPU key. Read from the Xbox you connect and stored against your account, so an account works with one console. It is shown on your account page and never shared with anyone.

Presence. While a console is connected the tool reports whether it is a retail or development kit, the gamertag signed in, and which title is running. Your account page keeps the last five titles seen.

IP address and client version with every request, kept in request logs for 30 days, and against your account as "last login from".

Console captures you choose to upload. They are public to anyone who has the link, and you can delete them at any time from your account page.

Diagnostic messages the tool logs when something goes wrong (an error text, never file contents or console memory).

What the website stores

Your username and a salted password hash — never the password itself. Optionally a recovery email, used only to verify the address and to send password-reset links. A session cookie while you are logged in.

What is not collected

No analytics, no advertising identifiers, no third-party scripts or fonts. The website makes no requests to other companies' servers on your behalf.

Retention and deletion

Request logs are pruned after 30 days. Everything else stays for as long as your account exists. To have your account and all data attached to it deleted, open a ticket on Discord from the account in question.

Changes

If this page changes in a way that matters, the change will be noted on the changelog.