Please report security issues privately through GitHub's "Report a vulnerability" (Security Advisories) on this repository, not in a public issue. Include the IXC Camera version, your Windows build, and reproduction steps. Don't include camera recordings of people.

IXC Camera:

• runs without administrator rights. Only the installer's camera registration step may require elevation;
• installs no kernel driver, disables no security feature, and changes no unrelated system setting;
• makes no network connections for camera processing, collects no telemetry, and needs no account;
• never executes code from effect packages or profiles. They are validated data (see src/common/json.h for parser limits);
• respects Windows camera privacy settings and never tries to bypass them;
• keeps logs free of secrets and personal content, with size-capped rotation;
• vendors its only third-party code (libfacedetection) unmodified at a pinned commit. The build verifies it by SHA-256, it loads no model files (the weights are compiled in), and it runs only on in-memory frames while face tracking is on;
• treats %ProgramData%\IXC Camera\active-profile.json as untrusted. It's writable by local users and read by the camera service, so it's size-limited, strictly parsed, clamped, and never executed. The service only reads it.

Every release lists SHA-256 hashes for its artifacts, the exact commit, which scans were run, and whether the binaries are code-signed. We don't claim a release is "virus-free". We state exactly which checks were performed.