Privacy policy

Self Host Layer is software you install on your own server. This policy covers two things: this website, selfhostlayer.com, and the software.

#The short version

• This website sets no cookies and uses no analytics or advertising trackers.
• The software runs on your server. Your apps, their data, your environment variables and your logs stay there, and we never receive them.
• The software sends no telemetry.

#This website

• No cookies, no trackers. The site doesn't set cookies, and it loads no analytics or advertising scripts.
• Everything comes from this site. Its fonts and images are served by the site itself, so visiting it sends nothing to third parties.
• Server logs. Like any website, the server that hosts it may log requests (your IP address, the page, the time and your browser's user agent) to keep the site running and secure. These logs are kept for a short time and used for nothing else.
• Email. If you write to us, we use your email address to answer you, and for nothing else.

#The software

Self Host Layer runs on a server you control, and you're its operator.

What stays on your server: your apps' code and builds, their data and databases, your environment variables (encrypted in the panel's database), your logs and metrics, and your account. We have no access to any of it.

What it connects to, and only for its work:

• GitHub, through your own GitHub App, to fetch your code and receive push webhooks.
• Let's Encrypt, to issue and renew certificates for your domains.
• Package registries (npm and others) during builds, nodejs.org for Node runtimes, and your operating system's and Caddy's package repositories.
• Public DNS resolvers (Cloudflare's and Google's), to check that your domains point at your server.
• The update feed at get.selfhostlayer.com: every 6 hours to check for a newer release (you can turn that off in Settings → Version), and when you install one. Like any download, that server sees your server's IP address; the request says nothing else about it.
• Your backup storage and your alert channels (Telegram, Discord, a webhook or email), once you set them up. Backups are encrypted on your server before they're uploaded.

No telemetry. The software doesn't send usage data to us or anyone else. The MongoDB shell's own telemetry is turned off when MongoDB is installed.

#Your apps and your users

If the apps you deploy collect personal data from your own users, you're responsible for that data, and for following the privacy laws that apply to you.

#Changes

If anything here changes, we'll update this page and the date at the top.

#Contact

Questions about this policy: [email protected].