Legal

Privacy policy

Last updated October 1, 2026

Who we are

LibreHost (librehost.dev) is run by RJC3rd, a sole proprietor in Katy, Texas. For anything about your information, email info@librehost.dev.

What we collect

Your account

• Your email address, and whether you’ve confirmed it.
• Your password, stored only as a secure one-way hash. We can’t read it.
• When you created your account.
• Your advanced panel username.

Your orders

• What you’ve ordered (plan, add-ons, billing period), your order and subscription status, and renewal dates.
• Reference numbers that link your account to your customer record at Stripe.

We never see or store your full card number. Payment details, your name and billing address are collected by Stripe and Link on their checkout page.

Security

• Failed login attempts, with the email address and IP address used, to stop password guessing.
• A record of account emails we send (confirmation and password-reset links), with the IP address that asked for them, to stop the forms being used to spam people.

Both are deleted after 24 hours.

Your hosting

Your websites, databases, email and files are stored on our servers so we can host them. Like any web server, ours keep logs of visits to your websites (including visitors’ IP addresses) and of mail sent and received. Server logs are deleted after a short time, usually within 30 days.

We don’t look through your websites or email. We only access them when we need to keep the service running, fix a problem you’ve asked about, deal with a breach of our terms, or respond to a valid legal request.

Visits to this website

We count visits to librehost.dev with LibreStats, our own open-source statistics, running on our own server. For each visit it records the pages you open, the website you came from, your country, your browser and device type, your screen width and how long you stay.

• It uses no cookies and stores nothing in your browser.
• It never stores your IP address. Your address is used for a moment to look up your country (on our own server) and to make an anonymous code for the visit, then forgotten.
• That code changes every day, so nobody, including us, can follow you from one day to the next or link visits to your account.
• If your browser sends Do Not Track or Global Privacy Control, you aren’t counted at all.
• Visits are kept for 13 months. After that only monthly totals remain. Nothing is shared with anyone.

Statistics for your websites

If you use Stats in the Panel, you put one line of script on your own websites and LibreStats counts the visits to them for you, the same way it counts visits to librehost.dev (see above): no cookies, no IP addresses stored, an anonymous code for each visitor that changes every day, and nobody counted who sends Do Not Track or Global Privacy Control. What is counted, and what your visitors are told about it, is up to you: they are your websites. The Panel shows the numbers only to you.

• Visits are kept for 13 months. After that only monthly totals remain, for as long as the website is in your account.
• When you delete a website, its numbers are deleted with it. When your hosting is deleted, so are the numbers of every website in it.

The forum

The LibreHost forum (forum.librehost.dev) is where our customers help each other and share what they build. It runs on LibreForum, our own open-source software, on our own server.

• It keeps the username you choose, your posts and replies, which threads you have read and when you last visited. Other members see your username and what you post, and moderators also see when you last visited. It never gets your email address.
• You come in through your LibreHost account, so the forum keeps no password for you, only a reference to your account.
• It uses one login cookie, set when you come in. For people who come in through their account it ends when you close your browser, log out, stop using the forum for an hour, or after 12 hours.
• It never stores your IP address. To slow down password guessing on the forum’s own login page, a wrong password is counted against an anonymous code made from your address. That code changes every day, and the counts are deleted after a day.
• It uses no analytics or advertising, loads nothing from other websites and isn’t counted by our visit counting. Only members can read it, and search engines are told not to index it.
• You can delete your own posts. If you leave, or we remove you, your username, password and logins are erased and what you wrote stays, shown as “Former member”. Email us if you want it deleted too. Deleted posts disappear at once, are erased from the forum’s database after 30 days and drop out of our nightly backups within the following 30 days.

Cookies

This website uses two cookies, both needed for it to work:

• A login cookie, set only when you log in or create an account. It ends when you close your browser or log out.
• An order cookie, set when you start building an order, so your choices are still there if you come back. It lasts 30 days.

There are no analytics, advertising or third-party cookies, our visit counting uses no cookies at all, and our fonts are served from our own server.

How we protect it

We use strong, industry-standard protections at every layer, including:

• Encryption in transit: this website (including the Panel), the advanced panel and webmail only work over HTTPS, mail apps can only log in over an encrypted connection, and FTP only accepts encrypted connections.
• Locked-down servers: a firewall that only opens the services hosting needs, administrator access by key only, automatic blocking of repeated failed logins on every service, and tools we don’t use switched off.
• Separated accounts: each website runs as its own user and can’t read other customers’ files.
• Protected logins: passwords are stored only as secure one-way hashes, login and email forms are rate-limited, and every advanced panel login needs a one-time code sent by email.
• Limited access: the tools that manage your hosting use their own restricted accounts with only the permissions they need, and passwords and keys are kept out of our code, readable only by the services that use them.
• Payments kept away from us: card details go straight to Stripe and Link. We never see or store them.
• Protected mail: spam and virus filtering, sending limits, and signed outgoing mail (SPF, DKIM and DMARC) so others can’t easily send mail pretending to be you.
• Backups and monitoring: nightly offsite copies of websites and databases on a separate server that can only read from ours, updates to server software, and daily checks of the servers’ health and mail reputation.

No system is perfectly secure, so we can’t promise that information will never be lost or accessed without permission. If a security breach affects your personal information, we’ll tell you without unreasonable delay and as the law requires.

Who else handles your information

• Stripe and Link process your payments and send your receipts. They follow their own privacy policies: Stripe and Link.
• Our server provider rents us the servers your hosting and our backups run on. Your data stays on servers in the United States.

We don’t sell, rent or share your information with anyone else, except when the law requires it.

Email we send

We only email you about your account: confirmation and password-reset links, advanced panel login codes, order and account notices (such as a paused account or an upcoming deletion), and reminders for add-ons you use. No newsletters or marketing.

How long we keep it

• Your account details are kept until you ask us to delete your account.
• Your hosting (websites, databases, email, files) is deleted 30 days after your account is paused, and removed from our nightly backups within the following 30 days. The numbers Stats counted for your websites and your forum account are deleted with it, within a day.
• Records of what you bought and paid are kept as long as needed for our tax and business records.

Your choices

Email info@librehost.dev to get a copy of your information, correct it, or delete your account. Deleting your account ends your hosting. To delete your payment information, contact Link through link.com.

Children

LibreHost is for adults. We don’t knowingly collect information from anyone under 18.

Changes

We may update this policy. The date at the top shows the latest version, and we’ll email you about any change that matters to your account.