Privacy
LibrePortal keeps as little as security needs and no more: addresses cut after 30 days, apps quiet by default, no telemetry, and a Privacy card on every app that says what it does with your data.
On this page
LibrePortal is a privacy project, and it's the same rule everywhere: keep an address only as long as security needs it, keep no log that nothing reads, and run apps quietly unless you ask for more.
No telemetry#
LibrePortal doesn't phone home. There's no account to make, no usage data and no analytics. Your server fetches only what it needs, like LibrePortal's updates and your apps' images. The FAQ and the website list where it connects. Even the Find my internet address button on the Access page asks the address service only when you press it.
Addresses are cut after 30 days#
A server has to know who is knocking, or it can't lock anyone out. So the control panel's activity log keeps the person and the action, and the full address for 30 days. After that only the network part is kept, the first three numbers of an IPv4 address (203.0.113.77 becomes 203.0.113.0/24). A session keeps the full address only while it is active. Sign-in lockout counters live in memory and are gone when the control panel restarts.
Traefik's web log holds failed requests only, for at most 48 hours, with no cookies, passwords or query strings, and it's never put in a backup. CrowdSec forgets its alert records after 48 hours. Every container's log is capped at 10 MB times three files, so the oldest lines go on their own.
What we log, and why has the full table.
Apps are quiet by default#
An app that can be told how much to log is set to warnings and errors only, with its own access log off. The apps' own settings for telemetry, update checks, outside lookups and the like are off as well, until you choose otherwise. You can put any of them back on an app's Config tab, and a choice you made yourself is never overridden.
Debug for 24 hours#
When something is wrong and you need to see everything, turn on Debug logging for 24 hours in the app's Config tab. It switches itself off after a day, so it can't be left on by accident. From a terminal:
libreportal privacy debug vaultwarden on
The Privacy card on every app#
Every app is somebody else's software, and plenty of it comes set up to check in with its makers. So each app has a small Privacy and security button by its name. It opens a card with a colour and a few plain sentences:
- All clear: nothing leaves your server that you didn't ask for.
- Worth knowing: something still reaches outside, and the card says what and why. Often that is the app's whole job, like a VPN provider or federation.
- Not recommended: a known problem, such as software that no longer gets security fixes.
The card also lists what LibrePortal has switched off, the app's licence and when it was last checked. The same card shows as a Privacy link when you install. All the apps are in one table on Privacy of every app.
Checking it yourself#
Admin → Tools → Privacy check shows what every installed app sends out right now, and a Logs card ticks each logging rule only after checking it. From a terminal:
libreportal privacy check
libreportal privacy logs