Privacy Policy

HomelabConfig ("we", "us", "our") operates homelabconfig.com. This policy describes what information we collect, how we use it, and the choices you have regarding your data.

We keep data collection minimal. HomelabConfig is a technical planning tool, not an advertising platform. We do not sell your personal data to third parties.

Account data. If you create an account, we store your email address, a hashed password, and any display name you provide. We do not store payment information.

Builder configurations. Saved system builds are stored server-side and associated with your account. Configurations are private by default and are not shared with other users unless you explicitly share them.

Usage data. We collect standard server logs including IP addresses, browser user-agent strings, page URLs, and timestamps. This data is used for debugging, abuse prevention, and understanding which parts of the site are most useful. Logs are retained for up to 90 days.

Cookies. We use a session cookie to keep you logged in. We do not use third-party tracking cookies or advertising cookies.

We use the information we collect to:

• Authenticate your account and secure your session
• Store and retrieve your saved homelab builds across devices
• Respond to support requests sent to our contact email
• Diagnose bugs and monitor site stability
• Understand aggregate usage patterns to guide feature development — for example, which part categories are searched most

We do not use your data for advertising targeting, behavioral profiling, or any purpose unrelated to operating the site.

HomelabConfig uses a small number of third-party services:

• Hosting infrastructure — servers and databases are hosted on cloud infrastructure providers. Data is stored in the United States.
• Affiliate retailers — clicking a "Where to Buy" link routes through an affiliate program. These retailers have their own privacy policies that apply once you leave our site. See the affiliate disclosure for details.

We do not embed third-party analytics scripts. We rely on server-side access logs for usage analysis.

Account data and saved configurations are retained for as long as your account exists. You can delete your account at any time by contacting us — we will delete your account data within 30 days of the request.

Server access logs are retained for up to 90 days and then automatically purged.

Depending on your location, you may have rights to access, correct, or delete the personal data we hold about you. To exercise any of these rights, contact us at the address below. We will respond within 30 days.