Privacy Policy
Effective date: July 25, 2026
1. The principle
vConfig is self-hosted software: your device inventory, device credentials, configuration files, monitoring and log data live entirely on your own servers and are never transmitted to us. We process only the minimum data needed to run this website and the licensing service.
2. What we collect
| Context | Data | Purpose & retention |
|---|---|---|
| Purchasing a subscription | Email and billing details (collected and processed by Paddle; we receive only your email, order ID and subscription status) | License delivery and support; kept 3 years after subscription ends (tax records) |
| License activation & heartbeat | License key, instance fingerprint (a random identifier your server generates once and stores locally — it is not derived from your hostname, hardware or anything else about you), instance version, operating system, the server's own IP address, managed device count, source IP and country | Verifying entitlement and device limits, abuse prevention; the version and OS details let support diagnose without a round trip; kept 12 months |
| Install registration | A random install ID generated on your server (not derived from anything about you or your hardware), version, edition, operating system, managed device count, the server's own private LAN address (e.g. 192.168.1.10 — a private-range address that is duplicated worldwide, means nothing outside your network and cannot be used to reach or identify you; it only lets us tell apart several servers sharing one public IP), source IP and the two-letter country code your connection resolves to | Knowing how many copies are actually running, on which versions and in which markets — the free tier has no order record, so this is the only signal we have. Location is resolved to country level at our CDN edge; we run no third-party IP lookups and keep no geolocation database. No hostnames, no license key, and nothing about the devices you manage. Set VCONFIG_NO_TELEMETRY=1 to switch it off entirely. Sent on first start, whenever the version or edition changes, and otherwise at most once a day so we can tell a running copy from one that was installed and removed; kept 24 months |
| Update checks | Current version, source IP | Serving updates; logs kept 90 days |
| Visiting this site | Standard access logs (IP, user agent, path) | Security and troubleshooting; kept 30 days |
| Emailing support | Whatever you choose to send | Handling your request; kept 2 years after closure |
We use no advertising or tracking cookies. The only cookies remember your language and theme preference.
3. What we do not collect
The Software contains no telemetry: it does not report your device configurations, credentials, log contents or any network data. Activation heartbeats contain only the fields listed above.
4. Sharing
We share data only with processors required to operate: Paddle (payments and tax) and our email provider (transactional mail). We never sell personal data.
5. Your rights
You may request access to, correction or deletion of your personal data at any time (except billing records we must retain by law) by emailing [email protected]. EU/UK users have GDPR rights including portability and the right to lodge a complaint; our lawful bases are contract performance (licensing) and legitimate interest (abuse prevention).
6. Security
HTTPS is enforced site-wide; the licensing database is backed up encrypted; access is limited to those who operate the service.
7. Changes & contact
Updates to this policy will be announced on this page. Contact: [email protected]