Legal
Privacy Policy
How Umbrel collects, uses, and protects personal data.
Last updated 2026-08-29
Who we are
Umbrel (“we”, “us”) is an editorial publication at umbrel.blog, covering self-hosting, Linux, Docker, and open source operations. Contact: editorial@umbrel.blog.
What this policy covers
This Privacy Policy explains what personal data we process when you visit the site, contact us, or interact with optional analytics or advertising features. It is written for readers in Brazil (LGPD) and visitors elsewhere.
Data we may process
- Technical logs — IP address, user agent, referrer, timestamps (server or CDN logs, retained for security and abuse prevention).
- Contact messages — email and message content you send to us.
- Cookies & similar tech — see our Cookie Policy.
- Analytics (optional) — aggregated usage metrics if you accept non-essential cookies.
- Advertising partners (if enabled) — networks such as Google Ads may process device identifiers under their policies; we disclose this when active.
We do not require an account to read Umbrel. We do not sell personal data.
Purposes and legal bases
- Operate and secure the site — legitimate interest / service delivery.
- Answer contact requests — consent or pre-contractual steps.
- Measure audience (optional) — consent where required.
- Show ads (if enabled) — consent where required.
- Comply with law — legal obligation.
Sharing
We may share data with infrastructure providers (hosting, CDN, DNS, email) acting as processors, and with advertising/analytics vendors you consent to. We may disclose information if required by law or to protect rights and safety.
Retention
Logs are kept for a short operational window unless needed longer for security. Contact emails stay while the conversation is active. Cookie lifetimes are in the Cookie Policy.
Your rights
You may request access, correction, deletion, portability, restriction, or objection, and withdraw consent. In Brazil (LGPD) you may also petition the ANPD. Contact editorial@umbrel.blog.
Children
Umbrel is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data.
International transfers
Hosting and tooling may process data outside your country. We use providers that offer appropriate safeguards when required.
Changes
We may update this policy. The “Last updated” date at the top will change when revisions are material.