Effective date: 7 November 2026
1. Scope
This Privacy Policy applies to the website at webmin.app (the "Site"), including the home page, the Guide section and the legal pages. It describes how we handle information when you browse the Site. It does not cover the Webmin software itself, the servers you install it on, GitHub or any other website we link to. Each of those has its own terms and privacy practices.
2. Summary
- The Site has no user accounts, no contact forms, no comment system and no newsletter sign-up.
- We do not sell, rent or trade personal information.
- We do not use advertising trackers or cross-site profiling.
- Our hosting provider keeps standard technical logs for security and reliability.
- If you email us, we use your message only to reply.
3. Information we process
3.1 Technical log data
Like almost every website, the server that delivers the Site records basic request information automatically. This typically includes the IP address of the device making the request, the date and time, the page or file requested, the HTTP status code, the referring page if your browser sends one, and the browser user-agent string. These logs are used to deliver pages, diagnose errors, detect abuse such as automated attacks, and understand overall load. They are not used to identify individual visitors or to build profiles.
3.2 Email correspondence
If you write to [email protected], we receive your email address, your name if you include it, and the content of your message. We use this information solely to respond and to keep a record of the conversation in case you follow up.
3.3 Information we do not collect
We do not ask for, and do not want, server passwords, private keys, IP addresses of your infrastructure, configuration files containing secrets, or any other sensitive data about your systems. Please do not send such material by email. If you share a log or configuration excerpt for help, remove secrets and personal data first.
4. Cookies and local storage
The Site is a static website. It does not set cookies for tracking, advertising or analytics. Our JavaScript runs entirely in your browser to provide interface features such as the mobile menu, tabbed code examples, copy buttons and animations, and it does not transmit data to us or to third parties. Your hosting environment or browser may still store technical cookies required for security, such as protection against denial-of-service attacks, which are not used to identify you.
5. Legal basis for processing
Where data protection laws such as the GDPR or UK GDPR apply, we rely on our legitimate interests in operating a secure and reliable website for technical log data, and on your request and our legitimate interest in replying for email correspondence. We do not rely on consent for any tracking, because we do not perform tracking.
6. Third-party links and services
The Site links to external resources, most importantly the Webmin source repository on GitHub and the official Webmin website. When you follow such a link, or download a file hosted there, you leave the Site and the privacy practices of that service apply. We have no control over the data those services collect. Fonts and scripts used by the Site are served from our own domain rather than from third-party content delivery networks, so loading a page here does not expose your IP address to an external font or script provider.
7. Retention
Technical logs are kept for a limited period, normally no longer than 90 days, unless they are needed to investigate a specific security incident. Email correspondence is kept for as long as needed to handle your enquiry and any follow-up, and is then deleted or archived securely, generally within 24 months.
8. Security
The Site is served over HTTPS. Access to logs and to our mailbox is limited to the people who maintain the Site. No method of transmission or storage is perfectly secure, but we take reasonable technical and organisational measures appropriate to the small amount of data involved.
9. Your rights
Depending on where you live, you may have the right to request access to the personal information we hold about you, to ask for it to be corrected or deleted, to object to or restrict certain processing, and to receive a copy in a portable format. Because we hold very little personal data, most requests concern email correspondence. To exercise a right, write to [email protected]. We may need to verify your request, and we will respond within the time limits required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
10. Children
The Site is a technical resource for system administrators and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
11. International transfers
Our hosting and email providers may process data in countries other than your own. Where required, such transfers rely on appropriate safeguards offered by those providers, such as standard contractual clauses.
12. Changes to this policy
We may update this policy when the Site or the law changes. The effective date at the top of the page shows when it was last revised. Significant changes will be reflected clearly on this page.
13. Contact
Questions about this policy can be sent to [email protected]. More ways to reach us are listed on the contact page.